From bfc2f5b078b332d0e07f12eabf439d74f9661637 Mon Sep 17 00:00:00 2001 From: Tom St Denis Date: Thu, 30 Dec 2004 23:55:53 +0000 Subject: [PATCH] added libtomcrypt-1.00 --- Doxyfile | 1155 ++++++++++++ authors | 55 - changes | 58 + crypt.tex | 383 ++-- cscope.tmplst | 219 --- demos/encrypt.c | 8 +- demos/hashsum.c | 2 +- demos/multi.c | 106 ++ demos/small.c | 3 +- demos/test/der_tests.c | 12 + demos/test/ecc_test.c | 27 +- demos/test/makefile | 4 +- demos/test/makefile.icc | 2 +- demos/test/makefile.msvc | 2 +- demos/test/makefile.shared | 2 +- demos/test/rsa_test.c | 42 +- demos/test/test.c | 37 +- demos/test/test.h | 3 +- demos/tv_gen.c | 8 +- demos/tv_gen.lo | 12 - demos/x86_prof.c | 21 +- doc/crypt.pdf | Bin 403993 -> 401670 bytes doc/footer.html | 4 + doc/header.html | 6 + eax_addheader.c | 25 - eax_encrypt_authenticate_memory.c | 53 - genlist.sh | 6 + hmac_memory.c | 58 - hmac_process.c | 29 - makefile | 254 +-- makefile.cygwin_dll | 166 +- makefile.icc | 196 +-- makefile.msvc | 148 +- makefile.shared | 211 +-- mycrypt_cipher.h | 396 ----- mycrypt_hash.h | 472 ----- mycrypt_misc.h | 17 - mycrypt_prng.h | 141 -- notes/cipher_tv.txt | 212 +++ notes/eax_tv.txt | 54 + notes/etc/saferp_optimizer.c | 173 ++ notes/ocb_tv.txt | 54 + notes/omac_tv.txt | 54 + notes/pmac_tv.txt | 54 + ocb_decrypt_verify_memory.c | 65 - ocb_done_encrypt.c | 29 - omac_done.c | 68 - omac_process.c | 53 - parsenames.pl | 20 + pmac_memory.c | 56 - pmac_process.c | 62 - pretty.build | 84 - rsa_decrypt_key.c | 77 - rsa_sign_hash.c | 59 - rsa_v15_decrypt_key.c | 66 - rsa_v15_encrypt_key.c | 54 - rsa_v15_sign_hash.c | 57 - sprng.c | 80 - aes.c => src/ciphers/aes/aes.c | 99 +- aes_tab.c => src/ciphers/aes/aes_tab.c | 18 +- src/ciphers/anubis.c | 1541 +++++++++++++++++ blowfish.c => src/ciphers/blowfish.c | 131 +- cast5.c => src/ciphers/cast5.c | 163 +- des.c => src/ciphers/des.c | 174 +- src/ciphers/khazad.c | 838 +++++++++ noekeon.c => src/ciphers/noekeon.c | 106 +- rc2.c => src/ciphers/rc2.c | 146 +- rc5.c => src/ciphers/rc5.c | 118 +- rc6.c => src/ciphers/rc6.c | 122 +- safer.c => src/ciphers/safer/safer.c | 50 +- safer_tab.c => src/ciphers/safer/safer_tab.c | 7 +- saferp.c => src/ciphers/safer/saferp.c | 78 +- skipjack.c => src/ciphers/skipjack.c | 96 +- twofish.c => src/ciphers/twofish/twofish.c | 206 ++- .../ciphers/twofish/twofish_tab.c | 4 + xtea.c => src/ciphers/xtea.c | 91 +- src/encauth/eax/eax_addheader.c | 34 + .../encauth/eax/eax_decrypt.c | 24 +- .../encauth/eax/eax_decrypt_verify_memory.c | 50 +- eax_done.c => src/encauth/eax/eax_done.c | 28 +- .../encauth/eax/eax_encrypt.c | 24 +- .../eax/eax_encrypt_authenticate_memory.c | 78 + eax_init.c => src/encauth/eax/eax_init.c | 60 +- eax_test.c => src/encauth/eax/eax_test.c | 11 +- .../encauth/ocb/ocb_decrypt.c | 24 +- src/encauth/ocb/ocb_decrypt_verify_memory.c | 82 + .../encauth/ocb/ocb_done_decrypt.c | 42 +- src/encauth/ocb/ocb_done_encrypt.c | 42 + .../encauth/ocb/ocb_encrypt.c | 22 +- .../ocb/ocb_encrypt_authenticate_memory.c | 40 +- ocb_init.c => src/encauth/ocb/ocb_init.c | 22 +- ocb_ntz.c => src/encauth/ocb/ocb_ntz.c | 13 +- .../encauth/ocb/ocb_shift_xor.c | 12 +- ocb_test.c => src/encauth/ocb/ocb_test.c | 11 +- s_ocb_done.c => src/encauth/ocb/s_ocb_done.c | 35 +- chc.c => src/hashes/chc/chc.c | 64 +- hash_file.c => src/hashes/helper/hash_file.c | 26 +- .../hashes/helper/hash_filehandle.c | 29 +- .../hashes/helper/hash_memory.c | 36 +- src/hashes/helper/hash_memory_multi.c | 82 + md2.c => src/hashes/md2.c | 60 +- md4.c => src/hashes/md4.c | 50 +- md5.c => src/hashes/md5.c | 70 +- rmd128.c => src/hashes/rmd128.c | 63 +- rmd160.c => src/hashes/rmd160.c | 87 +- sha1.c => src/hashes/sha1.c | 60 +- sha224.c => src/hashes/sha2/sha224.c | 33 +- sha256.c => src/hashes/sha2/sha256.c | 58 +- sha384.c => src/hashes/sha2/sha384.c | 35 +- sha512.c => src/hashes/sha2/sha512.c | 53 +- tiger.c => src/hashes/tiger.c | 51 +- whirl.c => src/hashes/whirl/whirl.c | 48 +- whirltab.c => src/hashes/whirl/whirltab.c | 20 +- ltc_tommath.h => src/headers/ltc_tommath.h | 4 +- mycrypt.h => src/headers/tomcrypt.h | 34 +- .../headers/tomcrypt_argchk.h | 8 +- mycrypt_cfg.h => src/headers/tomcrypt_cfg.h | 6 +- src/headers/tomcrypt_cipher.h | 497 ++++++ .../headers/tomcrypt_custom.h | 52 +- src/headers/tomcrypt_hash.h | 518 ++++++ .../headers/tomcrypt_macros.h | 82 +- src/headers/tomcrypt_misc.h | 17 + mycrypt_pk.h => src/headers/tomcrypt_pk.h | 171 +- mycrypt_pkcs.h => src/headers/tomcrypt_pkcs.h | 0 src/headers/tomcrypt_prng.h | 190 ++ .../headers/tommath_class.h | 9 +- .../headers/tommath_superclass.h | 2 +- hmac_done.c => src/mac/hmac/hmac_done.c | 51 +- hmac_file.c => src/mac/hmac/hmac_file.c | 34 +- hmac_init.c => src/mac/hmac/hmac_init.c | 44 +- src/mac/hmac/hmac_memory.c | 73 + src/mac/hmac/hmac_memory_multi.c | 88 + src/mac/hmac/hmac_process.c | 39 + hmac_test.c => src/mac/hmac/hmac_test.c | 29 +- src/mac/omac/omac_done.c | 79 + omac_file.c => src/mac/omac/omac_file.c | 30 +- omac_init.c => src/mac/omac/omac_init.c | 21 +- omac_memory.c => src/mac/omac/omac_memory.c | 41 +- src/mac/omac/omac_memory_multi.c | 86 + src/mac/omac/omac_process.c | 65 + omac_test.c => src/mac/omac/omac_test.c | 12 +- pmac_done.c => src/mac/pmac/pmac_done.c | 13 +- pmac_file.c => src/mac/pmac/pmac_file.c | 29 +- pmac_init.c => src/mac/pmac/pmac_init.c | 21 +- src/mac/pmac/pmac_memory.c | 70 + src/mac/pmac/pmac_memory_multi.c | 85 + pmac_ntz.c => src/mac/pmac/pmac_ntz.c | 10 +- src/mac/pmac/pmac_process.c | 73 + .../mac/pmac/pmac_shift_xor.c | 11 +- pmac_test.c => src/mac/pmac/pmac_test.c | 12 +- .../misc/base64/base64_decode.c | 26 +- .../misc/base64/base64_encode.c | 35 +- burn_stack.c => src/misc/burn_stack.c | 11 +- crypt.c => src/misc/crypt/crypt.c | 58 +- .../misc/crypt/crypt_argchk.c | 9 +- .../misc/crypt/crypt_cipher_descriptor.c | 9 +- .../misc/crypt/crypt_cipher_is_valid.c | 12 +- .../misc/crypt/crypt_find_cipher.c | 14 +- .../misc/crypt/crypt_find_cipher_any.c | 17 +- .../misc/crypt/crypt_find_cipher_id.c | 12 +- .../misc/crypt/crypt_find_hash.c | 14 +- .../misc/crypt/crypt_find_hash_any.c | 17 +- .../misc/crypt/crypt_find_hash_id.c | 12 +- .../misc/crypt/crypt_find_prng.c | 14 +- .../misc/crypt/crypt_hash_descriptor.c | 9 +- .../misc/crypt/crypt_hash_is_valid.c | 12 +- .../misc/crypt/crypt_prng_descriptor.c | 8 +- .../misc/crypt/crypt_prng_is_valid.c | 12 +- .../misc/crypt/crypt_register_cipher.c | 18 +- .../misc/crypt/crypt_register_hash.c | 20 +- .../misc/crypt/crypt_register_prng.c | 20 +- .../misc/crypt/crypt_unregister_cipher.c | 18 +- .../misc/crypt/crypt_unregister_hash.c | 18 +- .../misc/crypt/crypt_unregister_prng.c | 18 +- .../misc/error_to_string.c | 12 +- is_prime.c => src/misc/mpi/is_prime.c | 11 +- mpi.c => src/misc/mpi/mpi.c | 410 ++--- .../misc/mpi/mpi_to_ltc_error.c | 12 +- rand_prime.c => src/misc/mpi/rand_prime.c | 8 +- pkcs_5_1.c => src/misc/pkcs5/pkcs_5_1.c | 41 +- pkcs_5_2.c => src/misc/pkcs5/pkcs_5_2.c | 41 +- src/misc/zeromem.c | 29 + cbc_decrypt.c => src/modes/cbc/cbc_decrypt.c | 24 +- cbc_encrypt.c => src/modes/cbc/cbc_encrypt.c | 23 +- cbc_getiv.c => src/modes/cbc/cbc_getiv.c | 19 +- cbc_setiv.c => src/modes/cbc/cbc_setiv.c | 18 +- cbc_start.c => src/modes/cbc/cbc_start.c | 23 +- cfb_decrypt.c => src/modes/cfb/cfb_decrypt.c | 21 +- cfb_encrypt.c => src/modes/cfb/cfb_encrypt.c | 21 +- cfb_getiv.c => src/modes/cfb/cfb_getiv.c | 19 +- cfb_setiv.c => src/modes/cfb/cfb_setiv.c | 18 +- cfb_start.c => src/modes/cfb/cfb_start.c | 24 +- ctr_decrypt.c => src/modes/ctr/ctr_decrypt.c | 21 +- ctr_encrypt.c => src/modes/ctr/ctr_encrypt.c | 22 +- ctr_getiv.c => src/modes/ctr/ctr_getiv.c | 19 +- ctr_setiv.c => src/modes/ctr/ctr_setiv.c | 19 +- ctr_start.c => src/modes/ctr/ctr_start.c | 24 +- ecb_decrypt.c => src/modes/ecb/ecb_decrypt.c | 22 +- ecb_encrypt.c => src/modes/ecb/ecb_encrypt.c | 20 +- ecb_start.c => src/modes/ecb/ecb_start.c | 21 +- ofb_decrypt.c => src/modes/ofb/ofb_decrypt.c | 21 +- ofb_encrypt.c => src/modes/ofb/ofb_encrypt.c | 21 +- ofb_getiv.c => src/modes/ofb/ofb_getiv.c | 19 +- ofb_setiv.c => src/modes/ofb/ofb_setiv.c | 17 +- ofb_start.c => src/modes/ofb/ofb_start.c | 24 +- .../pk/asn1/der/der_decode_integer.c | 23 +- .../pk/asn1/der/der_encode_integer.c | 24 +- .../pk/asn1/der/der_get_multi_integer.c | 23 +- .../pk/asn1/der/der_length_integer.c | 19 +- .../pk/asn1/der/der_put_multi_integer.c | 32 +- dh.c => src/pk/dh/dh.c | 88 +- dh_sys.c => src/pk/dh/dh_sys.c | 180 +- dsa_export.c => src/pk/dsa/dsa_export.c | 21 +- dsa_free.c => src/pk/dsa/dsa_free.c | 13 +- dsa_import.c => src/pk/dsa/dsa_import.c | 20 +- dsa_make_key.c => src/pk/dsa/dsa_make_key.c | 32 +- dsa_sign_hash.c => src/pk/dsa/dsa_sign_hash.c | 72 +- .../pk/dsa/dsa_verify_hash.c | 67 +- .../pk/dsa/dsa_verify_key.c | 20 +- ecc.c => src/pk/ecc/ecc.c | 102 +- ecc_sys.c => src/pk/ecc/ecc_sys.c | 149 +- .../pk/packet_store_header.c | 4 +- .../pk/packet_valid_header.c | 4 +- pkcs_1_i2osp.c => src/pk/pkcs1/pkcs_1_i2osp.c | 15 +- pkcs_1_mgf1.c => src/pk/pkcs1/pkcs_1_mgf1.c | 32 +- .../pk/pkcs1/pkcs_1_oaep_decode.c | 50 +- .../pk/pkcs1/pkcs_1_oaep_encode.c | 45 +- pkcs_1_os2ip.c => src/pk/pkcs1/pkcs_1_os2ip.c | 14 +- .../pk/pkcs1/pkcs_1_pss_decode.c | 49 +- .../pk/pkcs1/pkcs_1_pss_encode.c | 48 +- .../pk/pkcs1/pkcs_1_v15_es_decode.c | 23 +- .../pk/pkcs1/pkcs_1_v15_es_encode.c | 24 +- .../pk/pkcs1/pkcs_1_v15_sa_decode.c | 24 +- .../pk/pkcs1/pkcs_1_v15_sa_encode.c | 23 +- src/pk/rsa/rsa_decrypt_key.c | 89 + .../pk/rsa/rsa_encrypt_key.c | 39 +- rsa_export.c => src/pk/rsa/rsa_export.c | 21 +- rsa_exptmod.c => src/pk/rsa/rsa_exptmod.c | 52 +- rsa_free.c => src/pk/rsa/rsa_free.c | 13 +- rsa_import.c => src/pk/rsa/rsa_import.c | 30 +- rsa_make_key.c => src/pk/rsa/rsa_make_key.c | 18 +- src/pk/rsa/rsa_sign_hash.c | 75 + src/pk/rsa/rsa_v15_decrypt_key.c | 73 + src/pk/rsa/rsa_v15_encrypt_key.c | 68 + src/pk/rsa/rsa_v15_sign_hash.c | 66 + .../pk/rsa/rsa_v15_verify_hash.c | 37 +- .../pk/rsa/rsa_verify_hash.c | 38 +- fortuna.c => src/prngs/fortuna.c | 127 +- rc4.c => src/prngs/rc4.c | 100 +- rng_get_bytes.c => src/prngs/rng_get_bytes.c | 29 +- rng_make_prng.c => src/prngs/rng_make_prng.c | 20 +- sober128.c => src/prngs/sober128.c | 143 +- sober128tab.c => src/prngs/sober128tab.c | 6 +- src/prngs/sprng.c | 132 ++ yarrow.c => src/prngs/yarrow.c | 93 +- tim_exptmod.c | 77 - zeromem.c | 19 - 257 files changed, 12657 insertions(+), 5352 deletions(-) create mode 100644 Doxyfile delete mode 100644 authors delete mode 100644 cscope.tmplst create mode 100644 demos/multi.c delete mode 100644 demos/tv_gen.lo create mode 100644 doc/footer.html create mode 100644 doc/header.html delete mode 100644 eax_addheader.c delete mode 100644 eax_encrypt_authenticate_memory.c create mode 100644 genlist.sh delete mode 100644 hmac_memory.c delete mode 100644 hmac_process.c delete mode 100644 mycrypt_cipher.h delete mode 100644 mycrypt_hash.h delete mode 100644 mycrypt_misc.h delete mode 100644 mycrypt_prng.h create mode 100644 notes/etc/saferp_optimizer.c delete mode 100644 ocb_decrypt_verify_memory.c delete mode 100644 ocb_done_encrypt.c delete mode 100644 omac_done.c delete mode 100644 omac_process.c create mode 100644 parsenames.pl delete mode 100644 pmac_memory.c delete mode 100644 pmac_process.c delete mode 100644 pretty.build delete mode 100644 rsa_decrypt_key.c delete mode 100644 rsa_sign_hash.c delete mode 100644 rsa_v15_decrypt_key.c delete mode 100644 rsa_v15_encrypt_key.c delete mode 100644 rsa_v15_sign_hash.c delete mode 100644 sprng.c rename aes.c => src/ciphers/aes/aes.c (88%) rename aes_tab.c => src/ciphers/aes/aes_tab.c (99%) create mode 100644 src/ciphers/anubis.c rename blowfish.c => src/ciphers/blowfish.c (88%) rename cast5.c => src/ciphers/cast5.c (91%) rename des.c => src/ciphers/des.c (97%) create mode 100644 src/ciphers/khazad.c rename noekeon.c => src/ciphers/noekeon.c (69%) rename rc2.c => src/ciphers/rc2.c (70%) rename rc5.c => src/ciphers/rc5.c (72%) rename rc6.c => src/ciphers/rc6.c (76%) rename safer.c => src/ciphers/safer/safer.c (95%) rename safer_tab.c => src/ciphers/safer/safer_tab.c (97%) rename saferp.c => src/ciphers/safer/saferp.c (92%) rename skipjack.c => src/ciphers/skipjack.c (78%) rename twofish.c => src/ciphers/twofish/twofish.c (81%) rename twofish_tab.c => src/ciphers/twofish/twofish_tab.c (99%) rename xtea.c => src/ciphers/xtea.c (54%) create mode 100644 src/encauth/eax/eax_addheader.c rename eax_decrypt.c => src/encauth/eax/eax_decrypt.c (56%) rename eax_decrypt_verify_memory.c => src/encauth/eax/eax_decrypt_verify_memory.c (52%) rename eax_done.c => src/encauth/eax/eax_done.c (72%) rename eax_encrypt.c => src/encauth/eax/eax_encrypt.c (55%) create mode 100644 src/encauth/eax/eax_encrypt_authenticate_memory.c rename eax_init.c => src/encauth/eax/eax_init.c (66%) rename eax_test.c => src/encauth/eax/eax_test.c (97%) rename ocb_decrypt.c => src/encauth/ocb/ocb_decrypt.c (71%) create mode 100644 src/encauth/ocb/ocb_decrypt_verify_memory.c rename ocb_done_decrypt.c => src/encauth/ocb/ocb_done_decrypt.c (53%) create mode 100644 src/encauth/ocb/ocb_done_encrypt.c rename ocb_encrypt.c => src/encauth/ocb/ocb_encrypt.c (72%) rename ocb_encrypt_authenticate_memory.c => src/encauth/ocb/ocb_encrypt_authenticate_memory.c (54%) rename ocb_init.c => src/encauth/ocb/ocb_init.c (85%) rename ocb_ntz.c => src/encauth/ocb/ocb_ntz.c (64%) rename ocb_shift_xor.c => src/encauth/ocb/ocb_shift_xor.c (70%) rename ocb_test.c => src/encauth/ocb/ocb_test.c (97%) rename s_ocb_done.c => src/encauth/ocb/s_ocb_done.c (75%) rename chc.c => src/hashes/chc/chc.c (80%) rename hash_file.c => src/hashes/helper/hash_file.c (53%) rename hash_filehandle.c => src/hashes/helper/hash_filehandle.c (60%) rename hash_memory.c => src/hashes/helper/hash_memory.c (50%) create mode 100644 src/hashes/helper/hash_memory_multi.c rename md2.c => src/hashes/md2.c (81%) rename md4.c => src/hashes/md4.c (87%) rename md5.c => src/hashes/md5.c (86%) rename rmd128.c => src/hashes/rmd128.c (89%) rename rmd160.c => src/hashes/rmd160.c (89%) rename sha1.c => src/hashes/sha1.c (79%) rename sha224.c => src/hashes/sha2/sha224.c (74%) rename sha256.c => src/hashes/sha2/sha256.c (90%) rename sha384.c => src/hashes/sha2/sha384.c (79%) rename sha512.c => src/hashes/sha2/sha512.c (89%) rename tiger.c => src/hashes/tiger.c (97%) rename whirl.c => src/hashes/whirl/whirl.c (89%) rename whirltab.c => src/hashes/whirl/whirltab.c (99%) rename ltc_tommath.h => src/headers/ltc_tommath.h (99%) rename mycrypt.h => src/headers/tomcrypt.h (80%) rename mycrypt_argchk.h => src/headers/tomcrypt_argchk.h (56%) rename mycrypt_cfg.h => src/headers/tomcrypt_cfg.h (97%) create mode 100644 src/headers/tomcrypt_cipher.h rename mycrypt_custom.h => src/headers/tomcrypt_custom.h (72%) create mode 100644 src/headers/tomcrypt_hash.h rename mycrypt_macros.h => src/headers/tomcrypt_macros.h (85%) create mode 100644 src/headers/tomcrypt_misc.h rename mycrypt_pk.h => src/headers/tomcrypt_pk.h (53%) rename mycrypt_pkcs.h => src/headers/tomcrypt_pkcs.h (100%) create mode 100644 src/headers/tomcrypt_prng.h rename tommath_class.h => src/headers/tommath_class.h (99%) rename tommath_superclass.h => src/headers/tommath_superclass.h (95%) rename hmac_done.c => src/mac/hmac/hmac_done.c (63%) rename hmac_file.c => src/mac/hmac/hmac_file.c (62%) rename hmac_init.c => src/mac/hmac/hmac_init.c (69%) create mode 100644 src/mac/hmac/hmac_memory.c create mode 100644 src/mac/hmac/hmac_memory_multi.c create mode 100644 src/mac/hmac/hmac_process.c rename hmac_test.c => src/mac/hmac/hmac_test.c (93%) create mode 100644 src/mac/omac/omac_done.c rename omac_file.c => src/mac/omac/omac_file.c (62%) rename omac_init.c => src/mac/omac/omac_init.c (82%) rename omac_memory.c => src/mac/omac/omac_memory.c (50%) create mode 100644 src/mac/omac/omac_memory_multi.c create mode 100644 src/mac/omac/omac_process.c rename omac_test.c => src/mac/omac/omac_test.c (94%) rename pmac_done.c => src/mac/pmac/pmac_done.c (88%) rename pmac_file.c => src/mac/pmac/pmac_file.c (61%) rename pmac_init.c => src/mac/pmac/pmac_init.c (87%) create mode 100644 src/mac/pmac/pmac_memory.c create mode 100644 src/mac/pmac/pmac_memory_multi.c rename pmac_ntz.c => src/mac/pmac/pmac_ntz.c (78%) create mode 100644 src/mac/pmac/pmac_process.c rename pmac_shift_xor.c => src/mac/pmac/pmac_shift_xor.c (70%) rename pmac_test.c => src/mac/pmac/pmac_test.c (94%) rename base64_decode.c => src/misc/base64/base64_decode.c (78%) rename base64_encode.c => src/misc/base64/base64_encode.c (61%) rename burn_stack.c => src/misc/burn_stack.c (76%) rename crypt.c => src/misc/crypt/crypt.c (77%) rename crypt_argchk.c => src/misc/crypt/crypt_argchk.c (74%) rename crypt_cipher_descriptor.c => src/misc/crypt/crypt_cipher_descriptor.c (66%) rename crypt_cipher_is_valid.c => src/misc/crypt/crypt_cipher_is_valid.c (68%) rename crypt_find_cipher.c => src/misc/crypt/crypt_find_cipher.c (66%) rename crypt_find_cipher_any.c => src/misc/crypt/crypt_find_cipher_any.c (60%) rename crypt_find_cipher_id.c => src/misc/crypt/crypt_find_cipher_id.c (69%) rename crypt_find_hash.c => src/misc/crypt/crypt_find_hash.c (69%) rename crypt_find_hash_any.c => src/misc/crypt/crypt_find_hash_any.c (64%) rename crypt_find_hash_id.c => src/misc/crypt/crypt_find_hash_id.c (70%) rename crypt_find_prng.c => src/misc/crypt/crypt_find_prng.c (69%) rename crypt_hash_descriptor.c => src/misc/crypt/crypt_hash_descriptor.c (67%) rename crypt_hash_is_valid.c => src/misc/crypt/crypt_hash_is_valid.c (69%) rename crypt_prng_descriptor.c => src/misc/crypt/crypt_prng_descriptor.c (67%) rename crypt_prng_is_valid.c => src/misc/crypt/crypt_prng_is_valid.c (69%) rename crypt_register_cipher.c => src/misc/crypt/crypt_register_cipher.c (60%) rename crypt_register_hash.c => src/misc/crypt/crypt_register_hash.c (54%) rename crypt_register_prng.c => src/misc/crypt/crypt_register_prng.c (54%) rename crypt_unregister_cipher.c => src/misc/crypt/crypt_unregister_cipher.c (57%) rename crypt_unregister_hash.c => src/misc/crypt/crypt_unregister_hash.c (56%) rename crypt_unregister_prng.c => src/misc/crypt/crypt_unregister_prng.c (56%) rename error_to_string.c => src/misc/error_to_string.c (81%) rename is_prime.c => src/misc/mpi/is_prime.c (79%) rename mpi.c => src/misc/mpi/mpi.c (97%) rename mpi_to_ltc_error.c => src/misc/mpi/mpi_to_ltc_error.c (71%) rename rand_prime.c => src/misc/mpi/rand_prime.c (92%) rename pkcs_5_1.c => src/misc/pkcs5/pkcs_5_1.c (68%) rename pkcs_5_2.c => src/misc/pkcs5/pkcs_5_2.c (73%) create mode 100644 src/misc/zeromem.c rename cbc_decrypt.c => src/modes/cbc/cbc_decrypt.c (75%) rename cbc_encrypt.c => src/modes/cbc/cbc_encrypt.c (75%) rename cbc_getiv.c => src/modes/cbc/cbc_getiv.c (59%) rename cbc_setiv.c => src/modes/cbc/cbc_setiv.c (63%) rename cbc_start.c => src/modes/cbc/cbc_start.c (62%) rename cfb_decrypt.c => src/modes/cfb/cfb_decrypt.c (74%) rename cfb_encrypt.c => src/modes/cfb/cfb_encrypt.c (74%) rename cfb_getiv.c => src/modes/cfb/cfb_getiv.c (59%) rename cfb_setiv.c => src/modes/cfb/cfb_setiv.c (70%) rename cfb_start.c => src/modes/cfb/cfb_start.c (64%) rename ctr_decrypt.c => src/modes/ctr/ctr_decrypt.c (57%) rename ctr_encrypt.c => src/modes/ctr/ctr_encrypt.c (82%) rename ctr_getiv.c => src/modes/ctr/ctr_getiv.c (59%) rename ctr_setiv.c => src/modes/ctr/ctr_setiv.c (71%) rename ctr_start.c => src/modes/ctr/ctr_start.c (65%) rename ecb_decrypt.c => src/modes/ecb/ecb_decrypt.c (62%) rename ecb_encrypt.c => src/modes/ecb/ecb_encrypt.c (65%) rename ecb_start.c => src/modes/ecb/ecb_start.c (58%) rename ofb_decrypt.c => src/modes/ofb/ofb_decrypt.c (57%) rename ofb_encrypt.c => src/modes/ofb/ofb_encrypt.c (73%) rename ofb_getiv.c => src/modes/ofb/ofb_getiv.c (59%) rename ofb_setiv.c => src/modes/ofb/ofb_setiv.c (69%) rename ofb_start.c => src/modes/ofb/ofb_start.c (61%) rename der_decode_integer.c => src/pk/asn1/der/der_decode_integer.c (82%) rename der_encode_integer.c => src/pk/asn1/der/der_encode_integer.c (81%) rename der_get_multi_integer.c => src/pk/asn1/der/der_get_multi_integer.c (69%) rename der_length_integer.c => src/pk/asn1/der/der_length_integer.c (72%) rename der_put_multi_integer.c => src/pk/asn1/der/der_put_multi_integer.c (56%) rename dh.c => src/pk/dh/dh.c (83%) rename dh_sys.c => src/pk/dh/dh_sys.c (74%) rename dsa_export.c => src/pk/dsa/dsa_export.c (72%) rename dsa_free.c => src/pk/dsa/dsa_free.c (69%) rename dsa_import.c => src/pk/dsa/dsa_import.c (74%) rename dsa_make_key.c => src/pk/dsa/dsa_make_key.c (85%) rename dsa_sign_hash.c => src/pk/dsa/dsa_sign_hash.c (73%) rename dsa_verify_hash.c => src/pk/dsa/dsa_verify_hash.c (62%) rename dsa_verify_key.c => src/pk/dsa/dsa_verify_key.c (85%) rename ecc.c => src/pk/ecc/ecc.c (92%) rename ecc_sys.c => src/pk/ecc/ecc_sys.c (76%) rename packet_store_header.c => src/pk/packet_store_header.c (93%) rename packet_valid_header.c => src/pk/packet_valid_header.c (93%) rename pkcs_1_i2osp.c => src/pk/pkcs1/pkcs_1_i2osp.c (72%) rename pkcs_1_mgf1.c => src/pk/pkcs1/pkcs_1_mgf1.c (75%) rename pkcs_1_oaep_decode.c => src/pk/pkcs1/pkcs_1_oaep_decode.c (77%) rename pkcs_1_oaep_encode.c => src/pk/pkcs1/pkcs_1_oaep_encode.c (77%) rename pkcs_1_os2ip.c => src/pk/pkcs1/pkcs_1_os2ip.c (65%) rename pkcs_1_pss_decode.c => src/pk/pkcs1/pkcs_1_pss_decode.c (78%) rename pkcs_1_pss_encode.c => src/pk/pkcs1/pkcs_1_pss_encode.c (78%) rename pkcs_1_v15_es_decode.c => src/pk/pkcs1/pkcs_1_v15_es_decode.c (68%) rename pkcs_1_v15_es_encode.c => src/pk/pkcs1/pkcs_1_v15_es_encode.c (66%) rename pkcs_1_v15_sa_decode.c => src/pk/pkcs1/pkcs_1_v15_sa_decode.c (73%) rename pkcs_1_v15_sa_encode.c => src/pk/pkcs1/pkcs_1_v15_sa_encode.c (72%) create mode 100644 src/pk/rsa/rsa_decrypt_key.c rename rsa_encrypt_key.c => src/pk/rsa/rsa_encrypt_key.c (53%) rename rsa_export.c => src/pk/rsa/rsa_export.c (69%) rename rsa_exptmod.c => src/pk/rsa/rsa_exptmod.c (63%) rename rsa_free.c => src/pk/rsa/rsa_free.c (73%) rename rsa_import.c => src/pk/rsa/rsa_import.c (71%) rename rsa_make_key.c => src/pk/rsa/rsa_make_key.c (89%) create mode 100644 src/pk/rsa/rsa_sign_hash.c create mode 100644 src/pk/rsa/rsa_v15_decrypt_key.c create mode 100644 src/pk/rsa/rsa_v15_encrypt_key.c create mode 100644 src/pk/rsa/rsa_v15_sign_hash.c rename rsa_v15_verify_hash.c => src/pk/rsa/rsa_v15_verify_hash.c (55%) rename rsa_verify_hash.c => src/pk/rsa/rsa_verify_hash.c (53%) rename fortuna.c => src/prngs/fortuna.c (74%) rename rc4.c => src/prngs/rc4.c (63%) rename rng_get_bytes.c => src/prngs/rng_get_bytes.c (79%) rename rng_make_prng.c => src/prngs/rng_make_prng.c (70%) rename sober128.c => src/prngs/sober128.c (74%) rename sober128tab.c => src/prngs/sober128tab.c (98%) create mode 100644 src/prngs/sprng.c rename yarrow.c => src/prngs/yarrow.c (73%) delete mode 100644 tim_exptmod.c delete mode 100644 zeromem.c diff --git a/Doxyfile b/Doxyfile new file mode 100644 index 0000000..1b70a62 --- /dev/null +++ b/Doxyfile @@ -0,0 +1,1155 @@ +# Doxyfile 1.3.9.1 + +# This file describes the settings to be used by the documentation system +# doxygen (www.doxygen.org) for a project +# +# All text after a hash (#) is considered a comment and will be ignored +# The format is: +# TAG = value [value, ...] +# For lists items can also be appended using: +# TAG += value [value, ...] +# Values that contain spaces should be placed between quotes (" ") + +#--------------------------------------------------------------------------- +# Project related configuration options +#--------------------------------------------------------------------------- + +# The PROJECT_NAME tag is a single word (or a sequence of words surrounded +# by quotes) that should identify the project. + +PROJECT_NAME = LibTomCrypt + +# The PROJECT_NUMBER tag can be used to enter a project or revision number. +# This could be handy for archiving the generated documentation or +# if some version control system is used. + +PROJECT_NUMBER = 1.00rc1 + +# The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute) +# base path where the generated documentation will be put. +# If a relative path is entered, it will be relative to the location +# where doxygen was started. If left blank the current directory will be used. + +OUTPUT_DIRECTORY = doc/doxygen + +# If the CREATE_SUBDIRS tag is set to YES, then doxygen will create +# 4096 sub-directories (in 2 levels) under the output directory of each output +# format and will distribute the generated files over these directories. +# Enabling this option can be useful when feeding doxygen a huge amount of source +# files, where putting all generated files in the same directory would otherwise +# cause performance problems for the file system. + +CREATE_SUBDIRS = NO + +# The OUTPUT_LANGUAGE tag is used to specify the language in which all +# documentation generated by doxygen is written. Doxygen will use this +# information to generate all constant output in the proper language. +# The default language is English, other supported languages are: +# Brazilian, Catalan, Chinese, Chinese-Traditional, Croatian, Czech, Danish, +# Dutch, Finnish, French, German, Greek, Hungarian, Italian, Japanese, +# Japanese-en (Japanese with English messages), Korean, Korean-en, Norwegian, +# Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovene, Spanish, +# Swedish, and Ukrainian. + +OUTPUT_LANGUAGE = English + +# This tag can be used to specify the encoding used in the generated output. +# The encoding is not always determined by the language that is chosen, +# but also whether or not the output is meant for Windows or non-Windows users. +# In case there is a difference, setting the USE_WINDOWS_ENCODING tag to YES +# forces the Windows encoding (this is the default for the Windows binary), +# whereas setting the tag to NO uses a Unix-style encoding (the default for +# all platforms other than Windows). + +USE_WINDOWS_ENCODING = NO + +# If the BRIEF_MEMBER_DESC tag is set to YES (the default) Doxygen will +# include brief member descriptions after the members that are listed in +# the file and class documentation (similar to JavaDoc). +# Set to NO to disable this. + +BRIEF_MEMBER_DESC = YES + +# If the REPEAT_BRIEF tag is set to YES (the default) Doxygen will prepend +# the brief description of a member or function before the detailed description. +# Note: if both HIDE_UNDOC_MEMBERS and BRIEF_MEMBER_DESC are set to NO, the +# brief descriptions will be completely suppressed. + +REPEAT_BRIEF = YES + +# This tag implements a quasi-intelligent brief description abbreviator +# that is used to form the text in various listings. Each string +# in this list, if found as the leading text of the brief description, will be +# stripped from the text and the result after processing the whole list, is used +# as the annotated text. Otherwise, the brief description is used as-is. If left +# blank, the following values are used ("$name" is automatically replaced with the +# name of the entity): "The $name class" "The $name widget" "The $name file" +# "is" "provides" "specifies" "contains" "represents" "a" "an" "the" + +ABBREVIATE_BRIEF = + +# If the ALWAYS_DETAILED_SEC and REPEAT_BRIEF tags are both set to YES then +# Doxygen will generate a detailed section even if there is only a brief +# description. + +ALWAYS_DETAILED_SEC = NO + +# If the INLINE_INHERITED_MEMB tag is set to YES, doxygen will show all inherited +# members of a class in the documentation of that class as if those members were +# ordinary class members. Constructors, destructors and assignment operators of +# the base classes will not be shown. + +INLINE_INHERITED_MEMB = NO + +# If the FULL_PATH_NAMES tag is set to YES then Doxygen will prepend the full +# path before files name in the file list and in the header files. If set +# to NO the shortest path that makes the file name unique will be used. + +FULL_PATH_NAMES = YES + +# If the FULL_PATH_NAMES tag is set to YES then the STRIP_FROM_PATH tag +# can be used to strip a user-defined part of the path. Stripping is +# only done if one of the specified strings matches the left-hand part of +# the path. The tag can be used to show relative paths in the file list. +# If left blank the directory from which doxygen is run is used as the +# path to strip. + +STRIP_FROM_PATH = src + +# The STRIP_FROM_INC_PATH tag can be used to strip a user-defined part of +# the path mentioned in the documentation of a class, which tells +# the reader which header file to include in order to use a class. +# If left blank only the name of the header file containing the class +# definition is used. Otherwise one should specify the include paths that +# are normally passed to the compiler using the -I flag. + +STRIP_FROM_INC_PATH = src/headers + +# If the SHORT_NAMES tag is set to YES, doxygen will generate much shorter +# (but less readable) file names. This can be useful is your file systems +# doesn't support long names like on DOS, Mac, or CD-ROM. + +SHORT_NAMES = NO + +# If the JAVADOC_AUTOBRIEF tag is set to YES then Doxygen +# will interpret the first line (until the first dot) of a JavaDoc-style +# comment as the brief description. If set to NO, the JavaDoc +# comments will behave just like the Qt-style comments (thus requiring an +# explicit @brief command for a brief description. + +JAVADOC_AUTOBRIEF = YES + +# The MULTILINE_CPP_IS_BRIEF tag can be set to YES to make Doxygen +# treat a multi-line C++ special comment block (i.e. a block of //! or /// +# comments) as a brief description. This used to be the default behaviour. +# The new default is to treat a multi-line C++ comment block as a detailed +# description. Set this tag to YES if you prefer the old behaviour instead. + +MULTILINE_CPP_IS_BRIEF = NO + +# If the DETAILS_AT_TOP tag is set to YES then Doxygen +# will output the detailed description near the top, like JavaDoc. +# If set to NO, the detailed description appears after the member +# documentation. + +DETAILS_AT_TOP = YES + +# If the INHERIT_DOCS tag is set to YES (the default) then an undocumented +# member inherits the documentation from any documented member that it +# re-implements. + +INHERIT_DOCS = YES + +# If member grouping is used in the documentation and the DISTRIBUTE_GROUP_DOC +# tag is set to YES, then doxygen will reuse the documentation of the first +# member in the group (if any) for the other members of the group. By default +# all members of a group must be documented explicitly. + +DISTRIBUTE_GROUP_DOC = NO + +# The TAB_SIZE tag can be used to set the number of spaces in a tab. +# Doxygen uses this value to replace tabs by spaces in code fragments. + +TAB_SIZE = 4 + +# This tag can be used to specify a number of aliases that acts +# as commands in the documentation. An alias has the form "name=value". +# For example adding "sideeffect=\par Side Effects:\n" will allow you to +# put the command \sideeffect (or @sideeffect) in the documentation, which +# will result in a user-defined paragraph with heading "Side Effects:". +# You can put \n's in the value part of an alias to insert newlines. + +ALIASES = + +# Set the OPTIMIZE_OUTPUT_FOR_C tag to YES if your project consists of C sources +# only. Doxygen will then generate output that is more tailored for C. +# For instance, some of the names that are used will be different. The list +# of all members will be omitted, etc. + +OPTIMIZE_OUTPUT_FOR_C = YES + +# Set the OPTIMIZE_OUTPUT_JAVA tag to YES if your project consists of Java sources +# only. Doxygen will then generate output that is more tailored for Java. +# For instance, namespaces will be presented as packages, qualified scopes +# will look different, etc. + +OPTIMIZE_OUTPUT_JAVA = NO + +# Set the SUBGROUPING tag to YES (the default) to allow class member groups of +# the same type (for instance a group of public functions) to be put as a +# subgroup of that type (e.g. under the Public Functions section). Set it to +# NO to prevent subgrouping. Alternatively, this can be done per class using +# the \nosubgrouping command. + +SUBGROUPING = YES + +#--------------------------------------------------------------------------- +# Build related configuration options +#--------------------------------------------------------------------------- + +# If the EXTRACT_ALL tag is set to YES doxygen will assume all entities in +# documentation are documented, even if no documentation was available. +# Private class members and static file members will be hidden unless +# the EXTRACT_PRIVATE and EXTRACT_STATIC tags are set to YES + +EXTRACT_ALL = YES + +# If the EXTRACT_PRIVATE tag is set to YES all private members of a class +# will be included in the documentation. + +EXTRACT_PRIVATE = YES + +# If the EXTRACT_STATIC tag is set to YES all static members of a file +# will be included in the documentation. + +EXTRACT_STATIC = YES + +# If the EXTRACT_LOCAL_CLASSES tag is set to YES classes (and structs) +# defined locally in source files will be included in the documentation. +# If set to NO only classes defined in header files are included. + +EXTRACT_LOCAL_CLASSES = YES + +# This flag is only useful for Objective-C code. When set to YES local +# methods, which are defined in the implementation section but not in +# the interface are included in the documentation. +# If set to NO (the default) only methods in the interface are included. + +EXTRACT_LOCAL_METHODS = YES + +# If the HIDE_UNDOC_MEMBERS tag is set to YES, Doxygen will hide all +# undocumented members of documented classes, files or namespaces. +# If set to NO (the default) these members will be included in the +# various overviews, but no documentation section is generated. +# This option has no effect if EXTRACT_ALL is enabled. + +HIDE_UNDOC_MEMBERS = NO + +# If the HIDE_UNDOC_CLASSES tag is set to YES, Doxygen will hide all +# undocumented classes that are normally visible in the class hierarchy. +# If set to NO (the default) these classes will be included in the various +# overviews. This option has no effect if EXTRACT_ALL is enabled. + +HIDE_UNDOC_CLASSES = NO + +# If the HIDE_FRIEND_COMPOUNDS tag is set to YES, Doxygen will hide all +# friend (class|struct|union) declarations. +# If set to NO (the default) these declarations will be included in the +# documentation. + +HIDE_FRIEND_COMPOUNDS = NO + +# If the HIDE_IN_BODY_DOCS tag is set to YES, Doxygen will hide any +# documentation blocks found inside the body of a function. +# If set to NO (the default) these blocks will be appended to the +# function's detailed documentation block. + +HIDE_IN_BODY_DOCS = NO + +# The INTERNAL_DOCS tag determines if documentation +# that is typed after a \internal command is included. If the tag is set +# to NO (the default) then the documentation will be excluded. +# Set it to YES to include the internal documentation. + +INTERNAL_DOCS = NO + +# If the CASE_SENSE_NAMES tag is set to NO then Doxygen will only generate +# file names in lower-case letters. If set to YES upper-case letters are also +# allowed. This is useful if you have classes or files whose names only differ +# in case and if your file system supports case sensitive file names. Windows +# and Mac users are advised to set this option to NO. + +CASE_SENSE_NAMES = YES + +# If the HIDE_SCOPE_NAMES tag is set to NO (the default) then Doxygen +# will show members with their full class and namespace scopes in the +# documentation. If set to YES the scope will be hidden. + +HIDE_SCOPE_NAMES = NO + +# If the SHOW_INCLUDE_FILES tag is set to YES (the default) then Doxygen +# will put a list of the files that are included by a file in the documentation +# of that file. + +SHOW_INCLUDE_FILES = YES + +# If the INLINE_INFO tag is set to YES (the default) then a tag [inline] +# is inserted in the documentation for inline members. + +INLINE_INFO = YES + +# If the SORT_MEMBER_DOCS tag is set to YES (the default) then doxygen +# will sort the (detailed) documentation of file and class members +# alphabetically by member name. If set to NO the members will appear in +# declaration order. + +SORT_MEMBER_DOCS = YES + +# If the SORT_BRIEF_DOCS tag is set to YES then doxygen will sort the +# brief documentation of file, namespace and class members alphabetically +# by member name. If set to NO (the default) the members will appear in +# declaration order. + +SORT_BRIEF_DOCS = NO + +# If the SORT_BY_SCOPE_NAME tag is set to YES, the class list will be +# sorted by fully-qualified names, including namespaces. If set to +# NO (the default), the class list will be sorted only by class name, +# not including the namespace part. +# Note: This option is not very useful if HIDE_SCOPE_NAMES is set to YES. +# Note: This option applies only to the class list, not to the +# alphabetical list. + +SORT_BY_SCOPE_NAME = YES + +# The GENERATE_TODOLIST tag can be used to enable (YES) or +# disable (NO) the todo list. This list is created by putting \todo +# commands in the documentation. + +GENERATE_TODOLIST = YES + +# The GENERATE_TESTLIST tag can be used to enable (YES) or +# disable (NO) the test list. This list is created by putting \test +# commands in the documentation. + +GENERATE_TESTLIST = YES + +# The GENERATE_BUGLIST tag can be used to enable (YES) or +# disable (NO) the bug list. This list is created by putting \bug +# commands in the documentation. + +GENERATE_BUGLIST = YES + +# The GENERATE_DEPRECATEDLIST tag can be used to enable (YES) or +# disable (NO) the deprecated list. This list is created by putting +# \deprecated commands in the documentation. + +GENERATE_DEPRECATEDLIST= YES + +# The ENABLED_SECTIONS tag can be used to enable conditional +# documentation sections, marked by \if sectionname ... \endif. + +ENABLED_SECTIONS = + +# The MAX_INITIALIZER_LINES tag determines the maximum number of lines +# the initial value of a variable or define consists of for it to appear in +# the documentation. If the initializer consists of more lines than specified +# here it will be hidden. Use a value of 0 to hide initializers completely. +# The appearance of the initializer of individual variables and defines in the +# documentation can be controlled using \showinitializer or \hideinitializer +# command in the documentation regardless of this setting. + +MAX_INITIALIZER_LINES = 30 + +# Set the SHOW_USED_FILES tag to NO to disable the list of files generated +# at the bottom of the documentation of classes and structs. If set to YES the +# list will mention the files that were used to generate the documentation. + +SHOW_USED_FILES = YES + +#--------------------------------------------------------------------------- +# configuration options related to warning and progress messages +#--------------------------------------------------------------------------- + +# The QUIET tag can be used to turn on/off the messages that are generated +# by doxygen. Possible values are YES and NO. If left blank NO is used. + +QUIET = NO + +# The WARNINGS tag can be used to turn on/off the warning messages that are +# generated by doxygen. Possible values are YES and NO. If left blank +# NO is used. + +WARNINGS = YES + +# If WARN_IF_UNDOCUMENTED is set to YES, then doxygen will generate warnings +# for undocumented members. If EXTRACT_ALL is set to YES then this flag will +# automatically be disabled. + +WARN_IF_UNDOCUMENTED = YES + +# If WARN_IF_DOC_ERROR is set to YES, doxygen will generate warnings for +# potential errors in the documentation, such as not documenting some +# parameters in a documented function, or documenting parameters that +# don't exist or using markup commands wrongly. + +WARN_IF_DOC_ERROR = YES + +# The WARN_FORMAT tag determines the format of the warning messages that +# doxygen can produce. The string should contain the $file, $line, and $text +# tags, which will be replaced by the file and line number from which the +# warning originated and the warning text. + +WARN_FORMAT = "$file:$line: $text" + +# The WARN_LOGFILE tag can be used to specify a file to which warning +# and error messages should be written. If left blank the output is written +# to stderr. + +WARN_LOGFILE = + +#--------------------------------------------------------------------------- +# configuration options related to the input files +#--------------------------------------------------------------------------- + +# The INPUT tag can be used to specify the files and/or directories that contain +# documented source files. You may enter file names like "myfile.cpp" or +# directories like "/usr/src/myproject". Separate the files or directories +# with spaces. + +INPUT = src + +# If the value of the INPUT tag contains directories, you can use the +# FILE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp +# and *.h) to filter out the source-files in the directories. If left +# blank the following patterns are tested: +# *.c *.cc *.cxx *.cpp *.c++ *.java *.ii *.ixx *.ipp *.i++ *.inl *.h *.hh *.hxx *.hpp +# *.h++ *.idl *.odl *.cs *.php *.php3 *.inc *.m *.mm + +FILE_PATTERNS = + +# The RECURSIVE tag can be used to turn specify whether or not subdirectories +# should be searched for input files as well. Possible values are YES and NO. +# If left blank NO is used. + +RECURSIVE = YES + +# The EXCLUDE tag can be used to specify files and/or directories that should +# excluded from the INPUT source files. This way you can easily exclude a +# subdirectory from a directory tree whose root is specified with the INPUT tag. + +EXCLUDE = + +# The EXCLUDE_SYMLINKS tag can be used select whether or not files or directories +# that are symbolic links (a Unix filesystem feature) are excluded from the input. + +EXCLUDE_SYMLINKS = NO + +# If the value of the INPUT tag contains directories, you can use the +# EXCLUDE_PATTERNS tag to specify one or more wildcard patterns to exclude +# certain files from those directories. + +EXCLUDE_PATTERNS = + +# The EXAMPLE_PATH tag can be used to specify one or more files or +# directories that contain example code fragments that are included (see +# the \include command). + +EXAMPLE_PATH = + +# If the value of the EXAMPLE_PATH tag contains directories, you can use the +# EXAMPLE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp +# and *.h) to filter out the source-files in the directories. If left +# blank all files are included. + +EXAMPLE_PATTERNS = + +# If the EXAMPLE_RECURSIVE tag is set to YES then subdirectories will be +# searched for input files to be used with the \include or \dontinclude +# commands irrespective of the value of the RECURSIVE tag. +# Possible values are YES and NO. If left blank NO is used. + +EXAMPLE_RECURSIVE = NO + +# The IMAGE_PATH tag can be used to specify one or more files or +# directories that contain image that are included in the documentation (see +# the \image command). + +IMAGE_PATH = + +# The INPUT_FILTER tag can be used to specify a program that doxygen should +# invoke to filter for each input file. Doxygen will invoke the filter program +# by executing (via popen()) the command , where +# is the value of the INPUT_FILTER tag, and is the name of an +# input file. Doxygen will then use the output that the filter program writes +# to standard output. If FILTER_PATTERNS is specified, this tag will be +# ignored. + +INPUT_FILTER = + +# The FILTER_PATTERNS tag can be used to specify filters on a per file pattern +# basis. Doxygen will compare the file name with each pattern and apply the +# filter if there is a match. The filters are a list of the form: +# pattern=filter (like *.cpp=my_cpp_filter). See INPUT_FILTER for further +# info on how filters are used. If FILTER_PATTERNS is empty, INPUT_FILTER +# is applied to all files. + +FILTER_PATTERNS = + +# If the FILTER_SOURCE_FILES tag is set to YES, the input filter (if set using +# INPUT_FILTER) will be used to filter the input files when producing source +# files to browse (i.e. when SOURCE_BROWSER is set to YES). + +FILTER_SOURCE_FILES = NO + +#--------------------------------------------------------------------------- +# configuration options related to source browsing +#--------------------------------------------------------------------------- + +# If the SOURCE_BROWSER tag is set to YES then a list of source files will +# be generated. Documented entities will be cross-referenced with these sources. +# Note: To get rid of all source code in the generated output, make sure also +# VERBATIM_HEADERS is set to NO. + +SOURCE_BROWSER = YES + +# Setting the INLINE_SOURCES tag to YES will include the body +# of functions and classes directly in the documentation. + +INLINE_SOURCES = YES + +# Setting the STRIP_CODE_COMMENTS tag to YES (the default) will instruct +# doxygen to hide any special comment blocks from generated source code +# fragments. Normal C and C++ comments will always remain visible. + +STRIP_CODE_COMMENTS = NO + +# If the REFERENCED_BY_RELATION tag is set to YES (the default) +# then for each documented function all documented +# functions referencing it will be listed. + +REFERENCED_BY_RELATION = YES + +# If the REFERENCES_RELATION tag is set to YES (the default) +# then for each documented function all documented entities +# called/used by that function will be listed. + +REFERENCES_RELATION = YES + +# If the VERBATIM_HEADERS tag is set to YES (the default) then Doxygen +# will generate a verbatim copy of the header file for each class for +# which an include is specified. Set to NO to disable this. + +VERBATIM_HEADERS = YES + +#--------------------------------------------------------------------------- +# configuration options related to the alphabetical class index +#--------------------------------------------------------------------------- + +# If the ALPHABETICAL_INDEX tag is set to YES, an alphabetical index +# of all compounds will be generated. Enable this if the project +# contains a lot of classes, structs, unions or interfaces. + +ALPHABETICAL_INDEX = YES + +# If the alphabetical index is enabled (see ALPHABETICAL_INDEX) then +# the COLS_IN_ALPHA_INDEX tag can be used to specify the number of columns +# in which this list will be split (can be a number in the range [1..20]) + +COLS_IN_ALPHA_INDEX = 5 + +# In case all classes in a project start with a common prefix, all +# classes will be put under the same header in the alphabetical index. +# The IGNORE_PREFIX tag can be used to specify one or more prefixes that +# should be ignored while generating the index headers. + +IGNORE_PREFIX = + +#--------------------------------------------------------------------------- +# configuration options related to the HTML output +#--------------------------------------------------------------------------- + +# If the GENERATE_HTML tag is set to YES (the default) Doxygen will +# generate HTML output. + +GENERATE_HTML = YES + +# The HTML_OUTPUT tag is used to specify where the HTML docs will be put. +# If a relative path is entered the value of OUTPUT_DIRECTORY will be +# put in front of it. If left blank `html' will be used as the default path. + +HTML_OUTPUT = html + +# The HTML_FILE_EXTENSION tag can be used to specify the file extension for +# each generated HTML page (for example: .htm,.php,.asp). If it is left blank +# doxygen will generate files with .html extension. + +HTML_FILE_EXTENSION = .html + +# The HTML_HEADER tag can be used to specify a personal HTML header for +# each generated HTML page. If it is left blank doxygen will generate a +# standard header. + +HTML_HEADER = doc/header.html + +# The HTML_FOOTER tag can be used to specify a personal HTML footer for +# each generated HTML page. If it is left blank doxygen will generate a +# standard footer. + +HTML_FOOTER = doc/footer.html + +# The HTML_STYLESHEET tag can be used to specify a user-defined cascading +# style sheet that is used by each HTML page. It can be used to +# fine-tune the look of the HTML output. If the tag is left blank doxygen +# will generate a default style sheet. Note that doxygen will try to copy +# the style sheet file to the HTML output directory, so don't put your own +# stylesheet in the HTML output directory as well, or it will be erased! + +HTML_STYLESHEET = + +# If the HTML_ALIGN_MEMBERS tag is set to YES, the members of classes, +# files or namespaces will be aligned in HTML using tables. If set to +# NO a bullet list will be used. + +HTML_ALIGN_MEMBERS = YES + +# If the GENERATE_HTMLHELP tag is set to YES, additional index files +# will be generated that can be used as input for tools like the +# Microsoft HTML help workshop to generate a compressed HTML help file (.chm) +# of the generated HTML documentation. + +GENERATE_HTMLHELP = NO + +# If the GENERATE_HTMLHELP tag is set to YES, the CHM_FILE tag can +# be used to specify the file name of the resulting .chm file. You +# can add a path in front of the file if the result should not be +# written to the html output directory. + +CHM_FILE = + +# If the GENERATE_HTMLHELP tag is set to YES, the HHC_LOCATION tag can +# be used to specify the location (absolute path including file name) of +# the HTML help compiler (hhc.exe). If non-empty doxygen will try to run +# the HTML help compiler on the generated index.hhp. + +HHC_LOCATION = + +# If the GENERATE_HTMLHELP tag is set to YES, the GENERATE_CHI flag +# controls if a separate .chi index file is generated (YES) or that +# it should be included in the master .chm file (NO). + +GENERATE_CHI = NO + +# If the GENERATE_HTMLHELP tag is set to YES, the BINARY_TOC flag +# controls whether a binary table of contents is generated (YES) or a +# normal table of contents (NO) in the .chm file. + +BINARY_TOC = NO + +# The TOC_EXPAND flag can be set to YES to add extra items for group members +# to the contents of the HTML help documentation and to the tree view. + +TOC_EXPAND = NO + +# The DISABLE_INDEX tag can be used to turn on/off the condensed index at +# top of each HTML page. The value NO (the default) enables the index and +# the value YES disables it. + +DISABLE_INDEX = NO + +# This tag can be used to set the number of enum values (range [1..20]) +# that doxygen will group on one line in the generated HTML documentation. + +ENUM_VALUES_PER_LINE = 1 + +# If the GENERATE_TREEVIEW tag is set to YES, a side panel will be +# generated containing a tree-like index structure (just like the one that +# is generated for HTML Help). For this to work a browser that supports +# JavaScript, DHTML, CSS and frames is required (for instance Mozilla 1.0+, +# Netscape 6.0+, Internet explorer 5.0+, or Konqueror). Windows users are +# probably better off using the HTML help feature. + +GENERATE_TREEVIEW = YES + +# If the treeview is enabled (see GENERATE_TREEVIEW) then this tag can be +# used to set the initial width (in pixels) of the frame in which the tree +# is shown. + +TREEVIEW_WIDTH = 250 + +#--------------------------------------------------------------------------- +# configuration options related to the LaTeX output +#--------------------------------------------------------------------------- + +# If the GENERATE_LATEX tag is set to YES (the default) Doxygen will +# generate Latex output. + +GENERATE_LATEX = YES + +# The LATEX_OUTPUT tag is used to specify where the LaTeX docs will be put. +# If a relative path is entered the value of OUTPUT_DIRECTORY will be +# put in front of it. If left blank `latex' will be used as the default path. + +LATEX_OUTPUT = latex + +# The LATEX_CMD_NAME tag can be used to specify the LaTeX command name to be +# invoked. If left blank `latex' will be used as the default command name. + +LATEX_CMD_NAME = latex + +# The MAKEINDEX_CMD_NAME tag can be used to specify the command name to +# generate index for LaTeX. If left blank `makeindex' will be used as the +# default command name. + +MAKEINDEX_CMD_NAME = makeindex + +# If the COMPACT_LATEX tag is set to YES Doxygen generates more compact +# LaTeX documents. This may be useful for small projects and may help to +# save some trees in general. + +COMPACT_LATEX = NO + +# The PAPER_TYPE tag can be used to set the paper type that is used +# by the printer. Possible values are: a4, a4wide, letter, legal and +# executive. If left blank a4wide will be used. + +PAPER_TYPE = a4wide + +# The EXTRA_PACKAGES tag can be to specify one or more names of LaTeX +# packages that should be included in the LaTeX output. + +EXTRA_PACKAGES = + +# The LATEX_HEADER tag can be used to specify a personal LaTeX header for +# the generated latex document. The header should contain everything until +# the first chapter. If it is left blank doxygen will generate a +# standard header. Notice: only use this tag if you know what you are doing! + +LATEX_HEADER = + +# If the PDF_HYPERLINKS tag is set to YES, the LaTeX that is generated +# is prepared for conversion to pdf (using ps2pdf). The pdf file will +# contain links (just like the HTML output) instead of page references +# This makes the output suitable for online browsing using a pdf viewer. + +PDF_HYPERLINKS = YES + +# If the USE_PDFLATEX tag is set to YES, pdflatex will be used instead of +# plain latex in the generated Makefile. Set this option to YES to get a +# higher quality PDF documentation. + +USE_PDFLATEX = YES + +# If the LATEX_BATCHMODE tag is set to YES, doxygen will add the \\batchmode. +# command to the generated LaTeX files. This will instruct LaTeX to keep +# running if errors occur, instead of asking the user for help. +# This option is also used when generating formulas in HTML. + +LATEX_BATCHMODE = NO + +# If LATEX_HIDE_INDICES is set to YES then doxygen will not +# include the index chapters (such as File Index, Compound Index, etc.) +# in the output. + +LATEX_HIDE_INDICES = NO + +#--------------------------------------------------------------------------- +# configuration options related to the RTF output +#--------------------------------------------------------------------------- + +# If the GENERATE_RTF tag is set to YES Doxygen will generate RTF output +# The RTF output is optimized for Word 97 and may not look very pretty with +# other RTF readers or editors. + +GENERATE_RTF = NO + +# The RTF_OUTPUT tag is used to specify where the RTF docs will be put. +# If a relative path is entered the value of OUTPUT_DIRECTORY will be +# put in front of it. If left blank `rtf' will be used as the default path. + +RTF_OUTPUT = rtf + +# If the COMPACT_RTF tag is set to YES Doxygen generates more compact +# RTF documents. This may be useful for small projects and may help to +# save some trees in general. + +COMPACT_RTF = NO + +# If the RTF_HYPERLINKS tag is set to YES, the RTF that is generated +# will contain hyperlink fields. The RTF file will +# contain links (just like the HTML output) instead of page references. +# This makes the output suitable for online browsing using WORD or other +# programs which support those fields. +# Note: wordpad (write) and others do not support links. + +RTF_HYPERLINKS = YES + +# Load stylesheet definitions from file. Syntax is similar to doxygen's +# config file, i.e. a series of assignments. You only have to provide +# replacements, missing definitions are set to their default value. + +RTF_STYLESHEET_FILE = + +# Set optional variables used in the generation of an rtf document. +# Syntax is similar to doxygen's config file. + +RTF_EXTENSIONS_FILE = + +#--------------------------------------------------------------------------- +# configuration options related to the man page output +#--------------------------------------------------------------------------- + +# If the GENERATE_MAN tag is set to YES (the default) Doxygen will +# generate man pages + +GENERATE_MAN = NO + +# The MAN_OUTPUT tag is used to specify where the man pages will be put. +# If a relative path is entered the value of OUTPUT_DIRECTORY will be +# put in front of it. If left blank `man' will be used as the default path. + +MAN_OUTPUT = man + +# The MAN_EXTENSION tag determines the extension that is added to +# the generated man pages (default is the subroutine's section .3) + +MAN_EXTENSION = .3 + +# If the MAN_LINKS tag is set to YES and Doxygen generates man output, +# then it will generate one additional man file for each entity +# documented in the real man page(s). These additional files +# only source the real man page, but without them the man command +# would be unable to find the correct page. The default is NO. + +MAN_LINKS = NO + +#--------------------------------------------------------------------------- +# configuration options related to the XML output +#--------------------------------------------------------------------------- + +# If the GENERATE_XML tag is set to YES Doxygen will +# generate an XML file that captures the structure of +# the code including all documentation. + +GENERATE_XML = NO + +# The XML_OUTPUT tag is used to specify where the XML pages will be put. +# If a relative path is entered the value of OUTPUT_DIRECTORY will be +# put in front of it. If left blank `xml' will be used as the default path. + +XML_OUTPUT = xml + +# The XML_SCHEMA tag can be used to specify an XML schema, +# which can be used by a validating XML parser to check the +# syntax of the XML files. + +XML_SCHEMA = + +# The XML_DTD tag can be used to specify an XML DTD, +# which can be used by a validating XML parser to check the +# syntax of the XML files. + +XML_DTD = + +# If the XML_PROGRAMLISTING tag is set to YES Doxygen will +# dump the program listings (including syntax highlighting +# and cross-referencing information) to the XML output. Note that +# enabling this will significantly increase the size of the XML output. + +XML_PROGRAMLISTING = YES + +#--------------------------------------------------------------------------- +# configuration options for the AutoGen Definitions output +#--------------------------------------------------------------------------- + +# If the GENERATE_AUTOGEN_DEF tag is set to YES Doxygen will +# generate an AutoGen Definitions (see autogen.sf.net) file +# that captures the structure of the code including all +# documentation. Note that this feature is still experimental +# and incomplete at the moment. + +GENERATE_AUTOGEN_DEF = NO + +#--------------------------------------------------------------------------- +# configuration options related to the Perl module output +#--------------------------------------------------------------------------- + +# If the GENERATE_PERLMOD tag is set to YES Doxygen will +# generate a Perl module file that captures the structure of +# the code including all documentation. Note that this +# feature is still experimental and incomplete at the +# moment. + +GENERATE_PERLMOD = NO + +# If the PERLMOD_LATEX tag is set to YES Doxygen will generate +# the necessary Makefile rules, Perl scripts and LaTeX code to be able +# to generate PDF and DVI output from the Perl module output. + +PERLMOD_LATEX = NO + +# If the PERLMOD_PRETTY tag is set to YES the Perl module output will be +# nicely formatted so it can be parsed by a human reader. This is useful +# if you want to understand what is going on. On the other hand, if this +# tag is set to NO the size of the Perl module output will be much smaller +# and Perl will parse it just the same. + +PERLMOD_PRETTY = YES + +# The names of the make variables in the generated doxyrules.make file +# are prefixed with the string contained in PERLMOD_MAKEVAR_PREFIX. +# This is useful so different doxyrules.make files included by the same +# Makefile don't overwrite each other's variables. + +PERLMOD_MAKEVAR_PREFIX = + +#--------------------------------------------------------------------------- +# Configuration options related to the preprocessor +#--------------------------------------------------------------------------- + +# If the ENABLE_PREPROCESSING tag is set to YES (the default) Doxygen will +# evaluate all C-preprocessor directives found in the sources and include +# files. + +ENABLE_PREPROCESSING = YES + +# If the MACRO_EXPANSION tag is set to YES Doxygen will expand all macro +# names in the source code. If set to NO (the default) only conditional +# compilation will be performed. Macro expansion can be done in a controlled +# way by setting EXPAND_ONLY_PREDEF to YES. + +MACRO_EXPANSION = NO + +# If the EXPAND_ONLY_PREDEF and MACRO_EXPANSION tags are both set to YES +# then the macro expansion is limited to the macros specified with the +# PREDEFINED and EXPAND_AS_PREDEFINED tags. + +EXPAND_ONLY_PREDEF = NO + +# If the SEARCH_INCLUDES tag is set to YES (the default) the includes files +# in the INCLUDE_PATH (see below) will be search if a #include is found. + +SEARCH_INCLUDES = YES + +# The INCLUDE_PATH tag can be used to specify one or more directories that +# contain include files that are not input files but should be processed by +# the preprocessor. + +INCLUDE_PATH = src/headers + +# You can use the INCLUDE_FILE_PATTERNS tag to specify one or more wildcard +# patterns (like *.h and *.hpp) to filter out the header-files in the +# directories. If left blank, the patterns specified with FILE_PATTERNS will +# be used. + +INCLUDE_FILE_PATTERNS = + +# The PREDEFINED tag can be used to specify one or more macro names that +# are defined before the preprocessor is started (similar to the -D option of +# gcc). The argument of the tag is a list of macros of the form: name +# or name=definition (no spaces). If the definition and the = are +# omitted =1 is assumed. To prevent a macro definition from being +# undefined via #undef or recursively expanded use the := operator +# instead of the = operator. + +PREDEFINED = + +# If the MACRO_EXPANSION and EXPAND_ONLY_PREDEF tags are set to YES then +# this tag can be used to specify a list of macro names that should be expanded. +# The macro definition that is found in the sources will be used. +# Use the PREDEFINED tag if you want to use a different macro definition. + +EXPAND_AS_DEFINED = + +# If the SKIP_FUNCTION_MACROS tag is set to YES (the default) then +# doxygen's preprocessor will remove all function-like macros that are alone +# on a line, have an all uppercase name, and do not end with a semicolon. Such +# function macros are typically used for boiler-plate code, and will confuse the +# parser if not removed. + +SKIP_FUNCTION_MACROS = YES + +#--------------------------------------------------------------------------- +# Configuration::additions related to external references +#--------------------------------------------------------------------------- + +# The TAGFILES option can be used to specify one or more tagfiles. +# Optionally an initial location of the external documentation +# can be added for each tagfile. The format of a tag file without +# this location is as follows: +# TAGFILES = file1 file2 ... +# Adding location for the tag files is done as follows: +# TAGFILES = file1=loc1 "file2 = loc2" ... +# where "loc1" and "loc2" can be relative or absolute paths or +# URLs. If a location is present for each tag, the installdox tool +# does not have to be run to correct the links. +# Note that each tag file must have a unique name +# (where the name does NOT include the path) +# If a tag file is not located in the directory in which doxygen +# is run, you must also specify the path to the tagfile here. + +TAGFILES = + +# When a file name is specified after GENERATE_TAGFILE, doxygen will create +# a tag file that is based on the input files it reads. + +GENERATE_TAGFILE = + +# If the ALLEXTERNALS tag is set to YES all external classes will be listed +# in the class index. If set to NO only the inherited external classes +# will be listed. + +ALLEXTERNALS = NO + +# If the EXTERNAL_GROUPS tag is set to YES all external groups will be listed +# in the modules index. If set to NO, only the current project's groups will +# be listed. + +EXTERNAL_GROUPS = YES + +# The PERL_PATH should be the absolute path and name of the perl script +# interpreter (i.e. the result of `which perl'). + +PERL_PATH = /usr/bin/perl + +#--------------------------------------------------------------------------- +# Configuration options related to the dot tool +#--------------------------------------------------------------------------- + +# If the CLASS_DIAGRAMS tag is set to YES (the default) Doxygen will +# generate a inheritance diagram (in HTML, RTF and LaTeX) for classes with base or +# super classes. Setting the tag to NO turns the diagrams off. Note that this +# option is superseded by the HAVE_DOT option below. This is only a fallback. It is +# recommended to install and use dot, since it yields more powerful graphs. + +CLASS_DIAGRAMS = YES + +# If set to YES, the inheritance and collaboration graphs will hide +# inheritance and usage relations if the target is undocumented +# or is not a class. + +HIDE_UNDOC_RELATIONS = YES + +# If you set the HAVE_DOT tag to YES then doxygen will assume the dot tool is +# available from the path. This tool is part of Graphviz, a graph visualization +# toolkit from AT&T and Lucent Bell Labs. The other options in this section +# have no effect if this option is set to NO (the default) + +HAVE_DOT = YES + +# If the CLASS_GRAPH and HAVE_DOT tags are set to YES then doxygen +# will generate a graph for each documented class showing the direct and +# indirect inheritance relations. Setting this tag to YES will force the +# the CLASS_DIAGRAMS tag to NO. + +CLASS_GRAPH = YES + +# If the COLLABORATION_GRAPH and HAVE_DOT tags are set to YES then doxygen +# will generate a graph for each documented class showing the direct and +# indirect implementation dependencies (inheritance, containment, and +# class references variables) of the class with other documented classes. + +COLLABORATION_GRAPH = YES + +# If the UML_LOOK tag is set to YES doxygen will generate inheritance and +# collaboration diagrams in a style similar to the OMG's Unified Modeling +# Language. + +UML_LOOK = NO + +# If set to YES, the inheritance and collaboration graphs will show the +# relations between templates and their instances. + +TEMPLATE_RELATIONS = NO + +# If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDE_GRAPH, and HAVE_DOT +# tags are set to YES then doxygen will generate a graph for each documented +# file showing the direct and indirect include dependencies of the file with +# other documented files. + +INCLUDE_GRAPH = YES + +# If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDED_BY_GRAPH, and +# HAVE_DOT tags are set to YES then doxygen will generate a graph for each +# documented header file showing the documented files that directly or +# indirectly include this file. + +INCLUDED_BY_GRAPH = YES + +# If the CALL_GRAPH and HAVE_DOT tags are set to YES then doxygen will +# generate a call dependency graph for every global function or class method. +# Note that enabling this option will significantly increase the time of a run. +# So in most cases it will be better to enable call graphs for selected +# functions only using the \callgraph command. + +CALL_GRAPH = YES + +# If the GRAPHICAL_HIERARCHY and HAVE_DOT tags are set to YES then doxygen +# will graphical hierarchy of all classes instead of a textual one. + +GRAPHICAL_HIERARCHY = YES + +# The DOT_IMAGE_FORMAT tag can be used to set the image format of the images +# generated by dot. Possible values are png, jpg, or gif +# If left blank png will be used. + +DOT_IMAGE_FORMAT = png + +# The tag DOT_PATH can be used to specify the path where the dot tool can be +# found. If left blank, it is assumed the dot tool can be found on the path. + +DOT_PATH = + +# The DOTFILE_DIRS tag can be used to specify one or more directories that +# contain dot files that are included in the documentation (see the +# \dotfile command). + +DOTFILE_DIRS = + +# The MAX_DOT_GRAPH_WIDTH tag can be used to set the maximum allowed width +# (in pixels) of the graphs generated by dot. If a graph becomes larger than +# this value, doxygen will try to truncate the graph, so that it fits within +# the specified constraint. Beware that most browsers cannot cope with very +# large images. + +MAX_DOT_GRAPH_WIDTH = 1024 + +# The MAX_DOT_GRAPH_HEIGHT tag can be used to set the maximum allows height +# (in pixels) of the graphs generated by dot. If a graph becomes larger than +# this value, doxygen will try to truncate the graph, so that it fits within +# the specified constraint. Beware that most browsers cannot cope with very +# large images. + +MAX_DOT_GRAPH_HEIGHT = 1024 + +# The MAX_DOT_GRAPH_DEPTH tag can be used to set the maximum depth of the +# graphs generated by dot. A depth value of 3 means that only nodes reachable +# from the root by following a path via at most 3 edges will be shown. Nodes that +# lay further from the root node will be omitted. Note that setting this option to +# 1 or 2 may greatly reduce the computation time needed for large code bases. Also +# note that a graph may be further truncated if the graph's image dimensions are +# not sufficient to fit the graph (see MAX_DOT_GRAPH_WIDTH and MAX_DOT_GRAPH_HEIGHT). +# If 0 is used for the depth value (the default), the graph is not depth-constrained. + +MAX_DOT_GRAPH_DEPTH = 0 + +# If the GENERATE_LEGEND tag is set to YES (the default) Doxygen will +# generate a legend page explaining the meaning of the various boxes and +# arrows in the dot generated graphs. + +GENERATE_LEGEND = YES + +# If the DOT_CLEANUP tag is set to YES (the default) Doxygen will +# remove the intermediate dot files that are used to generate +# the various graphs. + +DOT_CLEANUP = YES + +#--------------------------------------------------------------------------- +# Configuration::additions related to the search engine +#--------------------------------------------------------------------------- + +# The SEARCHENGINE tag specifies whether or not a search engine should be +# used. If set to NO the values of all tags below this one will be ignored. + +SEARCHENGINE = NO diff --git a/authors b/authors deleted file mode 100644 index ba4ea6b..0000000 --- a/authors +++ /dev/null @@ -1,55 +0,0 @@ -This is a list of people who have contributed [directly or indirectly] to the project -[in no partcular order]. If you have helped and your name is not here email me at -tomstdenis@yahoo.com. - - -1) Richard.van.de.Laarschot@ict.nl - - Gave help porting the lib to MSVC particularly pointed out various warnings and errors. - -2) Richard Heathfield - - Gave a lot of help concerning valid C portable code. - -3) Ajay K. Agrawal - - Helped port the library to MSVC and spotted a few bugs and errors. - -4) Brian Gladman - - Wrote the AES and Serpent code used. Found a bug in the hash code for certain types of inputs. - -5) Svante Seleborg - - Submitted the "ampi.c" code as well as many suggestions on improving the readability of the source code. - -6) Clay Culver - - Submitted a fix for "rsa.c" which cleaned up some code. Submited some other fixes too. :-) - Clay has helped find bugs in various pieces of code including the registry functions, base64 routines - and the make process. He is also now the primary author of the libtomcrypt reference manual and has plan - at making a HTML version. - -7) Jason Klapste - - Submitted fixes to the yarrow, hash, make process and test code as well as other subtle bug fixes. The -yarrow code can now default to any cipher/hash that is left after you remove them from a build. - -8) Dobes Vandermeer - - Submitted HMAC code that worked flawlessly out of the box... good job! Also submitted a MD4 routine. - Submitted some modified DES code that was merged into the code base [using the libtomcrypt API] - -9) Wayne Scott (wscott@bitmover.com) - - Submitted base64 that complies with the RFC standards. Submitted some ideas to improve the RSA key generation - as well. - -10) Sky Schulz (sky@ogn.com) - - Has submitted a set of ideas to improve the library and make it more attractive for professional users. - -11) Mike Frysinger - - Together with Clay came up with a more "unix friendly" makefile. Mike Frysinger has been keeping copies of - the library for the Gentoo linux distribution. \ No newline at end of file diff --git a/changes b/changes index f887acf..6b4bc25 100644 --- a/changes +++ b/changes @@ -1,3 +1,61 @@ +December 31st, 2004 +v1.00 + -- Added "r,s == 0" check to dsa_verify_hash() + -- Added "multi block" helpers for hash, hmac, pmac and omac routines so you can process multiple non-adjacent + blocks of data with one call (added demos/multi.c to make sure they work) + -- Note these are not documented but they do have doxygen comments inside them + -- Also I don't use them in other functions (like pkcs_5_2()) because I didn't have the time. Job for the new LTC maintainer ;-) + -- Added tweaked Anubis test vectors and made it default (undefined ANUBIS_TWEAK to get original Anubis) + -- Merged in fix for mp_prime_random_ex() to deal with MSB and LSB "bugs" + -- Removed tim_exptmod() completely, updated several RSA functions (notably v15 and the decrypt/verify) so they + don't require a prng now + -- This release brought to you by the fine tunes of Macy Gray. We miss you. + +December 23rd, 2004 +v1.00rc1 + -- Renamed "mycrypt_*" to "tomcrypt_*" to be more specific and professional + Now just include "tomcrypt.h" instead of "mycrypt.h" to get LTC ;-) + -- Cleaned up makefiles to ensure all headers are correctly installed + -- Added "rotate by constant" macros for portable, x86-32 and x86-64 + You can disable this new code with LTC_NO_ROLC which is useful for older GCCs + -- Cleaned up detection of x86-64 so it works for ROL/ROR macros + -- Fixed rsa_import() so that it would detect multi-prime RSA keys and error appropriately + -- Sorted the source files by category and updated the makefiles appropriately + -- Added LTC_DER define so you can trim out DER code if not required + -- Fixed up RSA's decrypt functions changing "res" to "stat" to be more in sync + with the signature variables nomenclature. (no code change just renamed the arguments) + -- Removed all labels starting with __ and replaced with LBL_ to avoid namespace conflicts (Randy Howard) + -- Merged in LTM fix to mp_prime_random_ex() which zap'ed the most significant byte if the bit size + requested was a multiple of eight. + -- Made RSA_TIMING off by default as it's not terribly useful [and likely to be deprecated] + -- Renamed SMALL_CODE, CLEAN_STACK and NO_FILE to have a LTC_ prefix to avoid namespace collisions + with other programs. e.g. SMALL_CODE => LTC_SMALL_CODE + -- Zed Shaw pointed out that on certain systems installing libs as "root" isn't possible as the super-user + is not root. Now the makefiles allow this to be changed easily. + -- Renamed "struct _*_descriptor" to "struct ltc_*_descriptor" to avoid using a leading _ + Also renamed _ARGCHK to LTC_ARGCHK + -- Zed Shaw pointed out that I still defined the prng structs in tomcrypt_prng.h even if they + weren't defined. This made undef'ing FORTUNA break the build. + -- Added LTC_NO_ASM to disable inline asm macros [ROL/ROR/etc] + -- Changed RSA decrypt functions to change the output length variable name from "keylen" to "outlen" to make + it more consistent. + -- Added the 64-bit Khazad block cipher [NESSIE] + -- Added the 128-bit Anubis block cipher [with key support for 128...320 bit keys] [NESSIE] + -- Changes to several MAC functions to rename input arguments to more sensible names + -- Removed FAST_PK support from dh_sys.c + -- Declared deskey() from des.c as static instead of a global + -- Added pretty much all practical GCC warning tests to the GCC [related] makefiles. These additional + warnings can easily be disabled for those with older copies of GCC [or even non GNU cc's] + -- Added doxygen @ tags to the code... phew that was a hell of a lot of [repetitive] work + -- Also added pre-configured Doxygen script. + -- Cleaned up quite a few functions [ciphers, pk, etc] to make the parameters naming style consistent + E.g. ciphers keys are called "skey" consistently now. The input to PK encryption is called "in", etc. + These changes require no code changes on the behalf of developers fortunately + -- Started a SAFER+ optimizer [does encrypt only] which shaves a good 30 or so cycles/byte on my AMD64 + at an expense of huge code. It's in notes/etc/saferp_optimizer.c + -- DSA sign/verify now uses DER encoded output/inputs and no LTC style headers. + -- Matt Johnston found a missing semi-colon in mp_exptmod(). Fix has been merged in. + October 29th, 2004 v0.99 -- Merged in the latest version of LTM which includes all of the recent bug fixes -- Deprecated LTMSSE and removed it (to be replaced with TFM later on) diff --git a/crypt.tex b/crypt.tex index b8acb3f..4cfd4c9 100644 --- a/crypt.tex +++ b/crypt.tex @@ -47,7 +47,7 @@ \def\gap{\vspace{0.5ex}} \makeindex \begin{document} -\title{LibTomCrypt \\ Version 0.99} +\title{LibTomCrypt \\ Version 1.00} \author{Tom St Denis \\ \\ tomstdenis@iahu.ca \\ @@ -79,56 +79,22 @@ Canada \tableofcontents \chapter{Introduction} \section{What is the LibTomCrypt?} -LibTomCrypt is a portable ANSI C cryptographic library that supports symmetric ciphers, one-way hashes, -pseudo-random number generators, public key cryptography (via RSA,DH or ECC/DH) and a plethora of support -routines. It is designed to compile out of the box with the GNU C Compiler (GCC) version 2.95.3 (and higher) -and with MSVC version 6 in win32. +LibTomCrypt is a portable ISO C cryptographic library that is meant to be a toolset for cryptographers who are +designing a cryptosystem. It supports symmetric ciphers, one-way hashes, pseudo-random number generators, +public key cryptography (via PKCS \#1 RSA, DH or ECCDH) and a plethora of support +routines. -The library has been successfully tested on quite a few other platforms ranging from the ARM7TDMI in a -Gameboy Advanced to various PowerPC processors and even the MIPS processor in the PlayStation 2. Suffice it -to say the code is portable. - -The library is designed so new ciphers/hashes/PRNGs can be added at runtime and the existing API (and helper API functions) will -be able to use the new designs automatically. There exist self-check functions for each cipher and hash to ensure that -they compile and execute to the published design specifications. The library also performs extensive parameter error checking -and will give verbose error messages when possible. - -Essentially the library saves the time of having to implement the ciphers, hashes, prngs yourself. Typically implementing -useful cryptography is an error prone business which means anything that can save considerable time and effort is a good -thing. +The library was designed such that new ciphers/hashes/PRNGs can be added at runtime and the existing API +(and helper API functions) are able to use the new designs automatically. There exists self-check functions for each +block cipher and hash function to ensure that they compile and execute to the published design specifications. The library +also performs extensive parameter error checking to prevent any number of runtime exploits or errors. \subsection{What the library IS for?} -The library typically serves as a basis for other protocols and message formats. For example, it should be possible to -take the RSA routines out of this library, apply the appropriate message padding and get PKCS compliant RSA routines. -Similarly SSL protocols could be formed on top of the low-level symmetric cipher functions. The goal of this package is -to provide these low level core functions in a robust and easy to use fashion. - -The library also serves well as a toolkit for applications where they don't need to be OpenPGP, PKCS, etc. compliant. -Included are fully operational public key routines for encryption, decryption, signature generation and verification. -These routines are fully portable but are not conformant to any known set of standards\footnote{With the exception of -the RSA code which is based on the PKCS \#1 standards.}. They are all based on established -number theory and cryptography. - -\subsection{What the library IS NOT for?} - -The library is not designed to be in anyway an implementation of the SSL or OpenPGP standards. The library -is not designed to be compliant with any known form of API or programming hierarchy. It is not a port of any other -library and it is not platform specific (like the MS CSP). So if you're looking to drop in some buzzword -compliant crypto library this is not for you. The library has been written from scratch to provide basic functions as -well as non-standard higher level functions. - -This is not to say that the library is a ``homebrew'' project. All of the symmetric ciphers and one-way hash functions -conform to published test vectors. The public key functions are derived from publicly available material and the majority -of the code has been reviewed by a growing community of developers. - -\subsubsection{Why not?} -You may be asking why I didn't choose to go all out and support standards like P1363, PKCS and the whole lot. The reason -is quite simple too much money gets in the way. When I tried to access the P1363 draft documents and was denied (it -requires a password) I realized that they're just a business anyways. See what happens is a company will sit down and -invent a ``standard''. Then they try to sell it to as many people as they can. All of a sudden this ``standard'' is -everywhere. Then the standard is updated every so often to keep people dependent. Then you become RSA. If people are -supposed to support these standards they had better make them more accessible. +The library serves as a toolkit for developers who have to solve cryptographic problems. Out of the box LibTomCrypt +does not process SSL or OpenPGP messages, it doesn't read x.591 certificates or write PEM encoded data. It does, however, +provide all of the tools required to build such functionality. LibTomCrypt was designed to be a flexible library that +was not tied to any particular cryptographic problem. \section{Why did I write it?} You may be wondering, ``Tom, why did you write a crypto library. I already have one.''. Well the reason falls into @@ -143,24 +109,35 @@ The idea is that I am not striving to replace OpenSSL or Crypto++ or Cryptlib or With this library all core functions (ciphers, hashes, prngs) have the {\bf exact} same prototype definition. They all load and store data in a format independent of the platform. This means if you encrypt with Blowfish on a PPC it should decrypt -on an x86 with zero problems. The consistent API also means that if you learn how to use blowfish with my library you +on an x86 with zero problems. The consistent API also means that if you learn how to use Blowfish with my library you know how to use Safer+ or RC6 or Serpent or ... as well. With all of the core functions there are central descriptor tables that can be used to make a program automatically pick between ciphers, hashes and PRNGs at runtime. That means your application can support all ciphers/hashes/prngs without changing the source code. +Not only did I strive to make a consistent and simple API to work with but I also strived to make the library +configurable in terms of its build options. Out of the box the library will build with any modern version of GCC +without having to use configure scripts. This means that the library will work with platforms where development +tools may be limited (e.g. no autoconf). + +On top of making the build simple and the API approachable I've also strived for a reasonably high level of +robustness and efficiency. LibTomCrypt traps and returns a series of errors ranging from invalid +arguments to buffer overflows/overruns. It is mostly thread safe and has been clocked on various platforms +with ``cycles per byte'' timings that are comparable (and often favourable) to other libraries such as OpenSSL and +Crypto++. + \subsection{Modular} -The LibTomCrypt package has also been written to be very modular. The block ciphers, one-way hashes and -pseudo-random number generators (PRNG) are all used within the API through ``descriptor'' tables which +The LibTomCrypt package has also been written to be very modular. The block ciphers, one--way hashes and +pseudo--random number generators (PRNG) are all used within the API through ``descriptor'' tables which are essentially structures with pointers to functions. While you can still call particular functions directly (\textit{e.g. sha256\_process()}) this descriptor interface allows the developer to customize their usage of the library. For example, consider a hardware platform with a specialized RNG device. Obviously one would like to tap -that for the PRNG needs within the library (\textit{e.g. making a RSA key}). All the developer has todo +that for the PRNG needs within the library (\textit{e.g. making a RSA key}). All the developer has to do is write a descriptor and the few support routines required for the device. After that the rest of the -API can make use of it without change. Similiarly imagine a few years down the road when AES2 (\textit{or whatever they call it}) is -invented. It can be added to the library and used within applications with zero modifications to the -end applications provided they are written properly. +API can make use of it without change. Similiarly imagine a few years down the road when AES2 +(\textit{or whatever they call it}) has been invented. It can be added to the library and used within applications +with zero modifications to the end applications provided they are written properly. This flexibility within the library means it can be used with any combination of primitive algorithms and unlike libraries like OpenSSL is not tied to direct routines. For instance, in OpenSSL there are CBC block @@ -170,7 +147,6 @@ are not directly tied to the ciphers. That is a new cipher can be added to the the key setup, ECB decrypt and encrypt and test vector routines. After that all five chaining mode routines can make use of the cipher right away. - \section{License} All of the source code except for the following files have been written by the author or donated to the project @@ -181,8 +157,8 @@ under a public domain license: \item safer.c \end{enumerate} -`mpi.c'' was originally written by Michael Fromberger (sting@linguist.dartmouth.edu) but has since been replaced with my LibTomMath -library. +`mpi.c'' was originally written by Michael Fromberger (sting@linguist.dartmouth.edu) but has since been replaced with +my LibTomMath library which is public domain. ``rc2.c'' is based on publicly available code that is not attributed to a person from the given source. ``safer.c'' was written by Richard De Moliner (demoliner@isi.ee.ethz.ch) and seems to be free for use. @@ -221,7 +197,6 @@ early on: There have been quite a few other people as well. Please check the change log to see who else has contributed from time to time. - \chapter{The Application Programming Interface (API)} \section{Introduction} \index{CRYPT\_ERROR} \index{CRYPT\_OK} @@ -255,16 +230,16 @@ There is no initialization routine for the library and for the most part the cod related issue is if you use the same symmetric cipher, hash or public key state data in multiple threads. Normally that is not an issue. -To include the prototypes for ``LibTomCrypt.a'' into your own program simply include ``mycrypt.h'' like so: +To include the prototypes for ``LibTomCrypt.a'' into your own program simply include ``tomcrypt.h'' like so: \begin{verbatim} -#include +#include int main(void) { return 0; } \end{verbatim} -The header file ``mycrypt.h'' also includes ``stdio.h'', ``string.h'', ``stdlib.h'', ``time.h'', ``ctype.h'' and ``mpi.h'' -(the bignum library routines). +The header file ``tomcrypt.h'' also includes ``stdio.h'', ``string.h'', ``stdlib.h'', ``time.h'', ``ctype.h'' and +``ltc\_tommath.h'' (the bignum library routines). \section{Macros} @@ -290,12 +265,19 @@ There are a few helper macros to make the coding process a bit easier. The firs \end{center} \end{small} -There are 32-bit cyclic rotations as well: +There are 32 and 64-bit cyclic rotations as well: \index{ROL} \index{ROR} \begin{center} \begin{tabular}{|c|c|c|} - \hline ROL(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x << y$ \\ - \hline ROR(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x >> y$ \\ + \hline ROL(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x << y, 0 \le y \le 31$ \\ + \hline ROLc(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x << y, 0 \le y \le 31$ \\ + \hline ROR(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x >> y, 0 \le y \le 31$ \\ + \hline RORc(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x >> y, 0 \le y \le 31$ \\ + \hline && \\ + \hline ROL64(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x << y, 0 \le y \le 63$ \\ + \hline ROL64c(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x << y, 0 \le y \le 63$ \\ + \hline ROR64(x, y) & {\bf unsigned long} x, {\bf unsigned long} y & $x >> y, 0 \le y \le 63$ \\ + \hline ROR64c(x, y) & {\bf unsigned long} x, {\bf const unsigned long} y & $x >> y, 0 \le y \le 63$ \\ \hline \end{tabular} \end{center} @@ -306,7 +288,7 @@ must pass it the length of the buffer\footnote{Extensive error checking is not i the output will be stored. For example: \begin{small} \begin{verbatim} -#include +#include int main(void) { rsa_key key; unsigned char buffer[1024]; @@ -331,13 +313,17 @@ int main(void) { } \end{verbatim} \end{small} -In the above example if the size of the RSA public key was more than 1024 bytes this function would not store anything in -either ``buffer'' or ``x'' and simply return an error code. If the function suceeds it stores the length of the output -back into ``x'' so that the calling application will know how many bytes used. +In the above example if the size of the RSA public key was more than 1024 bytes this function would return an error code +indicating a buffer overflow would have occurred. If the function succeeds it stores the length of the output +back into ``x'' so that the calling application will know how many bytes were used. \section{Functions that need a PRNG} -Certain functions such as ``rsa\_make\_key()'' require a PRNG. These functions do not setup the PRNG themselves so it is -the responsibility of the calling function to initialize the PRNG before calling them. +\index{Pseudo Random Number Generator} \index{PRNG} +Certain functions such as ``rsa\_make\_key()'' require a Pseudo Random Number Generator (PRNG). These functions do not setup +the PRNG themselves so it is the responsibility of the calling function to initialize the PRNG before calling them. + +Certain PRNG algorithms do not require a ``prng\_state'' argument (sprng for example). The ``prng\_state'' argument +may be passed as \textbf{NULL} in such situations. \section{Functions that use Arrays of Octets} Most functions require inputs that are arrays of the data type ``unsigned char''. Whether it is a symmetric key, IV @@ -352,14 +338,15 @@ type ``byte'' will be synonymous with an array of type ``unsigned char''. \chapter{Symmetric Block Ciphers} \section{Core Functions} -Libtomcrypt provides several block ciphers all in a plain vanilla ECB block mode. Its important to first note that you +LibTomCrypt provides several block ciphers with an ECB block mode interface. It's important to first note that you should never use the ECB modes directly to encrypt data. Instead you should use the ECB functions to make a chaining mode or use one of the provided chaining modes. All of the ciphers are written as ECB interfaces since it allows the rest of the API to grow in a modular fashion. All ciphers store their scheduled keys in a single data type called ``symmetric\_key''. This allows all ciphers to -have the same prototype and store their keys as naturally as possible. All ciphers provide five visible functions which -are (given that XXX is the name of the cipher): +have the same prototype and store their keys as naturally as possible. This also removes the need for dynamic memory +allocation and allows you to allocate a fixed sized buffer for storing scheduled keys. All ciphers provide five visible +functions which are (given that XXX is the name of the cipher): \index{Cipher Setup} \begin{verbatim} int XXX_setup(const unsigned char *key, int keylen, int rounds, @@ -369,12 +356,12 @@ int XXX_setup(const unsigned char *key, int keylen, int rounds, The XXX\_setup() routine will setup the cipher to be used with a given number of rounds and a given key length (in bytes). The number of rounds can be set to zero to use the default, which is generally a good idea. -If the function returns successfully the variable ``skey'' will have a scheduled key stored in it. Its important to note -that you should only used this scheduled key with the intended cipher. For example, if you call -``blowfish\_setup()'' do not pass the scheduled key onto ``rc5\_ecb\_encrypt()''. All setup functions do not allocate -memory off the heap so when you are done with a key you can simply discard it (e.g. they can be on the stack). +If the function returns successfully the variable ``skey'' will have a scheduled key stored in it. It's important to note +that you should only used this scheduled key with the intended cipher. For example, if you call ``blowfish\_setup()'' do not +pass the scheduled key onto ``rc5\_ecb\_encrypt()''. All setup functions do not allocate memory off the heap so when you are +done with a key you can simply discard it (e.g. they can be on the stack). -To encrypt or decrypt a block in ECB mode there are these two functions: +To encrypt or decrypt a block in ECB mode there are these two function classes \index{Cipher Encrypt} \index{Cipher Decrypt} \begin{verbatim} void XXX_ecb_encrypt(const unsigned char *pt, unsigned char *ct, @@ -385,8 +372,11 @@ void XXX_ecb_decrypt(const unsigned char *ct, unsigned char *pt, \end{verbatim} These two functions will encrypt or decrypt (respectively) a single block of text\footnote{The size of which depends on which cipher you are using.} and store the result where you want it. It is possible that the input and output buffer are -the same buffer. For the encrypt function ``pt''\footnote{pt stands for plaintext.} is the input and ``ct'' is the output. -For the decryption function its the opposite. To test a particular cipher against test vectors\footnote{As published in their design papers.} call: \index{Cipher Testing} +the same buffer. For the encrypt function ``pt''\footnote{pt stands for plaintext.} is the input and +``ct''\footnote{ct stands for ciphertext.} is the output. For the decryption function it's the opposite. To test a particular +cipher against test vectors\footnote{As published in their design papers.} call the self-test function + +\index{Cipher Testing} \begin{verbatim} int XXX_test(void); \end{verbatim} @@ -399,7 +389,7 @@ Essentially it will round the input keysize in ``keysize'' down to the next appr return {\bf CRYPT\_OK} if the key size specified is acceptable. For example: \begin{small} \begin{verbatim} -#include +#include int main(void) { int keysize, err; @@ -415,12 +405,14 @@ int main(void) } \end{verbatim} \end{small} -This should indicate a keysize of sixteen bytes is suggested. An example snippet that encodes a block with -Blowfish in ECB mode is below. +This should indicate a keysize of sixteen bytes is suggested. + +\subsection{Simple Encryption Demonstration} +An example snippet that encodes a block with Blowfish in ECB mode is below. \begin{small} \begin{verbatim} -#include +#include int main(void) { unsigned char pt[8], ct[8], key[8]; @@ -444,12 +436,15 @@ int main(void) blowfish_ecb_encrypt(pt, /* encrypt this 8-byte array */ ct, /* store encrypted data here */ &skey); /* our previously scheduled key */ + + /* now ct holds the encrypted version of pt */ /* decrypt the block */ blowfish_ecb_decrypt(ct, /* decrypt this 8-byte array */ pt, /* store decrypted data here */ &skey); /* our previously scheduled key */ + /* now we have decrypted ct to the original plaintext in pt */ return 0; } \end{verbatim} @@ -459,7 +454,7 @@ int main(void) \index{Symmetric Keys} As a general rule of thumb do not use symmetric keys under 80 bits if you can. Only a few of the ciphers support smaller keys (mainly for test vectors anyways). Ideally your application should be making at least 256 bit keys. This is not -because you're supposed to be paranoid. Its because if your PRNG has a bias of any sort the more bits the better. For +because you're supposed to be paranoid. It's because if your PRNG has a bias of any sort the more bits the better. For example, if you have $\mbox{Pr}\left[X = 1\right] = {1 \over 2} \pm \gamma$ where $\vert \gamma \vert > 0$ then the total amount of entropy in N bits is $N \cdot -log_2\left ({1 \over 2} + \vert \gamma \vert \right)$. So if $\gamma$ were $0.25$ (a severe bias) a 256-bit string would have about 106 bits of entropy whereas a 128-bit string would have @@ -467,7 +462,8 @@ only 53 bits of entropy. The number of rounds of most ciphers is not an option you can change. Only RC5 allows you to change the number of rounds. By passing zero as the number of rounds all ciphers will use their default number of rounds. Generally the -ciphers are configured such that the default number of rounds provide adequate security for the given block size. +ciphers are configured such that the default number of rounds provide adequate security for the given block and key +size. \section{The Cipher Descriptors} \index{Cipher Descriptor} @@ -477,21 +473,25 @@ of this array has the following format: \begin{verbatim} struct _cipher_descriptor { char *name; - unsigned long min_key_length, max_key_length, - block_length, default_rounds; - int (*setup) (const unsigned char *key, int keylength, - int num_rounds, symmetric_key *skey); + unsigned char ID; + int min_key_length, + max_key_length, + block_length, + default_rounds; + int (*setup)(const unsigned char *key, int keylen, int num_rounds, + symmetric_key *skey); void (*ecb_encrypt)(const unsigned char *pt, unsigned char *ct, - symmetric_key *key); - void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt, - symmetric_key *key); - int (*test) (void); - int (*keysize) (int *desired_keysize); + symmetric_key *skey); + void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt, + symmetric_key *skey); + int (*test)(void); + int (*keysize)(int *keysize); }; \end{verbatim} -Where ``name'' is the lower case ASCII version of the name. The fields ``min\_key\_length'', ``max\_key\_length'' and -``block\_length'' are all the number of bytes not bits. As a good rule of thumb it is assumed that the cipher supports +Where ``name'' is the lower case ASCII version of the name. The fields ``min\_key\_length'' and ``max\_key\_length'' +are the minimum and maximum key sizes in bytes. The ``block\_length'' member is the block size of the cipher +in bytes. As a good rule of thumb it is assumed that the cipher supports the min and max key lengths but not always everything in between. The ``default\_rounds'' field is the default number of rounds that will be used. @@ -511,10 +511,6 @@ As of this release the current cipher\_descriptors elements are \hline RC5-32/12/b & rc5\_desc & 8 & 8 $\ldots$ 128 & 12 $\ldots$ 24 \\ \hline RC6-32/20/b & rc6\_desc & 16 & 8 $\ldots$ 128 & 20 \\ \hline SAFER+ & saferp\_desc &16 & 16, 24, 32 & 8, 12, 16 \\ - \hline Safer K64 & safer\_k64\_desc & 8 & 8 & 6 $\ldots$ 13 \\ - \hline Safer SK64 & safer\_sk64\_desc & 8 & 8 & 6 $\ldots$ 13 \\ - \hline Safer K128 & safer\_k128\_desc & 8 & 16 & 6 $\ldots$ 13 \\ - \hline Safer SK128 & safer\_sk128\_desc & 8 & 16 & 6 $\ldots$ 13 \\ \hline AES & aes\_desc & 16 & 16, 24, 32 & 10, 12, 14 \\ & aes\_enc\_desc & 16 & 16, 24, 32 & 10, 12, 14 \\ \hline Twofish & twofish\_desc & 16 & 16, 24, 32 & 16 \\ @@ -523,6 +519,8 @@ As of this release the current cipher\_descriptors elements are \hline CAST5 (CAST-128) & cast5\_desc & 8 & 5 $\ldots$ 16 & 12, 16 \\ \hline Noekeon & noekeon\_desc & 16 & 16 & 16 \\ \hline Skipjack & skipjack\_desc & 8 & 10 & 32 \\ + \hline Anubis & anubis\_desc & 16 & 16 $\ldots$ 40 & 12 $\ldots$ 18 \\ + \hline Khazad & khazad\_desc & 8 & 16 & 8 \\ \hline \end{tabular} \end{center} @@ -544,11 +542,6 @@ The ``encrypt only'' descriptors are useful for applications that only use the e as EAX, PMAC and OMAC only require the encryption function. So far this ``encrypt only'' functionality has only been implemented for Rijndael as it makes the most sense for this cipher. -\item -For the 64-bit SAFER famliy of ciphers (e.g K64, SK64, K128, SK128) the ecb\_encrypt() and ecb\_decrypt() -functions are the same. So if you want to use those functions directly just call safer\_ecb\_encrypt() -or safer\_ecb\_decrypt() respectively. - \item Note that for ``DES'' and ``3DES'' they use 8 and 24 byte keys but only 7 and 21 [respectively] bytes of the keys are in fact used for the purposes of encryption. My suggestion is just to use random 8/24 byte keys instead of trying to make a 8/24 @@ -590,7 +583,7 @@ Which will search for a given name in the array. It returns negative one if the the location in the array where the cipher was found. For example, to indirectly setup Blowfish you can also use: \begin{small} \begin{verbatim} -#include +#include int main(void) { unsigned char key[8]; @@ -631,7 +624,7 @@ int unregister_cipher(const struct _cipher_descriptor *cipher); Which returns {\bf CRYPT\_OK} if it removes it otherwise it returns {\bf CRYPT\_ERROR}. Consider: \begin{small} \begin{verbatim} -#include +#include int main(void) { int err; @@ -794,7 +787,7 @@ The XXX\_setiv functions are handy if you wish to change the IV without re--keyi \newpage \begin{small} \begin{verbatim} -#include +#include int main(void) { unsigned char key[16], IV[16], buffer[512]; @@ -944,7 +937,7 @@ int eax_test(void); This requires that the AES (or Rijndael) block cipher be registered with the cipher\_descriptor table first. \begin{verbatim} -#include +#include int main(void) { int err; @@ -1132,7 +1125,7 @@ void XXX_init(hash_state *md); This simply sets up the hash to the default state governed by the specifications of the hash. To add data to the message being hashed call: \begin{verbatim} -int XXX_process(hash_state *md, const unsigned char *in, unsigned long len); +int XXX_process(hash_state *md, const unsigned char *in, unsigned long inlen); \end{verbatim} Essentially all hash messages are virtually infinitely\footnote{Most hashes are limited to $2^{64}$ bits or 2,305,843,009,213,693,952 bytes.} long message which @@ -1167,7 +1160,7 @@ This will return {\bf CRYPTO\_OK} if the hash matches the test vectors, otherwis example snippet that hashes a message with md5 is given below. \begin{small} \begin{verbatim} -#include +#include int main(void) { hash_state md; @@ -1195,9 +1188,10 @@ struct _hash_descriptor { char *name; unsigned long hashsize; /* digest output size in bytes */ unsigned long blocksize; /* the block size the hash uses */ - void (*init) (hash_state *); - int (*process)(hash_state *, const unsigned char *, unsigned long); - int (*done) (hash_state *, unsigned char *); + void (*init) (hash_state *hash); + int (*process)(hash_state *hash, + const unsigned char *in, unsigned long inlen); + int (*done) (hash_state *hash, unsigned char *out); int (*test) (void); }; \end{verbatim} @@ -1210,7 +1204,7 @@ position in the descriptor table of the hash. You can use the table to indirectly call a hash function that is chosen at runtime. For example: \begin{small} \begin{verbatim} -#include +#include int main(void) { unsigned char buffer[100], hash[MAXBLOCKSIZE]; @@ -1258,29 +1252,27 @@ length. This provides a simple size you can set your automatic arrays to that w There are three helper functions as well: \index{hash\_memory()} \index{hash\_file()} \begin{verbatim} -int hash_memory(int hash, const unsigned char *data, - unsigned long len, unsigned char *dst, - unsigned long *outlen); +int hash_memory(int hash, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen); int hash_file(int hash, const char *fname, - unsigned char *dst, - unsigned long *outlen); + unsigned char *out, unsigned long *outlen); int hash_filehandle(int hash, FILE *in, - unsigned char *dst, unsigned long *outlen); + unsigned char *out, unsigned long *outlen); \end{verbatim} The ``hash'' parameter is the location in the descriptor table of the hash (\textit{e.g. the return of find\_hash()}). -The ``*outlen'' variable is used to keep track of the output size. You -must set it to the size of your output buffer before calling the functions. When they complete succesfully they store -the length of the message digest back in it. The functions are otherwise straightforward. The ``hash\_filehandle'' -function assumes that ``in'' is an file handle opened in binary mode. It will hash to the end of file and not reset -the file position when finished. +The ``*outlen'' variable is used to keep track of the output size. You must set it to the size of your output buffer before +calling the functions. When they complete succesfully they store the length of the message digest back in it. The functions +are otherwise straightforward. The ``hash\_filehandle'' function assumes that ``in'' is an file handle opened in binary mode. +It will hash to the end of file and not reset the file position when finished. To perform the above hash with md5 the following code could be used: \begin{small} \begin{verbatim} -#include +#include int main(void) { int idx, err; @@ -1364,7 +1356,7 @@ be bound to the CHC hash at a time. There are additional requirements for the s Example of using CHC with the AES block cipher. \begin{verbatim} -#include +#include int main(void) { int err; @@ -1417,18 +1409,18 @@ to use to authenticate the message. ``key'' is the pointer to the array of char length (in octets) of the key you want to use to authenticate the message. To send octets of a message through the HMAC system you must use the following function: \index{hmac\_process()} \begin{verbatim} -int hmac_process(hmac_state *hmac, const unsigned char *buf, - unsigned long len); +int hmac_process(hmac_state *hmac, + const unsigned char *in, unsigned long inlen); \end{verbatim} ``hmac'' is the HMAC state you are working with. ``buf'' is the array of octets to send into the HMAC process. ``len'' is the number of octets to process. Like the hash process routines you can send the data in arbitrarly sized chunks. When you are finished with the HMAC process you must call the following function to get the HMAC code: \index{hmac\_done()} \begin{verbatim} -int hmac_done(hmac_state *hmac, unsigned char *hashOut, - unsigned long *outlen); +int hmac_done(hmac_state *hmac, + unsigned char *out, unsigned long *outlen); \end{verbatim} -``hmac'' is the HMAC state you are working with. ``hashOut'' is the array of octets where the HMAC code should be stored. You must +``hmac'' is the HMAC state you are working with. ``out'' is the array of octets where the HMAC code should be stored. You must set ``outlen'' to the size of the destination buffer before calling this function. It is updated with the length of the HMAC code produced (depending on which hash was picked). If ``outlen'' is less than the size of the message digest (and ultimately the HMAC code) then the HMAC code is truncated as per FIPS-198 specifications (e.g. take the first ``outlen'' bytes). @@ -1439,22 +1431,23 @@ calling the three step process yourself. \index{hmac\_memory()} \begin{verbatim} -int hmac_memory(int hash, const unsigned char *key, unsigned long keylen, - const unsigned char *data, unsigned long len, - unsigned char *dst, unsigned long *dstlen); +int hmac_memory(int hash, + const unsigned char *key, unsigned long keylen, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen); \end{verbatim} -This will produce an HMAC code for the array of octets in ``data'' of length ``len''. The index into the hash descriptor +This will produce an HMAC code for the array of octets in ``in'' of length ``inlen''. The index into the hash descriptor table must be provided in ``hash''. It uses the key from ``key'' with a key length of ``keylen''. -The result is stored in the array of octets ``dst'' and the length in ``dstlen''. The value of ``dstlen'' must be set +The result is stored in the array of octets ``out'' and the length in ``outlen''. The value of ``outlen'' must be set to the size of the destination buffer before calling this function. Similarly for files there is the following function: \index{hmac\_file()} \begin{verbatim} -int hmac_file(int hash, const char *fname, const unsigned char *key, - unsigned long keylen, - unsigned char *dst, unsigned long *dstlen); +int hmac_file(int hash, const char *fname, + const unsigned char *key, unsigned long keylen, + unsigned char *out, unsigned long *outlen); \end{verbatim} ``hash'' is the index into the hash descriptor table of the hash you want to use. ``fname'' is the filename to process. -``key'' is the array of octets to use as the key of length ``keylen''. ``dst'' is the array of octets where the +``key'' is the array of octets to use as the key of length ``keylen''. ``out'' is the array of octets where the result should be stored. To test if the HMAC code is working there is the following function: @@ -1467,7 +1460,7 @@ HMAC system is given below. \begin{small} \begin{verbatim} -#include +#include int main(void) { int idx, err; @@ -1531,9 +1524,9 @@ To send data through the algorithm call \index{omac\_process()} \begin{verbatim} int omac_process(omac_state *state, - const unsigned char *buf, unsigned long len); + const unsigned char *in, unsigned long inlen); \end{verbatim} -This will send ``len'' bytes from ``buf'' through the active OMAC state ``state''. Returns \textbf{CRYPT\_OK} if the +This will send ``inlen'' bytes from ``in'' through the active OMAC state ``state''. Returns \textbf{CRYPT\_OK} if the function succeeds. The function is not sensitive to the granularity of the data. For example, \begin{verbatim} @@ -1567,10 +1560,10 @@ following function. \begin{verbatim} int omac_memory(int cipher, const unsigned char *key, unsigned long keylen, - const unsigned char *msg, unsigned long msglen, - unsigned char *out, unsigned long *outlen); + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen); \end{verbatim} -This will compute the OMAC of ``msglen'' bytes of ``msg'' using the key ``key'' of length ``keylen'' bytes and the cipher +This will compute the OMAC of ``inlen'' bytes of ``in'' using the key ``key'' of length ``keylen'' bytes and the cipher specified by the ``cipher'''th entry in the cipher\_descriptor table. It will store the MAC in ``out'' with the same rules as omac\_done. @@ -1580,7 +1573,7 @@ To OMAC a file use int omac_file(int cipher, const unsigned char *key, unsigned long keylen, const char *filename, - unsigned char *out, unsigned long *outlen); + unsigned char *out, unsigned long *outlen); \end{verbatim} Which will OMAC the entire contents of the file specified by ``filename'' using the key ``key'' of length ``keylen'' bytes @@ -1597,7 +1590,7 @@ OMAC system is given below. \begin{small} \begin{verbatim} -#include +#include int main(void) { int idx, err; @@ -1662,9 +1655,9 @@ To MAC data simply send it through the process function. \index{pmac\_process()} \begin{verbatim} int pmac_process(pmac_state *state, - const unsigned char *buf, unsigned long len); + const unsigned char *in, unsigned long inlen); \end{verbatim} -This will process ``len'' bytes of ``buf'' in the given ``state''. The function is not sensitive to the granularity of the +This will process ``inlen'' bytes of ``in'' in the given ``state''. The function is not sensitive to the granularity of the data. For example, \begin{verbatim} @@ -1694,9 +1687,9 @@ following function. \index{pmac\_memory()} \begin{verbatim} int pmac_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *msg, unsigned long msglen, - unsigned char *out, unsigned long *outlen); + const unsigned char *key, unsigned long keylen, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen); \end{verbatim} This will compute the PMAC of ``msglen'' bytes of ``msg'' using the key ``key'' of length ``keylen'' bytes and the cipher specified by the ``cipher'''th entry in the cipher\_descriptor table. It will store the MAC in ``out'' with the same @@ -1722,9 +1715,6 @@ int pmac_test(void); Which returns {\bf CRYPT\_OK} if the code passes otherwise it returns an error code. - - - \chapter{Pseudo-Random Number Generators} \section{Core Functions} The library provides an array of core functions for Pseudo-Random Number Generators (PRNGs) as well. A cryptographic PRNG is @@ -1735,12 +1725,11 @@ key generation. There is a universal structure called ``prng\_state''. To init int XXX_start(prng_state *prng); \end{verbatim} -This will setup the PRNG for future use and not seed it. In order -for the PRNG to be cryptographically useful you must give it entropy. Ideally you'd have some OS level source to tap -like in UNIX (see section 5.3). To add entropy to the PRNG call: +This will setup the PRNG for future use and not seed it. In order for the PRNG to be cryptographically useful you must give it +entropy. Ideally you'd have some OS level source to tap like in UNIX. To add entropy to the PRNG call: \index{PRNG add\_entropy} \begin{verbatim} -int XXX_add_entropy(const unsigned char *in, unsigned long len, +int XXX_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng); \end{verbatim} @@ -1754,7 +1743,7 @@ int XXX_ready(prng_state *prng); Which returns {\bf CRYPTO\_OK} if it is ready. Finally to actually read bytes call: \index{PRNG read} \begin{verbatim} -unsigned long XXX_read(unsigned char *out, unsigned long len, +unsigned long XXX_read(unsigned char *out, unsigned long outlen, prng_state *prng); \end{verbatim} @@ -1831,7 +1820,7 @@ Below is a simple snippet to read 10 bytes from yarrow. Its important to note t {\bf NOT} secure since the entropy added is not random. \begin{verbatim} -#include +#include int main(void) { prng_state prng; @@ -1961,7 +1950,7 @@ simulations which need a high quality (and fast) stream of bytes. \subsubsection{Example Usage} \begin{small} \begin{verbatim} -#include +#include int main(void) { prng_state prng; @@ -2029,7 +2018,7 @@ platform where the RNG doesn't work well. Example usage of this function is giv \begin{small} \begin{verbatim} -#include +#include int main(void) { ecc_key mykey; @@ -2066,7 +2055,7 @@ the previous example using this PRNG. \begin{small} \begin{verbatim} -#include +#include int main(void) { ecc_key mykey; @@ -2088,6 +2077,8 @@ int main(void) \end{verbatim} \end{small} + + \chapter{RSA Public Key Cryptography} \section{Introduction} @@ -2307,8 +2298,8 @@ To do raw work with the RSA function call: \index{rsa\_exptmod()} \begin{verbatim} int rsa_exptmod(const unsigned char *in, unsigned long inlen, - unsigned char *out, unsigned long *outlen, int which, - prng_state *prng, int prng_idx, + unsigned char *out, unsigned long *outlen, + int which, prng_state *prng, int prng_idx, rsa_key *key); \end{verbatim} This loads the bignum from ``in'' as a big endian word in the format PKCS specifies, raises it to either ``e'' or ``d'' and stores the result @@ -2324,26 +2315,26 @@ To facilitate encrypting short keys the following functions have been provided. \index{rsa\_encrypt\_key()} \begin{verbatim} -int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen, - unsigned char *outkey, unsigned long *outlen, +int rsa_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, const unsigned char *lparam, unsigned long lparamlen, prng_state *prng, int prng_idx, int hash_idx, rsa_key *key); \end{verbatim} -This function will OAEP pad ``inkey'' of length inlen bytes then RSA encrypt it and store the ciphertext -in ``outkey'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass +This function will OAEP pad ``in'' of length inlen bytes then RSA encrypt it and store the ciphertext +in ``out'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass to pkcs\_1\_oaep\_encode(). \index{rsa\_decrypt\_key()} \begin{verbatim} -int rsa_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, +int rsa_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, const unsigned char *lparam, unsigned long lparamlen, prng_state *prng, int prng_idx, int hash_idx, int *res, rsa_key *key); \end{verbatim} This function will RSA decrypt ``in'' of length ``inlen'' then OAEP depad the resulting data and store it in -``outkey'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass +``out'' of length ``outlen''. The ``lparam'' and ``lparamlen'' are the same parameters you would pass to pkcs\_1\_oaep\_decode(). If the RSA decrypted data isn't a valid OAEP packet then ``res'' is set to $0$. Otherwise, it is set to $1$. @@ -2354,15 +2345,15 @@ process the following functions have been provided. \index{rsa\_sign\_hash()} \begin{verbatim} -int rsa_sign_hash(const unsigned char *msghash, unsigned long msghashlen, - unsigned char *sig, unsigned long *siglen, +int rsa_sign_hash(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, prng_state *prng, int prng_idx, int hash_idx, unsigned long saltlen, rsa_key *key); \end{verbatim} -This will PSS encode the message hash ``msghash'' of length ``msghashlen''. Next the PSS encoded message is -RSA ``signed'' and the output is stored in ``sig'' of length ``siglen''. +This will PSS encode the message hash ``in'' of length ``inlen''. Next the PSS encoded message will be RSA ``signed'' and +the output is stored in ``out'' of length ``outlen''. \index{rsa\_verify\_hash()} @@ -2382,7 +2373,7 @@ the value ``res'' is set to $0$. Otherwise, if the function succeeds and signat to $1$. \begin{verbatim} -#include +#include int main(void) { int err, hash_idx, prng_idx, res; @@ -2646,16 +2637,16 @@ Similar to the RSA related functions there are functions to encrypt or decrypt s algorithms. \index{dh\_encrypt\_key()} \index{dh\_decrypt\_key()} \begin{verbatim} -int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen, +int dh_encrypt_key(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *len, prng_state *prng, int wprng, int hash, dh_key *key); -int dh_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, +int dh_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, dh_key *key); \end{verbatim} -Where ``inkey'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key +Where ``in'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key and find the hash of the shared secret. The message digest is than XOR'ed against the symmetric key. All of the required data is placed in ``out'' by ``dh\_encrypt\_key()''. The hash must produce a message digest at least as large as the symmetric key you are trying to share. @@ -2759,17 +2750,17 @@ algorithms. \index{ecc\_encrypt\_key()} \index{ecc\_decrypt\_key()} \begin{verbatim} -int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, - unsigned char *out, unsigned long *len, +int ecc_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, prng_state *prng, int wprng, int hash, ecc_key *key); -int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, +int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, ecc_key *key); \end{verbatim} -Where ``inkey'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key +Where ``in'' is an input symmetric key of no more than 32 bytes. Essentially these routines created a random public key and find the hash of the shared secret. The message digest is than XOR'ed against the symmetric key. All of the required data is placed in ``out'' by ``ecc\_encrypt\_key()''. The hash chosen must produce a message digest at least as large as the symmetric key you are trying to share. @@ -2975,7 +2966,7 @@ These will handle multiple encodings/decodings at once. They work like their si except they handle a \textbf{NULL} terminated list of operands. \begin{verbatim} -#include +#include int main(void) { mp_int a, b, c, d; @@ -3047,7 +3038,7 @@ on the password. The ``hash\_idx'' is the index of the hash you wish to use in \begin{alltt} /* demo to show how to make session state material from a password */ -#include +#include int main(void) \{ unsigned char password[100], salt[100], @@ -3115,7 +3106,7 @@ for all uses and is distributed freely. At the heart of all the functions is the data type ``mp\_int'' (defined in tommath.h). This data type is what will hold all large integers. In order to use an mp\_int one must initialize it first, for example: \begin{verbatim} -#include /* mycrypt.h includes mpi.h automatically */ +#include /* tomcrypt.h includes mpi.h automatically */ int main(void) { mp_int bignum; @@ -3327,7 +3318,7 @@ make install_lib Which will build the library and install it in /usr/lib (as well as the headers in /usr/include). The destination directory of the library and headers can be changed by editing ``makefile''. The variable LIBNAME controls where the library is to be installed and INCNAME controls where the headers are to be installed. A developer can -then use the library by including ``mycrypt.h'' in their program and linking against ``libtomcrypt.a''. +then use the library by including ``tomcrypt.h'' in their program and linking against ``libtomcrypt.a''. A static library can also be built with the Intel C Compiler (ICC) by issuing the following diff --git a/cscope.tmplst b/cscope.tmplst deleted file mode 100644 index 7fabc86..0000000 --- a/cscope.tmplst +++ /dev/null @@ -1,219 +0,0 @@ -./aes.c -./aes_tab.c -./base64_decode.c -./base64_encode.c -./blowfish.c -./burn_stack.c -./cast5.c -./cbc_decrypt.c -./cbc_encrypt.c -./cbc_getiv.c -./cbc_setiv.c -./cbc_start.c -./cfb_decrypt.c -./cfb_encrypt.c -./cfb_getiv.c -./cfb_setiv.c -./cfb_start.c -./chc.c -./crypt.c -./crypt_argchk.c -./crypt_cipher_descriptor.c -./crypt_cipher_is_valid.c -./crypt_find_cipher.c -./crypt_find_cipher_any.c -./crypt_find_cipher_id.c -./crypt_find_hash.c -./crypt_find_hash_any.c -./crypt_find_hash_id.c -./crypt_find_prng.c -./crypt_hash_descriptor.c -./crypt_hash_is_valid.c -./crypt_prng_descriptor.c -./crypt_prng_is_valid.c -./crypt_register_cipher.c -./crypt_register_hash.c -./crypt_register_prng.c -./crypt_unregister_cipher.c -./crypt_unregister_hash.c -./crypt_unregister_prng.c -./ctr_decrypt.c -./ctr_encrypt.c -./ctr_getiv.c -./ctr_setiv.c -./ctr_start.c -./demos/encrypt.c -./demos/hashsum.c -./demos/small.c -./demos/test/base64_test.c -./demos/test/cipher_hash_test.c -./demos/test/der_tests.c -./demos/test/dh_tests.c -./demos/test/dsa_test.c -./demos/test/ecc_test.c -./demos/test/mac_test.c -./demos/test/makefile -./demos/test/makefile.icc -./demos/test/makefile.msvc -./demos/test/makefile.shared -./demos/test/modes_test.c -./demos/test/pkcs_1_test.c -./demos/test/rsa_test.c -./demos/test/store_test.c -./demos/test/test.c -./demos/test/test.h -./demos/tv_gen.c -./demos/x86_prof.c -./der_decode_integer.c -./der_encode_integer.c -./der_get_multi_integer.c -./der_length_integer.c -./der_put_multi_integer.c -./des.c -./dh.c -./dh_sys.c -./dsa_export.c -./dsa_free.c -./dsa_import.c -./dsa_make_key.c -./dsa_sign_hash.c -./dsa_verify_hash.c -./dsa_verify_key.c -./eax_addheader.c -./eax_decrypt.c -./eax_decrypt_verify_memory.c -./eax_done.c -./eax_encrypt.c -./eax_encrypt_authenticate_memory.c -./eax_init.c -./eax_test.c -./ecb_decrypt.c -./ecb_encrypt.c -./ecb_start.c -./ecc.c -./ecc_sys.c -./error_to_string.c -./fortuna.c -./hash_file.c -./hash_filehandle.c -./hash_memory.c -./hmac_done.c -./hmac_file.c -./hmac_init.c -./hmac_memory.c -./hmac_process.c -./hmac_test.c -./is_prime.c -./ltc_tommath.h -./makefile -./makefile.cygwin_dll -./makefile.icc -./makefile.msvc -./makefile.shared -./md2.c -./md4.c -./md5.c -./mpi.c -./mpi_to_ltc_error.c -./mycrypt.h -./mycrypt_argchk.h -./mycrypt_cfg.h -./mycrypt_cipher.h -./mycrypt_custom.h -./mycrypt_hash.h -./mycrypt_macros.h -./mycrypt_misc.h -./mycrypt_pk.h -./mycrypt_pkcs.h -./mycrypt_prng.h -./noekeon.c -./notes/etc/whirlgen.c -./notes/etc/whirltest.c -./ocb_decrypt.c -./ocb_decrypt_verify_memory.c -./ocb_done_decrypt.c -./ocb_done_encrypt.c -./ocb_encrypt.c -./ocb_encrypt_authenticate_memory.c -./ocb_init.c -./ocb_ntz.c -./ocb_shift_xor.c -./ocb_test.c -./ofb_decrypt.c -./ofb_encrypt.c -./ofb_getiv.c -./ofb_setiv.c -./ofb_start.c -./omac_done.c -./omac_file.c -./omac_init.c -./omac_memory.c -./omac_process.c -./omac_test.c -./packet_store_header.c -./packet_valid_header.c -./pkcs_1_i2osp.c -./pkcs_1_mgf1.c -./pkcs_1_oaep_decode.c -./pkcs_1_oaep_encode.c -./pkcs_1_os2ip.c -./pkcs_1_pss_decode.c -./pkcs_1_pss_encode.c -./pkcs_1_v15_es_decode.c -./pkcs_1_v15_es_encode.c -./pkcs_1_v15_sa_decode.c -./pkcs_1_v15_sa_encode.c -./pkcs_5_1.c -./pkcs_5_2.c -./pmac_done.c -./pmac_file.c -./pmac_init.c -./pmac_memory.c -./pmac_ntz.c -./pmac_process.c -./pmac_shift_xor.c -./pmac_test.c -./rand_prime.c -./rc2.c -./rc4.c -./rc5.c -./rc6.c -./rmd128.c -./rmd160.c -./rng_get_bytes.c -./rng_make_prng.c -./rsa_decrypt_key.c -./rsa_encrypt_key.c -./rsa_export.c -./rsa_exptmod.c -./rsa_free.c -./rsa_import.c -./rsa_make_key.c -./rsa_sign_hash.c -./rsa_v15_decrypt_key.c -./rsa_v15_encrypt_key.c -./rsa_v15_sign_hash.c -./rsa_v15_verify_hash.c -./rsa_verify_hash.c -./s_ocb_done.c -./safer.c -./safer_tab.c -./saferp.c -./sha1.c -./sha224.c -./sha256.c -./sha384.c -./sha512.c -./skipjack.c -./sober128.c -./sober128tab.c -./sprng.c -./tiger.c -./tim_exptmod.c -./twofish.c -./twofish_tab.c -./whirl.c -./whirltab.c -./xtea.c -./yarrow.c -./zeromem.c diff --git a/demos/encrypt.c b/demos/encrypt.c index 5320c21..67627f7 100644 --- a/demos/encrypt.c +++ b/demos/encrypt.c @@ -7,7 +7,7 @@ /* ie: ./encrypt blowfish story.txt story.ct */ /* ./encrypt -d blowfish story.ct story.pt */ -#include +#include int errno; @@ -69,6 +69,12 @@ void register_algs(void) #ifdef SKIPJACK register_cipher (&skipjack_desc); #endif +#ifdef KHAZAD + register_cipher (&khazad_desc); +#endif +#ifdef ANUBIS + register_cipher (&anubis_desc); +#endif if (register_hash(&sha256_desc) == -1) { printf("Error registering SHA256\n"); diff --git a/demos/hashsum.c b/demos/hashsum.c index c633ca8..23946cc 100644 --- a/demos/hashsum.c +++ b/demos/hashsum.c @@ -7,7 +7,7 @@ * more functions ;) */ -#include +#include int errno; diff --git a/demos/multi.c b/demos/multi.c new file mode 100644 index 0000000..fdc8dc6 --- /dev/null +++ b/demos/multi.c @@ -0,0 +1,106 @@ +/* test the multi helpers... */ +#include + +int main(void) +{ + unsigned char key[16], buf[2][MAXBLOCKSIZE]; + unsigned long len, len2; + + +/* register algos */ + register_hash(&sha256_desc); + register_cipher(&aes_desc); + +/* HASH testing */ + len = sizeof(buf[0]); + hash_memory(find_hash("sha256"), "hello", 5, buf[0], &len); + len2 = sizeof(buf[0]); + hash_memory_multi(find_hash("sha256"), buf[1], &len2, "hello", 5, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + hash_memory_multi(find_hash("sha256"), buf[1], &len2, "he", 2, "llo", 3, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + hash_memory_multi(find_hash("sha256"), buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + +/* HMAC */ + len = sizeof(buf[0]); + hmac_memory(find_hash("sha256"), key, 16, "hello", 5, buf[0], &len); + len2 = sizeof(buf[0]); + hmac_memory_multi(find_hash("sha256"), key, 16, buf[1], &len2, "hello", 5, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + hmac_memory_multi(find_hash("sha256"), key, 16, buf[1], &len2, "he", 2, "llo", 3, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + hmac_memory_multi(find_hash("sha256"), key, 16, buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + +/* OMAC */ + len = sizeof(buf[0]); + omac_memory(find_cipher("aes"), key, 16, "hello", 5, buf[0], &len); + len2 = sizeof(buf[0]); + omac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "hello", 5, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + omac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "he", 2, "llo", 3, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + omac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + +/* PMAC */ + len = sizeof(buf[0]); + pmac_memory(find_cipher("aes"), key, 16, "hello", 5, buf[0], &len); + len2 = sizeof(buf[0]); + pmac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "hello", 5, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + pmac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "he", 2, "llo", 3, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + len2 = sizeof(buf[0]); + pmac_memory_multi(find_cipher("aes"), key, 16, buf[1], &len2, "h", 1, "e", 1, "l", 1, "l", 1, "o", 1, NULL); + if (len != len2 || memcmp(buf[0], buf[1], len)) { + printf("Failed: %d %lu %lu\n", __LINE__, len, len2); + return EXIT_FAILURE; + } + + + printf("All passed\n"); + return EXIT_SUCCESS; +} + diff --git a/demos/small.c b/demos/small.c index f5a0d43..bc9793b 100644 --- a/demos/small.c +++ b/demos/small.c @@ -1,6 +1,5 @@ // small demo app that just includes a cipher/hash/prng - -#include +#include int main(void) { diff --git a/demos/test/der_tests.c b/demos/test/der_tests.c index 0c0e3df..dd17f31 100644 --- a/demos/test/der_tests.c +++ b/demos/test/der_tests.c @@ -1,5 +1,15 @@ #include "test.h" +#ifndef LTC_DER + +int der_tests(void) +{ + printf("NOP"); + return 0; +} + +#else + int der_tests(void) { unsigned long x, y, z, zz; @@ -80,3 +90,5 @@ int der_tests(void) mp_clear_multi(&a, &b, &c, &d, &e, &f, &g, NULL); return 0; } + +#endif diff --git a/demos/test/ecc_test.c b/demos/test/ecc_test.c index eb66c58..9121f92 100644 --- a/demos/test/ecc_test.c +++ b/demos/test/ecc_test.c @@ -7,7 +7,7 @@ int ecc_tests (void) unsigned char buf[4][4096]; unsigned long x, y, z; int stat, stat2; - ecc_key usera, userb; + ecc_key usera, userb, pubKey, privKey; DO(ecc_test ()); @@ -55,15 +55,24 @@ int ecc_tests (void) ecc_free (&userb); /* test encrypt_key */ - ecc_make_key (&test_yarrow, find_prng ("yarrow"), 65, &usera); + DO(ecc_make_key (&test_yarrow, find_prng ("yarrow"), 65, &usera)); + +/* export key */ + x = sizeof(buf[0]); + DO(ecc_export(buf[0], &x, PK_PUBLIC, &usera)); + DO(ecc_import(buf[0], x, &pubKey)); + x = sizeof(buf[0]); + DO(ecc_export(buf[0], &x, PK_PRIVATE, &usera)); + DO(ecc_import(buf[0], x, &privKey)); + for (x = 0; x < 32; x++) { buf[0][x] = x; } y = sizeof (buf[1]); - DO(ecc_encrypt_key (buf[0], 32, buf[1], &y, &test_yarrow, find_prng ("yarrow"), find_hash ("sha256"), &usera)); + DO(ecc_encrypt_key (buf[0], 32, buf[1], &y, &test_yarrow, find_prng ("yarrow"), find_hash ("sha256"), &pubKey)); zeromem (buf[0], sizeof (buf[0])); x = sizeof (buf[0]); - DO(ecc_decrypt_key (buf[1], y, buf[0], &x, &usera)); + DO(ecc_decrypt_key (buf[1], y, buf[0], &x, &privKey)); if (x != 32) { printf ("Failed (length)"); return 1; @@ -78,15 +87,17 @@ int ecc_tests (void) buf[0][x] = x; } x = sizeof (buf[1]); - DO(ecc_sign_hash (buf[0], 16, buf[1], &x, &test_yarrow, find_prng ("yarrow"), &usera)); - DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat, &usera)); + DO(ecc_sign_hash (buf[0], 16, buf[1], &x, &test_yarrow, find_prng ("yarrow"), &privKey)); + DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat, &pubKey)); buf[0][0] ^= 1; - DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat2, &usera)); + DO(ecc_verify_hash (buf[1], x, buf[0], 16, &stat2, &privKey)); if (!(stat == 1 && stat2 == 0)) { printf("ecc_verify_hash failed"); return 1; } - ecc_free (&usera); + ecc_free (&usera); + ecc_free (&pubKey); + ecc_free (&privKey); return 0; } diff --git a/demos/test/makefile b/demos/test/makefile index e306d17..7351548 100644 --- a/demos/test/makefile +++ b/demos/test/makefile @@ -1,5 +1,5 @@ # make test harness, it is good. -CFLAGS += -Wall -W -Os -I../../ -I./ +CFLAGS += -Wall -W -Os -I../../src/headers/ -I./ # add -g3 for ccmalloc debugging #CFLAGS += -g3 @@ -19,7 +19,7 @@ pkcs_1_test.o store_test.o rsa_test.o ecc_test.o dsa_test.o dh_tests.o der_tests #CCMALLOC = -lccmalloc -ldl test: $(OBJECTS) - $(CC) $(OBJECTS) /usr/lib/libtomcrypt.a $(CCMALLOC) -o test + $(CC) $(CFLAGS) $(OBJECTS) /usr/lib/libtomcrypt.a $(CCMALLOC) -o test clean: rm -rf test *.o *.obj *.exe *~ .libs diff --git a/demos/test/makefile.icc b/demos/test/makefile.icc index b32c9ba..b69c997 100644 --- a/demos/test/makefile.icc +++ b/demos/test/makefile.icc @@ -1,5 +1,5 @@ # make test harness, it is good. -CFLAGS += -O3 -xN -ip -I../../ -I./ +CFLAGS += -O3 -xN -ip -I../../src/headers/ -I./ CC=icc default: test diff --git a/demos/test/makefile.msvc b/demos/test/makefile.msvc index 8769ecf..7d04b86 100644 --- a/demos/test/makefile.msvc +++ b/demos/test/makefile.msvc @@ -1,5 +1,5 @@ # make test harness, it is good. -CFLAGS = $(CFLAGS) /W3 /Ox -I../../ -I./ +CFLAGS = $(CFLAGS) /W3 /Ox /I../../src/headers/ /I./ default: test.exe diff --git a/demos/test/makefile.shared b/demos/test/makefile.shared index d90c1da..9f46713 100644 --- a/demos/test/makefile.shared +++ b/demos/test/makefile.shared @@ -1,5 +1,5 @@ # make test harness, it is good. -CFLAGS += -Wall -W -Os -I../../ -I./ +CFLAGS += -Wall -W -Os -I../../src/headers/ -I./ # if you're not debugging CFLAGS += -fomit-frame-pointer diff --git a/demos/test/rsa_test.c b/demos/test/rsa_test.c index a6034dd..4ff1962 100644 --- a/demos/test/rsa_test.c +++ b/demos/test/rsa_test.c @@ -8,7 +8,7 @@ int rsa_test(void) { unsigned char in[1024], out[1024], tmp[1024]; rsa_key key, privKey, pubKey; - int hash_idx, prng_idx, stat, stat2; + int hash_idx, prng_idx, stat, stat2, cnt; unsigned long rsa_msgsize, len, len2; static unsigned char lparam[] = { 0x01, 0x02, 0x03, 0x04 }; @@ -23,6 +23,7 @@ int rsa_test(void) DO(rsa_make_key(&test_yarrow, prng_idx, 1024/8, 65537, &key)); /* test PKCS #1 v1.5 */ + for (cnt = 0; cnt < 4; cnt++) { for (rsa_msgsize = 1; rsa_msgsize <= 117; rsa_msgsize++) { /* make a random key/msg */ yarrow_read(in, rsa_msgsize, &test_yarrow); @@ -32,26 +33,28 @@ int rsa_test(void) /* encrypt */ DO(rsa_v15_encrypt_key(in, rsa_msgsize, out, &len, &test_yarrow, prng_idx, &key)); - DO(rsa_v15_decrypt_key(out, len, tmp, rsa_msgsize, &test_yarrow, prng_idx, &stat, &key)); + DO(rsa_v15_decrypt_key(out, len, tmp, rsa_msgsize, &stat, &key)); if (stat != 1 || memcmp(tmp, in, rsa_msgsize)) { printf("PKCS #1 v1.5 encrypt/decrypt failure (rsa_msgsize: %lu, stat: %d)\n", rsa_msgsize, stat); - return 1; + return 1; } } - + } + /* signature */ len = sizeof(out); - DO(rsa_v15_sign_hash(in, 20, out, &len, &test_yarrow, prng_idx, hash_idx, &key)); + DO(rsa_v15_sign_hash(in, 20, out, &len, hash_idx, &key)); in[1] ^= 1; - DO(rsa_v15_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, &stat, &key)); + DO(rsa_v15_verify_hash(out, len, in, 20, hash_idx, &stat, &key)); in[1] ^= 1; - DO(rsa_v15_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, &stat2, &key)); + DO(rsa_v15_verify_hash(out, len, in, 20, hash_idx, &stat2, &key)); if (!(stat == 0 && stat2 == 1)) { printf("PKCS #1 v1.5 sign/verify failure (stat %d, stat2 %d)\n", stat, stat2); return 1; } /* encrypt the key (without lparam) */ + for (cnt = 0; cnt < 4; cnt++) { for (rsa_msgsize = 1; rsa_msgsize <= 86; rsa_msgsize++) { /* make a random key/msg */ yarrow_read(in, rsa_msgsize, &test_yarrow); @@ -62,7 +65,7 @@ int rsa_test(void) DO(rsa_encrypt_key(in, rsa_msgsize, out, &len, NULL, 0, &test_yarrow, prng_idx, hash_idx, &key)); /* change a byte */ out[8] ^= 1; - DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, &test_yarrow, prng_idx, hash_idx, &stat2, &key)); + DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, hash_idx, &stat2, &key)); /* change a byte back */ out[8] ^= 1; if (len2 != rsa_msgsize) { @@ -71,7 +74,7 @@ int rsa_test(void) } len2 = rsa_msgsize; - DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, &test_yarrow, prng_idx, hash_idx, &stat, &key)); + DO(rsa_decrypt_key(out, len, tmp, &len2, NULL, 0, hash_idx, &stat, &key)); if (!(stat == 1 && stat2 == 0)) { printf("rsa_decrypt_key failed"); return 1; @@ -98,6 +101,7 @@ int rsa_test(void) return 1; } } + } /* encrypt the key (with lparam) */ for (rsa_msgsize = 1; rsa_msgsize <= 86; rsa_msgsize++) { @@ -106,7 +110,7 @@ int rsa_test(void) DO(rsa_encrypt_key(in, rsa_msgsize, out, &len, lparam, sizeof(lparam), &test_yarrow, prng_idx, hash_idx, &key)); /* change a byte */ out[8] ^= 1; - DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), &test_yarrow, prng_idx, hash_idx, &stat2, &key)); + DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), hash_idx, &stat2, &key)); if (len2 != rsa_msgsize) { printf("\nrsa_decrypt_key mismatch len %lu (first decrypt)", len2); return 1; @@ -115,7 +119,7 @@ int rsa_test(void) out[8] ^= 1; len2 = rsa_msgsize; - DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), &test_yarrow, prng_idx, hash_idx, &stat, &key)); + DO(rsa_decrypt_key(out, len, tmp, &len2, lparam, sizeof(lparam), hash_idx, &stat, &key)); if (!(stat == 1 && stat2 == 0)) { printf("rsa_decrypt_key failed"); return 1; @@ -139,10 +143,10 @@ int rsa_test(void) DO(rsa_import(tmp, len2, &pubKey)); /* verify with original */ - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat, &key)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat, &key)); /* change a byte */ in[0] ^= 1; - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat2, &key)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat2, &key)); if (!(stat == 1 && stat2 == 0)) { printf("rsa_verify_hash (unsalted, origKey) failed, %d, %d", stat, stat2); @@ -155,10 +159,10 @@ int rsa_test(void) /* verify with privKey */ /* change a byte */ in[0] ^= 1; - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat, &privKey)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat, &privKey)); /* change a byte */ in[0] ^= 1; - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat2, &privKey)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat2, &privKey)); if (!(stat == 1 && stat2 == 0)) { printf("rsa_verify_hash (unsalted, privKey) failed, %d, %d", stat, stat2); @@ -171,10 +175,10 @@ int rsa_test(void) /* verify with pubKey */ /* change a byte */ in[0] ^= 1; - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat, &pubKey)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat, &pubKey)); /* change a byte */ in[0] ^= 1; - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 0, &stat2, &pubKey)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 0, &stat2, &pubKey)); if (!(stat == 1 && stat2 == 0)) { printf("rsa_verify_hash (unsalted, pubkey) failed, %d, %d", stat, stat2); @@ -187,10 +191,10 @@ int rsa_test(void) /* sign a message (salted) now (use privKey to make, pubKey to verify) */ len = sizeof(out); DO(rsa_sign_hash(in, 20, out, &len, &test_yarrow, prng_idx, hash_idx, 8, &privKey)); - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 8, &stat, &pubKey)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 8, &stat, &pubKey)); /* change a byte */ in[0] ^= 1; - DO(rsa_verify_hash(out, len, in, 20, &test_yarrow, prng_idx, hash_idx, 8, &stat2, &pubKey)); + DO(rsa_verify_hash(out, len, in, 20, hash_idx, 8, &stat2, &pubKey)); if (!(stat == 1 && stat2 == 0)) { printf("rsa_verify_hash (salted) failed, %d, %d", stat, stat2); diff --git a/demos/test/test.c b/demos/test/test.c index a56e5d6..b28990d 100644 --- a/demos/test/test.c +++ b/demos/test/test.c @@ -78,6 +78,13 @@ void register_algs(void) #ifdef SKIPJACK register_cipher (&skipjack_desc); #endif +#ifdef KHAZAD + register_cipher (&khazad_desc); +#endif +#ifdef ANUBIS + register_cipher (&anubis_desc); +#endif + #ifdef TIGER register_hash (&tiger_desc); #endif @@ -228,30 +235,32 @@ int main(void) DO(yarrow_add_entropy(buf, 16, &test_yarrow)); DO(yarrow_ready(&test_yarrow)); - // output sizes + // output sizes (this will crash MSVC... go figure.) +#ifndef _MSC_VER printf("Sizes of objects (in bytes)\n"); - printf("\tsymmetric_key\t=\t%5lu\n", sizeof(symmetric_key)); - printf("\thash_state\t=\t%5lu\n", sizeof(hash_state)); - printf("\thmac_state\t=\t%5lu\n", sizeof(hmac_state)); - printf("\tomac_state\t=\t%5lu\n", sizeof(omac_state)); - printf("\tpmac_state\t=\t%5lu\n", sizeof(pmac_state)); - printf("\tocb_state\t=\t%5lu\n", sizeof(ocb_state)); - printf("\teax_state\t=\t%5lu\n", sizeof(eax_state)); - printf("\tmp_int\t\t=\t%5lu\n", sizeof(mp_int)); + printf("\tsymmetric_key\t=\t%5Zu\n", sizeof(symmetric_key)); + printf("\thash_state\t=\t%5Zu\n", sizeof(hash_state)); + printf("\thmac_state\t=\t%5Zu\n", sizeof(hmac_state)); + printf("\tomac_state\t=\t%5Zu\n", sizeof(omac_state)); + printf("\tpmac_state\t=\t%5Zu\n", sizeof(pmac_state)); + printf("\tocb_state\t=\t%5Zu\n", sizeof(ocb_state)); + printf("\teax_state\t=\t%5Zu\n", sizeof(eax_state)); + printf("\tmp_int\t\t=\t%5Zu\n", sizeof(mp_int)); #ifdef MRSA - printf("\trsa_key\t\t=\t%5lu\n", sizeof(rsa_key)); + printf("\trsa_key\t\t=\t%5Zu\n", sizeof(rsa_key)); #endif #ifdef MDSA - printf("\tdsa_key\t\t=\t%5lu\n", sizeof(dsa_key)); + printf("\tdsa_key\t\t=\t%5Zu\n", sizeof(dsa_key)); #endif #ifdef MDH - printf("\tdh_key\t\t=\t%5lu\n", sizeof(dh_key)); + printf("\tdh_key\t\t=\t%5Zu\n", sizeof(dh_key)); #endif #ifdef MECC - printf("\tecc_key\t\t=\t%5lu\n", sizeof(ecc_key)); + printf("\tecc_key\t\t=\t%5Zu\n", sizeof(ecc_key)); +#endif + printf("\n\n"); #endif - printf("\n\n"); // do tests for (current_test = 0; tests[current_test].name != NULL; current_test++) { printf("[%-20s]: ", tests[current_test].name); fflush(stdout); diff --git a/demos/test/test.h b/demos/test/test.h index 1dee4bf..9c0ed6f 100644 --- a/demos/test/test.h +++ b/demos/test/test.h @@ -1,7 +1,8 @@ + #ifndef __TEST_H_ #define __TEST_H_ -#include "mycrypt.h" +#include "tomcrypt.h" /* enable stack testing */ // #define STACK_TEST diff --git a/demos/tv_gen.c b/demos/tv_gen.c index 07633fc..5a778d0 100644 --- a/demos/tv_gen.c +++ b/demos/tv_gen.c @@ -1,4 +1,4 @@ -#include +#include void reg_algs(void) { @@ -47,6 +47,12 @@ void reg_algs(void) #ifdef SKIPJACK register_cipher (&skipjack_desc); #endif +#ifdef ANUBIS + register_cipher (&anubis_desc); +#endif +#ifdef KHAZAD + register_cipher (&khazad_desc); +#endif #ifdef TIGER register_hash (&tiger_desc); diff --git a/demos/tv_gen.lo b/demos/tv_gen.lo deleted file mode 100644 index 23b3e7c..0000000 --- a/demos/tv_gen.lo +++ /dev/null @@ -1,12 +0,0 @@ -# demos/tv_gen.lo - a libtool object file -# Generated by ltmain.sh - GNU libtool 1.5.2 (1.1220.2.60 2004/01/25 12:25:08) -# -# Please DO NOT delete this file! -# It is necessary for linking the library. - -# Name of the PIC object. -pic_object='.libs/tv_gen.o' - -# Name of the non-PIC object. -non_pic_object='tv_gen.o' - diff --git a/demos/x86_prof.c b/demos/x86_prof.c index b77b76c..f6ba8a8 100644 --- a/demos/x86_prof.c +++ b/demos/x86_prof.c @@ -1,4 +1,4 @@ -#include +#include #define KTIMES 25 #define TIMES 100000 @@ -35,7 +35,7 @@ void tally_results(int type) } else if (type == 1) { for (x = 0; x < no_results; x++) { printf - ("%-20s: Encrypt at %5lu, Decrypt at %5lu\n", cipher_descriptor[results[x].id].name, results[x].spd1, results[x].spd2); + ("%-20s[%2d]: Encrypt at %5lu, Decrypt at %5lu\n", cipher_descriptor[results[x].id].name, cipher_descriptor[results[x].id].ID, results[x].spd1, results[x].spd2); } } else { for (x = 0; x < no_results; x++) { @@ -154,6 +154,12 @@ void reg_algs(void) #ifdef SKIPJACK register_cipher (&skipjack_desc); #endif +#ifdef KHAZAD + register_cipher (&khazad_desc); +#endif +#ifdef ANUBIS + register_cipher (&anubis_desc); +#endif #ifdef TIGER register_hash (&tiger_desc); @@ -382,7 +388,7 @@ void time_mult(void) printf("Timing Multiplying:\n"); mp_init_multi(&a,&b,&c,NULL); - for (x = 128/DIGIT_BIT; x <= 1024/DIGIT_BIT; x += 128/DIGIT_BIT) { + for (x = 128/DIGIT_BIT; x <= 1536/DIGIT_BIT; x += 128/DIGIT_BIT) { mp_rand(&a, x); mp_rand(&b, x); @@ -397,7 +403,7 @@ void time_mult(void) t1 = (t_read() - t1)>>1; if (t1 < t2) t2 = t1; } - printf("%3lu digits: %9llu cycles\n", x, t2); + printf("%4lu bits: %9llu cycles\n", x*DIGIT_BIT, t2); } mp_clear_multi(&a,&b,&c,NULL); @@ -413,7 +419,7 @@ void time_sqr(void) printf("Timing Squaring:\n"); mp_init_multi(&a,&b,NULL); - for (x = 128/DIGIT_BIT; x <= 1024/DIGIT_BIT; x += 128/DIGIT_BIT) { + for (x = 128/DIGIT_BIT; x <= 1536/DIGIT_BIT; x += 128/DIGIT_BIT) { mp_rand(&a, x); #define DO1 mp_sqr(&a, &b); @@ -427,7 +433,7 @@ void time_sqr(void) t1 = (t_read() - t1)>>1; if (t1 < t2) t2 = t1; } - printf("%3lu digits: %9llu cycles\n", x, t2); + printf("%4lu bits: %9llu cycles\n", x*DIGIT_BIT, t2); } mp_clear_multi(&a,&b,NULL); @@ -537,8 +543,7 @@ void time_rsa(void) t_start(); t1 = t_read(); zzz = sizeof(buf[0]); - if ((err = rsa_decrypt_key(buf[1], z, buf[0], &zzz, "testprog", 8, &prng, - find_prng("yarrow"), find_hash("sha1"), + if ((err = rsa_decrypt_key(buf[1], z, buf[0], &zzz, "testprog", 8, find_hash("sha1"), &zz, &key)) != CRYPT_OK) { fprintf(stderr, "\n\nrsa_decrypt_key says %s, wait...no it should say %s...damn you!\n", error_to_string(err), error_to_string(CRYPT_OK)); exit(EXIT_FAILURE); diff --git a/doc/crypt.pdf b/doc/crypt.pdf index c0ad1e303abe38f74436110e325755fe871bffe1..760d734cb9ab9411b2b9d256657451c030f92fe9 100644 GIT binary patch delta 285887 zcmZU)Q*fZc+Jzh2wr$(CJ+V2l@g6X4#V|pn}09GAtFTF$y3fknb_fpRP5U(AN7z59qRD) zt$4(R!KKN0{mJL9b&$(@VdgMW{Arg8(A-n@+g+_kSX=kuA>3RH4c zDRmO?EP||gUKI<-CQl?fI~FXPNYoj;zZCM(^|A>Ct+>9-Wh?m+2F=2kv6m|S?ST|q z;!1=Lq{H3#Lk3zKEtxg-6u4-NVLdDMWA+HvZ2FY08J52{$Qwd*1!GD&9^Xnfsn)4H zLp~2x;Qs07jykOo%%1RSHC!LLkcSo}UYg_md2y<$5g5yTHt|l%TL+WENDNqluqDf! zJ;pQC6#7P>^1HS8Y3}OgVqxL{_n)1ksVy8g2@A>pyRx&g|M!S3HHZWZy`dIV6C6-< zUFSmSI@dl)BZ%I6-%qOh+xW;4IWIB)5C_jVkA*L^M8j-!w(6s%MC{wq#H>dx0n@MUN?t7%ec8XT zn(t=5c#xp8Ux92C=_h%C#V=pem5gYdmI7LqI-XhSvXda=93WgJ zFwVK9PR#}XtKC9mz}MRB9O0!I=eQxXfN= zCI&)x89;>X77%nW$3m=@zgBf3(^`6%u=X=u>M9AYL{VY;4u~p0`yz8-mKfoRPN?Hd z2}28Hx!%tXC`(}M6g_-2k(BI{(VtZh^+Ll~XBefBV?jFgIwF-G9_Ts9nVn6L)Y)(Z zvZo!RoUv@#(9qO2T>uA7L+w>Jy@~3-p1Gd8pVmxNa6;bh$$$Kn^6ba(iS7;uZ^Ijy znK%8wPGJy{N&bCjFP0|6lG)QH> zSK}eGl8^xhS$jAUUnb37%T)k6x&7N`E-g+il>3kwTbsnBgu*LBQ_{nE9~@FLYAEZ| zL8#-23rB(tjUWAZ+^5?OR&W>wzM&-arQ@Y^Q_IGuBV$Gd|I(K5>@W_-4lSE|{C=D& zlf(g<_8v4H7Y!IMCl>1dp2SV&x;htJDPpWdf6VLGgCZ#mPY#*$hNxt~c5tNR(vPVa z%L_G?(9zg!nW6z@+9P9-_C6ef$!F_+Io{`czLXo`XtIozgz1P4MYI_(Atj|rD{?}? z=-xiJd|dojvVO`@Q(<~>lZRSdckk??&h^e10i*14&jYl|nBu(Hh9d;3+&Z1xu;v^r z_7AA69=SPbcuAwnf&RP>Oe;$2x6y^XERd{h*#>t&qF)sAon~n$QKC5G@$3>rN|IiH zDa1Yh#j?2bs-bYqdU?u$w>>fRR47WW3K?`-k2X69*Up2Q7-Fs?pM5^k0*LvrZ9Qb>H!me)G#DN@jB(0lW?fIKO@c!7CHPv8_9~ z8gk~r;V`mj)A{)`q&AF8CSs|Q3zUtNAR)yKSVe-MQS%Pah-Gab5eT+rgFBL$jDQx=?s8;ohy0HdXBX%eeF{o7Cd z{a@(F2UMFb>dLJRNlw?)o4Hxm0<-A?0((KL*oLe`teazH-VX@S->x|>AsRY%A3EX6 zPmr*gm`5}*odroJwdZ?lzb2?9=5gH`fQGzN|gn? zvddY>nx$T|s%rt+bqaAj=dx_Ayh|Z8E}(*LzL}{xV=O|0?*8b-u_c@UxAUgW~j$HPBSc%}>)R!Y!Ne{WN;CRs z?wQlZ{wb^1Su1Ek&^lQNk&Y*-o4+i5oZ6vWG7U-t<4~f$V?Tv%%MDkNxeHFW8-T&W z(X`&2oiaQ9per+mfcPZ`eN<5ESR?&<;+#5i1nH5c*@ugkYU;RW`UL^ncTne8hX_Ptr0~WSVNs!SZbXc4jSD!TMC_uV2 zRqL47>oJw=sWj8A>qHfh@gvLM-{tC&4q1JDv^TD2xoQ^rBCA~XM0+XGWF`_aiYS4; zm>yijZ-SMcZ;*7(u&Dp>R(6j6Ggnp~Hm(L1gh*7NNOwDSy%jaUXoJ|K5qWgiG^~gA zsi^e`sY|k^%b~tEueY0~*`sQxnLu{S{C(L|1}VJ0YO^DMbO4M)649#r_2@rt4ryiD zHvoKetQq)szjdNGGk)t{VgYSkKJQyAp$8LsHrOrC+NYp(H`$s#CduaIdK*{OhCS;G z;dQ`iPuJ&j^6`XbXRv?EdBrjrLzjQeKQUV!Pcnjr3Evbvq^S4mXOjXB1&z6#2D9x@ zNeh#P_|{gT>Y?WK60<6On8~EDo?RXKw3aExlp)CXz4!E9b~;(9&-Sw6+H%DGWT)0O zBojp)mOQo95JmJ$mkIh~=iB3_eFp&z)+?ZDaPjAJHNY1QD5XT&?)Kr>xHl@`Ohf3~ z(@Hio>l8?11ah8;n+4#b19iGkR9O^%~9E8}u9<-v!3h zRzwZX|G{0%rRPVmE>%aA6$M(%p?P9cld77s?aGdLh~;0!`ygT5?U3oy8=@Z2&%zC%aG2 z>jpY-Tiplm8Igu#*AEb3ub%~^@6`D+>6uP0s6%qVj&<&iAp~!6VXu$A7Ra?`;jaya zn>oYedF56zdn5;fpx|Y@-{ZV|ELbNSNw9vuG)-iR**^vnVQ2Wo-?iwH zJOAQMxiBOJ32L~r;7ZE>3T6T=%Q|t{_G{z7Lcem5i*Mn+{=U^V*94%8kEOL`%2kdz z2XA?sqc=_rWS@Mxlv+TCGvv^`|9IiH8grEhU(J%D;N+iqEbq9}onO$h1sBGJATZQ} z@D$NXX4YJ?kP!#lWStY-T{~9KQc_ZQy0Jk_tA(y}tb-F(5%Ly~>O5tr`CrYv?+e-f z0cE`kZYMz#$AT_W)d2*Sb#s-#%b1wt5j!<8rU}FSU{XW=T*TDMT#fMTDCqTzf^7!o zCTG{@3&m_!6Rm4@ZAvNN%UDV#^|2L;=I)?TNVdm?U~oz-vciGOkx=>@5@%d~x`Zxn z`W%n!RwUr7i&X|DwA~zM54wSBA8r;+z-9lMUq})Q(^v^J<_Bn1iCYNk1nV~F7V&p6 z^X}&%JBqW$+zhR|ozj^i5F=AD#fqjKL;axESga5S4dtTz8;D~@4^AVozX?^K>SBk~|pi$Z?Nq(!l;JoxuJ?U3CIKv}s$ z;xa?^(43~f5WF3smQ7a3p_JC=P{%7^?@Zw+-}Jr}kN_Uj^0nVa3c9j7MHx(0(;l7r zyym585^F}t>(zv=2jyzWG8uuMr9L4z6gr}*)>t=sjtXaJK_a;N&alzN=((cHMO>-_ zM&f5eEsA;W1pc=2t`f-DOI!~LoM0F}iE>8~-0N3? zR7!ee_SrkmHMF-b_Y}GL6@Dkh-4a)3U?em@W!>pbw%{d|)zH$T)XYwrV|6k4eeaxX ziLLOu3SU!IGJ@Wfz3Z-Xzpl|PIA)6TR{NQU>k#|JaAe^E z_UMunNKlMWi|%J;XjA;Xmdu{5!gdTa!wy+jK7>bbuIRX5#ie-=Iy9kEBdIm*Kyn?T z29Q8}o#~?}M?HK>-$|kd1tTZ}o{`M)iBqBHf*%O7aui((Mn8wy^WacE;)KM#@UZ>y z;;Fw-k1_FCK2VNCk{_f~K7fKyW?e;e9wBCZp@B;|V-Au`NEXbld<^(vq)qQ~)Zq zQ-J+n=Xu^W4Y|B(nA0>|ulM2ye@*f$f)DRm{7~~~RrySz*>Ux2a9YL#b}nunG5^nV z3OvkX6FNR__u+>ES31p6GqAV54mREjjZ*P#B+h*lsFna*?*^?oBoV0+P;!gFC> z&_qgk;q3mGF?-ND0!900`>Ckc@myZT$H(TTL${}-pmU3_c<+s5B?(JoK_vbf4LrwA-s2=LPQE(XeiOKpMXBEXg<3MtZRrXUW0N1bo<9>G=2Y=GC+_17pdYuHHq9A#%qOS26 zR)~wyTg+SML=j_1HcV)=Z5F?`9dVzXK{tAe)GvfFk_eu zJnrX&Zr)yoykJ3ed6QuO?0vZq z(OjAn>BKSwg+mL{nEi?{LOmq#vJ?X8(txG*zu!DJu~)B`L{)g5-$TJrb0WhamO)W! zr5`lQfH*%`q-C!`X^XKFd*MSCrqG~)8_lZ`rK-Yn3j%A{`Aqy66?A!-kmKEj5GpWX^8wTUyub7ajGUCwAbc zwRiErB0_VY>^yk07X!EYSaCrr!}IeHO6lbG+RJsQbk*#RrX4BR*~oMYg=TO# zScp_A&Dq%Y27hDs5myMHS8RNTe^+~22~P!7{_|q|YS^k0GR*G!rrRi=7!$+tarbt` z3Lw$yKS)oeuW-|9Up&0J0IJ?k@4k0Ds;FC1>D2qbPh4D|o<3@byY&O!&Kx=D=Cv?h zpyOZd`g@x;_L_bhF%R<>jhdHH8h(Bp16f9feqWpd_U$d6b7Pe>8*pF9`h?ftRk&A9 znCEbz6$qY+!a{Wu(M*%QoXom|2ivCfXH4Xm>tQ&oDe1T@0 zMHd-G^N;nlHx|6l*6LQf;5y=aS~v956`gLL8w*%aQ(Lg>w!RQOUN8FSG}Z;ymjj?Ba3EP(!x2Spx9Kq8+&RUh@_e{g^zXGwwjk05N_X#wx-@wR8F`s*l*-uV z*MfHsy_&j2#q|tQ<{LuEgRLZ837Z#pxX~DF*wmBkM^T__5kYq&v_0K133LwA(Yctm zqLD))X#Ykn6RjTZ@wW^+!><`FJeZze-J&3%QyQ1o#-I4CD5Q&nFRk*nU7Cc<$inZO^UFZ@BR5S@ZIyYPH(5yza9c-oOBYd+NY+ zd(kIP(f1E8xAZi8M{`GnEtTw%4*beWf#WEg8T&;7$isbq!}HgnZSFNLJbzDv37B{pMl_xIJ8r_-Tn-N~1s{&cGN=_<`uBS>()T%{skZL@w@tG- zV(t!ri>mLg;#aNBh0W z1#D*EfnW)Am?+FHE}MkVuVXNj=$&*gh(a3R5hIpmBH0-A1C%G4w5PJYwV7eu>$;uF zYr%~|T-$*)9~5EV`{!A}CTBP)krEOK$h1PQV=0J_*bKjuVZJ%W!w!5xbDPu)IMtEH z#)12dtDPJ!^CGLA%N4XRf-JsF8ih1TEF&RrfAyP^W4|=EmWEi_i;E_La^Ju5uFGUQZvhW?-??=CU`6p zBZuS2g{ir68yjPU@{s;EYreh0aEJ^GAhv%CDBLFh63NFn5Dj= zk@Rh^cxsva!nzLqmF>!z2aDiS`>$Q<$^s4_*?N-VgR04GOgV^C zA5*LSyQ8zULByYfK6C<6ZGU21Do~&072ducdZFq?CLI>-J?Dfwk0403P?*#q#1)hV zPTUZjTOt_k?ScS#=(k9u{puGjs)7MQx9e=|HL_z!D>H{bXf{>T6SxmJL^#8HiBt-a zbf8AsF;#J4;v`X;3305aCHzfjzz*xWgQr%~s!i0K-Ge>#MOas(bhKM$Q;%Hc;zYAg zzpIu|h){+ymSBK-VCJD!p@h5O#`|VIK2AcR+Th)z;sFi+%+ClaeN}qp+h&m}h?OTE zEm>H!Qp~SD$>($_RZ9SH!4^eJKo1%yS}8D{nT*OK(2w@b~ zMG4@0vdO1f4NPfuZl7fi1F=K~2``^TAkb{h#wx=1#N;#iISNaBO!~l~+ZcInpJ~7jL8AeT-KV|?X*-@@aEb5B zh`X-}g#}vJ-&Qi4hStd*we^)Y@@k%I3!AJhlGn-2Umc@_3{`+A{6LlvE+&DvsDC>MR8z2xQQ<+sJV9Zv1Be z@m)udPvCZ2;;RIR@d>uYIYtCC!op7<@dY}FFjz2Tcz|DwvrK{smuDcDaerMhcQtmYZ~>t=QgqzKQ?A z87l^?A&rjlnUowGr4VCg-Lh{+)6+NF8tR0>W|1@s%t99L62)1J^-q`3m(}JjecDDG zR)12i%rggo*?M+G$X6!}qSad6PT5xs5HI%3sr_T5vY=UDN%ZbYAUief^&G>zuNMM~ zopb)t(M;SdYijBjSi4Gc>q;rx?eC8M2o?>G-=Hx zgZj`quludrH~}#`OAA6yp3ixY`(WQ-o~R%Zj9vy{r^_aqp@5cBB8jke=xcH$Lr=-j zSzBCubM7iK-GrNqLxR^jHGOC}3mZyIq4*fi`*QTaC^sdcH$8<*b8r|v4Z+YGm-E7i zMSx)aEq!^V!rBK-)0hPT%MbF#vAo8uQ{tUx&}JQt&v4EVc+jbvOw+qRFV+EX4Iffk ziyj3K8HhQ_G#es|zaNXSGv4^Y_rZ!_jtB)UIsf?r{fHlX0HH7Yob~pH%QbuR>&>D1 zXxjqbpSUT)hgRq1FnVK9ttC#Mj&p{+{J$~1vY-jg4px4kW91_0pZpElz{_c@(HzkDpIBKnGuf39;t{xd^>%Iqs%Hxlh8o?qzCHy|E|H50O*+TE9ZiK6%Mx=yaK670xqA#~`xBB6U@>V9=Bk$2DSf{;f;< zrEjR{88K9RIGdx&H6Fo{*9iped6XR!Vizm^I!0DuT%#P@Y&}w|1svc^VS0Gfa)zNoDf9o;J$Sq zBhSS^KQZxB3fC~I8fPdJPykbnrFGd_NXB4^vV1%^poc-sR|gpbVkywntom=#D_FV` zHFEnC4h}UzqIuKaSrq0A>Wt#hf=rJOfu%&CLlAVgCm%U1fHO zjGK`lfxdX{{L)W>x8wZBW(FI*cqgCW?1BhT#p#bJ6w=&S)0gpJl#@!#cPfo%2`(tR zlgRtUF+oUrmTEpriV(lBeT7FC1yX8%cCFl4jhPyzY8^%ikCg#kxmL3G)(-6HWjlsZ z@Nt~OOyQB}%+@Kr3B=uL97SilWo1?yN(Wey1dk?GZ$VY2CbA+Oc9^<#>VU-Rh;zyV z+M=)fH9))m=k;nV<_*7Nkl&+{)lW!w#zKJ>wKb4Qj{u&N{lV4u-#s-u59bZfJyri! z-+SJ^UtbOhzS>^y&xEIh41j2QMr9O5PaNt93Jf|t0n}{pJi!^5Iv8qB35T3imb(H&(RYwNj2(u91&iVuxYym`yR-_EBe||Na+0lSP1&Y&BCR~%R zh>&b31dpWsI-Me9zc_}Ji>!bRs$}+p1q*0Oj8ofDHiM`|M9PdkB#YOTng4?z#4y0y(L)|)`CtFsWt0PP#=2Yw_N6iP9q^CC$J%!p0E1bw{v7qx_S zo=$>|8QTm2%;R-(s$hUfg+2y@mb)bb?fE_opbSzDNI^YbKLhsYSc zUW{h<^s=i!*YhBvDQrlR`BpbF^J%Pz;PPYdYTE6k4uefF8?Wt4Vmg!Ke^?PEsAFMc ztOn`D+@LlviZe>N3xh@V9MovB#AaCn2<_VvQmm!>4Bz!4`@lWYaYg=oy95uTEUasty*9!6$yEY-pcIc@UAhwz8b zzt>z7WB{YYWuLcYr@)xaQdO(Can>B#+(eb z)RF{A+Jg-e2Egnh#?rZfR1AD64(MGD{E#pau;INA85ilM)4>)%n#`t~6Yykc`{WVJ z-bPVU4QZJF{h?c(E&}@EFI(~eN_U5(Xu-%V`Ul=%0uMVeG-zp%E5rCosg(I>AY7gR zC)yswDM9KTt;(leofk4;2t&^4mYrBvp+qU|jP^>Z2CcV=-SK_&capoL zCL(m?0H&y|tBtTn3~`L^5;+Lo*W)S+$7Cn1v7poZE3qLwgOI>hDAnT-w6%Jqni>O= zE^tj-DaaTQn-((>;tS0&Psw~(vS?1hINtLg=%p&=e(E-@{?mfH_;G6C&1h5UBBXM4 zXnB+mr;z+mSi~pW8AX3;en$PEEC9MNJqvGE`7VDDkol zVGtIxmF<*E&>l7NVYmFh^H@;*--1j zbC+0D?}VPyNPn+g!P2_3V?NDgQ zGy3*M5bb{*zEA7Z750-g&K`LdVm)*Lm5H<`OTrbEW-)2`lE*Y{;pVtToU)+W2Gm2^ z!LFESz;unUQ%XgVG3QbSp|k%IXuPrb{SKjof#-tW`r(;NM!kOCdX(%JlxJF`k0dXS?L};Sg6@ozsr3U zzTlVTJ1by*&v?R9+MP1{RZ<-@18!uv3c~6UMsc!V1m^09oVZm2jFz9!hzIPN%C6K2 zo1U8*JdzL;*rk^GdqrlL$VT_s>f&u8f=&BguKqY2w3WqC53PNvI9>!w5LCS5GID;s7}C77)aW(D773J>aw*)EQ%JsSzj8iCKniXt8QYSwfBv`mkugE~Z{ef#mXZ~|$-*~Fk10lpE!{qS z4;zj{)+040fj1u>q5x5Nkec6EFK%C`>N;g*>2U!;CoL)y@--pLg0Gv0dz;{Lg8Syk zMRSz7h6TAtk1ZR2)dCStmHT@8*^-W#OV}1lkwTUAytw{k)Q@Hz8Dzdw<5<4@d)1{3 zzp-G@p^;`#me}Wfgy;eFG7lK&W_C z#ZN0YYZ7ku)IJk1NsM3;>gT3YxTeuU&L9_K4WqH<^-JHpQSJN)9 zFQxM$t1Y>T)bn*oeUg-|1~KNpa}(I(j{&y|EQ0}hfR4;yA%F=*Rn_v_%CXw8`)m1q zc>sBOJJPg05iQKdVP1l`M5hfSgBB4m8Ivmu<~3x{p6ly(Cd*=1&`iNZ3y>Yw$aFgC z-(aQBYD);_nMSL*Hk4q5X)$5cZ?wIcx+vjpt}Xm$v`uPI*OcA@9aj zvO+4o&uRG+4=0;w!FYBX^2K^=OSi}lN;(HzCMRU;0xV9HraNQmJ--dXmSHJx8V`6! z3maQ6n|YJ`S7H+3sS1bX9~HANh+cKA@9yjVup^4}@2C>@7b~|s>gA>?hdban#5rl0 z%ob6;DZ>bSdbO8TO!8o=jX296U5&$i7G(`Hp21x9{P~L8cl7wjb|~Kd2R#YtQmXzo z0yCxt0w|Pt$jj25Np8tglsC@bJ+}Jr1S(gKhG%&oUy6+baKjiFR6_b)Br;KUWZ)#{ zwLBN|D$iLL@M4}0UTIY@=)2)ChB-hu{&fDyCQvV?fmtUl=H3XQf7svN_t3%(uUNOt z37(>~*d^#*@4(P+?PPE|dTgi;PkL_)`&QCi1{xezpWdNJ#`>S!KGmbsmK2acun-Uk zka9e9=wsVG52{@A&AFJ8~Nhj{P+#C2nu zqAMM-;#;nfB7pj4CHh|wa@DWP?G$I_$#m6zbT7xX`YvVIA88Ys9T>bLj&?VlglwYS zfbJq?KARMFteVVi5SI&F6`S2ku#TBbC5(@_+48bk0!eWb*;ovvcF10I#NkFc6zjz7tkcL;Wd*m2y{3B6PS7;w-;{ zgd=N}6(I?^g%%O?AjU7$55azHbklRus*`D#6_hw(LY9LL%Q_4d7!)}^qt!uNrX(U54L3OscLjys9-F)!EffUnSskW|To2?& z7(T}ie>pc*IQQD_qh}r>cO+#MaA1k2fx<@y-Gt~a5)jy`qnL;uIAuP1_%>~6QG1i? zBia!}q{L|?ywux+t||xSBzESc)~%Z}k25}9QNF&Q=xKXQ=?1!0ufhc_3sMf8-I0cm z9HM(eWm!k~Rp(SCI_IY?L`w*%7|tYLzb6stE28bHxTEH(i0AHmso?bjoY_Nha{@46 z`5Y4iu+s5XJ2XbEWmY2UzGhAXe5_fZiXmo3SG1LI281d>U`56+9aOjBqiUtwnz}K{ zbGGx^@nm@g^=&lsghd@*!)ZZ*$T|)J7T@Z!Fua2C5B~TvwD>SApCS+^yau^Qo)&-d zCCr;w0;=O&1=V$RYshPWa@ZQKGzVQwt8UNq>*LDnT60h?){KQVP;bGDjVZ3^mkSzI z#-H!Ef%+zJN^E6F>m6~XWR=WJ4x0p~qv3GSjJIuj9U)w$U1SA_r6FXX{v0_wx%@>! zNN7?PG{H&o2ETB2Zdx6a+8hP6&DM^^mQCwGZ&u`gbpGaYr5-&3Qp5D6QPZmkUF{t7 zDqJ}_-amx`VQ_iXz!&xQ<})+cqB5>Zb3?Qn`-YR?Br&#F(YY2;ak|7+cS_Nr$nXWp z^0-;T{%J)9>jjd0RVOToF)A&Tx(W*{>pP-0OC9;7{X@}@H##A6RMPBHw4~o9;$TLW z9P#e@PhW!dRGkJ42%P{!Cx{&zqWyL6>!-bwiynENiEf#n97_srz)|$nN-Bu#TL+#KAA!(0MQHx(gNSc&r?$;WI7;iZK;=efN69zu9ky0ziB_Wpu# z@6+}1yf?2l*iwV(w5~?Cf;m>9HH5Te|MVMM`}eW7W2(O|0QdVCU>Mwctr-BA0{~c{ z+K}|NZGo-rJ_Gyi-!MF zZ~e&Ti`t?95T+TF91@zz>~1MEx_1o_;)H4Q=PeCv_^3X-E7xij=N5luh2P|MxG)$j zRk?D|&Q?5;4#s3WlMS8?+fCChDN~+fz&Tl&5G}!gC?PS*#eBr zD>Rxm4lkZM{G~6FX)+^Jj^w%^zyS4Ayu}1T7{KsJP5Ebqbgl6DlD>k<+K@d{6^134@X6 zwFopQjU9d2rPmB-+#>G`q&hVdeaT|D(?tnw=Pkwv>NqYbTSyYkOhkN*Sq_UFYIwN7 z9^XWNzAt9h+jl4e zbln;AFHBhAFrZd?tu_9xFGyxU=$G5GctlwfTObJIf*Ziu@Xbs-hJh;U#$FHxn4N|R zX@3}9t)WR`mFP@#p~U>X8AJSmWTX%%Pp*4{`^zveLXZNEJ%(;a_{^mvR=AQwzv{-y znTwsj>pSa20>j)OYAf9(G67euAFUYJ4(AiJ6W#7}4fx|-Uq3Tu?T^LB@A@_VLI;-T znjyCw?P!#JHcg>c?-fN0pYP)(olS6P8S`e9o*mO?qvCmE*|T_9_j?&X%Tj{0gdg)i zm)QP{*kVh}XLHNQcKAZyN7$fpu?6|Q5U(e|NW42^kPEo#y;B)vRuxgwJE^e;6SlSG z_frC?PdnnXimd%x>_`tFh#NhpEwpJc7>G50Ar^_LsMiX15)V<@(BHNr6C0 zI;gNzDH*5c%8os#)zmlc+oH}Le$ZfNKJ}WY%+=WS;kPRr3OZ0=E?0>eMG67aWP-vz zzzCX3yZ7$|8uE6I)#JymP=*1Lw)40MjJDPW3SM$zBk1HTW&HZ(+0HaM6N1bE+3q8Z zjgwq0LRZTdOMbGHoLoFTg)~vqE9Rw<<29%og~B3*6R#-}g3I4~&OE4{A&VOIcWxb8 zBn23M6Uu6x$&3Nui07e$DyGyLyVOD{qNLtE7$>D@1YRV|)UWp?tGL&ga%pF*WttT+r{Pvng~+`A#Tj93?9+}T zp5vnS_}Wg`^{pVl9W)xBCZ=?2ra-rScZ%+y=H2L3#@2e#LR%V7)*?W_#az-?Bc_SP zk)gl)Hsh(=r#!As}>g>*nRp=X}3Km!Uf7SKh|3sV|Z2uJ( z56l0Eizl_$1dIyMv5Q?F!ko1Fgj*DecQ>AN*~-FuHFiXIi!WSd!h(T=(V0P8HYJZ@ zlcijR_`L4AZ%r-y$BD;aj62}H!TX%eZgn)zX6Bdv+Vjv+hMj|zlOoW#J6&wp4e01^ z+cjX|vP-2M4$PAw?Z_YNRHsP6QQaSkceS>!Vh(rP8wmp+R=aGL_YC0y$m@g2H;T*8 z3Cy9v9^;=J^cM|kEUG8Zwe=r1uuZ`+hrrBLX);!!J*LHjw6Egw`SOi0kpZYg;qfaC-&v%nMGFU-g1yg%!yt+ zdK}Q1m|{$ZRJ@W;9ip-3m3L&cCG^Hsp}k?od0i&d-i~#Q5VjR9_dKJcmY9Ywv|Ow7 zi4Yk@i}$RfeYTdex{9-Xp-OTSqx8JNOpG!%sCQt=VzY7aI zxr|;HZjtu)>RaCFTaq{<c>)0OEvTgj#HUnJ1$TCh{j@{H4@zrb3yCzKFZU|A1nLJrg7=mwet ze%b9J-0t(c#SxDccz;PgRXBn*EhMO^xJ) z!jnq=*bM~5?}lVjVWmzc^*1}L7DIa6roq$4e( zZ^K8)aXiD1+B~vSnQIuTe#NSoX_dPZYmL*xTSk&G9k%FnxVA%6f9J=7uXi-?mq`hb zj*K7${+*y?4%LSVM+j>YVsKP{y2DA^!42;};h6b^42p}y{iKad_D|MgiJ6H6RjP3E zA6&6e#!`1)dURKVok0gM{`L6zx5a1rqT~z{_x%3Mvkxu&0{&fCvmESy5Cw66&cB^4 zc8rrcXM$o4H11(T@=8{$+ABG<`Mak7?(sN(++EDXw#0ks=x#T6>SR{91u3UWqgv@w zoDu`8qqOj=ev5I^c39(+fGhMcryu%(KRO*!o11c!Khf9&W2*-|^qkz>IW>jibPG_6 zxSmuDlyzpYVU8C*>#q`Jj5kl0P+f8#HyR;q2f1=s;(ZNT$U|$gK9tYopT?yqKyL;$ z74tj6x$Rk$i!W*qcEA1IB5_0Vq@8PN<^>f{Rl>vx*jrY2na=o=P2};*o64@PMyOG; z(^kIq52>@Nbz{Ubs-p$!_Nv^K_3S{bLKFrxVK>fev_ zAFfjt3k6njIz3<6ar2$iv*pn_QW@&y7}o#fc-_+=$?XGx_>9?11?>e^0>q5ab$2_ z+bQdF`cu7$_@*}nO~UoAZjP2@%XDy9rHiZ~)T~HMj&2ypx@OgxXx>jMMrnAPS2&#v z^CFc{X9yVid&x+`gvH`$Z@&yAVb+MfVTR7x(%Nd2^ApLL;dl;CBzg~ zw1xL|^PqCg)Fw~rS2_F6-qtBjNO0tHJzshU82LM;UVFYlr!!In|9`kbZwtr6`d=Dm z<>3A=u<-sbu<$0Hv9`VNlx+-Tj?-2oTKGmqUA;phX;sm(NTg*Ij+HZEn(pDLKp zl7_?WV+kF4lw3&9+m0iYRSCPOPSdlueZNYkiF<^6o`yU%vYZCoI(s7>%@TTBxta+Dfg}7j5-A=`eBz#f&%K*d zGeA_%G|jB+dAEXC%u_yXm#w)QY1%ZH$JTVd;(A*k;Pvh%{Q48~GD3?g((?rz=J~H9 zb{Gz$y02Fj=>*_>lt3lQRSereC1?*ZM;Jr2#G;cpz=AP>0&j}g7PK_;Su_7?-pt1o z%!H@sd{a{~xLVjLP&0DM{dLA-K*T0hiRfQ^Pgg1*sad+d>cvMa=+%=(v}{Tvjv@K* zjXo621&fD_i~PqzwQ9_JMi-q@S1l|cw2PO+Qu)iVY6rmVi2J%j`4|7_mW8D%AgPIV z-H1bsZQ+GQt*~QPNgdv;)a`T0;_FJ zTrgYDm(65c*#q5+iJFyuVaofrXP^QpTD{|AY4yROo$p{uIbRGxbm3Gt=s%VFBFO?A z#d7Ok8uI|f-Tozvhwcn&3a!BQZ`|jvxf=DPlovD zK39f1J{6Gvhpcys@3V`#wPV}1Z5s_5J8ja~wsXg}-Pn!&j~g_$ZQI_@`~JS~Wbfm3 zu;$rXbB=3_sj$4#CJ^f#fHzyn8&9HPiIM-S|MB7;&}S1dk8EI}?-D??3sW)jvJHl( z8$K{=A~~_-NO7*OEWI=4_m;IDoA(7fq@#NGUfP3k1fwNJ*rBf~B_v_qRB_Eq-;-`r-g=NkxDh4%4? zs4XW0HJwH$$E1rLDK(S))R@wpCS%2D?XJbnJO%$y{FW!5As-sEQcWtSNu@z195JKg z)9FCt=l9cM!DJ00vigxGjSUaOm!Y4@hzu13xM<=uI%z_sL%JkRa8fq;6QHfG80Yk& zjbi=?`s4KD&x}?2LZL#}-)T9tK2j_G7&I^+zG!7+Er|VED5Z@;p&EARTz&|?Tp0es_N%;wc*}qe(2VgynNn)gavDW3n98c9b`PGK*5Wh!RU` zAmB2cUy^?m&OrxZ(d*h?P(>m<)dV-~_9;BDH^8txu%H*dUu7QE%cmc*sAc=3*Y=D& z9vm6#DGuxSa=1v_ArJo3_3BuzCHif!gl}aq=8hhL`^&0XVW2 zbBv7_iw-BE?@bA9V1BxL-(&w4tYy`RB6s9}MH#GuYbP;WHNAmt%0q2x_)tKw0E(iC z%CzXc{W}~K)3;hu)4#{FBgMpI5uJQ#9wwx~ezJ~E-v}OyH)NlPSA6jb-@`cJ3P%v_ z`i!BN6S^-$UTL`-qD9>gprGAtG7CQE{sohug8K}@?)1c#l##rt-o9zo-3BYj+@n#P zb@!e5jdKwgoYGG4#OHX7JkDZ%4WL?2+j>~7t8HwS%ow!(x~@&cKL5xVU|!)db*qQw zJ_q+?tChbGlXI3*ri!1*>l^Iowzk~J= z@7Q0AQ9IY3B?MaTN=rgni;G_EUnJfzzgu|;7{$tsKN*vPW$=J z6;}@X)1(=>GAJxEjV9`WS6v{;vJ z!T|5OprJ@yz{!sIuZ$9y5`BaD{H9mDc`{~p{rQAJj5ifY;D;-bK)GJ5GE3Sq^6sQ0 zY??_YvXSc`7+~AK40)~9pJ09D_npv4cJMNVEnwAGiXKU|4-UwCe^$Syk*6CjZX2!* zWNtAI`yAL9M~Xuq)}^_^ehOi;kIo=33t;xWi8~T|MS?8jDDkhx93mUFP>h@KlI^_F zRoA0+miN*#><==|(!a1pc}$c&(>yI>f@q>M38HzjlFgWE;)B-@gvt&nM{Ed%y#QCQ zf`wmM(z15>)(Ch!20{r*fpv~tL-KGfalCWQAT$n1$V7Chf4rV;W8mmPP*#zFZnp@wXTKKy8#YWIx^$RisCv}fY;oWfB1_7D z2tnh&jsj08rwESP;ozc}NRU}myzrQhWqeVFcF&B{E(TS0W)NfhpNaC5P-z!AGtGpU zU{B!KczH_QJZgPZPT*q2_p!9a{J8g}Vu-k4g7lTn$RZH93WnSj6udvi6S{8=%h(k= zSfh@o2n6ULSj;TVvFeE>i|wBh$R7iGQpuY@(m>YW{#U6I#)r^S7p>zid!nDxC4S~ zD1gAUv`rF@@S!WIUEb@$#d}U;Zy3SsjtQuQEkk~4g(Wy2)$?$Mq_qB99Tk3Pfh7kM?9^EZ5A zg(GQDS9KY7&=~boL#drqc zbFB8T8l8-WTe%U0*I^;{eQ@GILILSWXP>cSC(m~J!AefXSTyZjbca``>{!cX z&=z&6$B{H>B#a2!+Z zx^pw3*W?!_kS1?c*-SGIs)2p&KcS9_;O%z}o}{`H@X@D}Hkj-&CV2*$wF%?&rX8(S zqQgw0zmKalKJm~7xm_Q-OXac-nz0Y)(!3j`_8{(z@Kp~8gzs)&C!#gEY?cB5EgKnW ztuKen(LVfeZp^9SF~!iS%HyegvSF+5CFf!U^V831H+MO`mZ8(QiM z7NvXqW-pP=Zj1r&K3o1y4^v^|)1bHx_WjK;!`pW`=ht$?q$#DbNnVbn5@AsG#IAx) zBEi;Td3FqS)GAa!&orVhd&h2uRC22#anIH1TC<9dn_(gYnt5heqGGqgSngP(PBW1dCrqxQdmpyA&LVjzD85fOyo!inXoEXf-qFvH&X0J zIt_Hq+fuExzU-_g-<;>P4z94`L?)O`!EDxZa>n))bOJidwu3e;t@H~gB*k+H3DzPs z?vg=WlH?tHnVg>{x@2R{$A3*sH)fYa#jrsfH)h850!HSrhV-__rExoWb&Na9qi6;-+-G_kM&<^SDLV3@MT2BsvSxD>7KJcnX}1|Wx$?VTl4~T9NJGwB$(KIMf5r6dT$ScilhdcdSNm&jK&|vPsW+08iF~q9*k&? zhc=@;{Fk3sz|W_C@&Bv6wMO9o|GQgGUUr^jMO!K0hn>Uv5c;LXgR&lSain_m>XUxU zKiIW;O!Bxr2KitJSiE`S5|jU?-N`~@OB7#SjSh|biAkyX^hi>@n@NI#cjKH>NO%6< zI0Psk4W2>EIh~?jqDA)1pSrf@Q!L7pEFl>Ox-}UXjbmq+UtqZhUgiS|E{O-`?(O_9 zL1q+ykMBz@<`8FTd5B{ASTgIc&->SxgBR3Vph=WI51z*L`Q&!3%wBW?Z$XG` zrP;(~EFRS1M6$~?7TUgKT6a0}jBUrivlH)5Kh>u2UH?ODs%fEzmguK}==F{F*2N=m zBOkVtTJyNHWX9QTeN8c@IfR#;3qj(t*b_2+a$pd9Wj67r_GsthZWvw{2}!twi;_fl zVF3B?8g=@(#)gC8VMhF;F}ua{Y!4gNWrodbC?x9T`6ym_h{fw}V~tl-*vIX2{e#A; zw1n*jJmU2I=KW^b2za%&y}FAAy4wNYx4$0#Jt_fwBs;yfZV($vNq^^av@nPkUGpAEFx>w>1 zT;)F~B`i`h#M}JgJI%dzQpYN$;&a%sr~MN;ld(G4mu5Cvr3C|@Ka5pdE*=1X;@u*? zAy~FP+}PN5IEWb*3| zMxnE9_kDvRlsRA@VauR_z#o(CQhZq18>=6^v1Xm(7+En#VWc2?L&XqYz7&kguxpq< zg||MWsCZ`E5}o7rKywX_JwNPp;`6KrChu(mG!Z9B>&ENP!z2?q)N=p~%bE?H$8GOU zEntWPA(pA7kBr`Q{X0CSktQ0tpU1(4kwE;LEzEP1DaV)#@{Gk!vnEx!-hN_!?bDjH z_QKk>Um~N^6Y=SXH-4LXIZ+jEA)0Th4RP*;gE;?o+Wo!mMo0|X4My~;OCF8HKzO>@ zb!90Mc)h+>bYXNR%o1QigD~8`KoZ{F=Gy#af`7)Us`e?6!*f@Paw-4Z{tz~rgPeZp zn#^@vs)>HR>>?w8M_+f}x2N(J>8d%FVcLq!T{81;(0GgMVD=`3EYp-G?BSgNRT4`2 z`e#YxHt7KAXq-mytR~CawX?a-d&%h#tAk*#v#Hge;*P6nw|1cGX5b&ZW4<^-I|_f{ zAe|X3E1pL2dctu+l`;CWE@GVY;9SH^h_zIb0pr4_LdYXCc4>4fj+jcRY;{PI>4 zH%*uPC$j*OAhBQoLKC1`y#ziq%_|r8u66Ei6YfNcZs^!|=Lsr@?8S=3^K5-6mF2@S zTe5>o=#_7(90raFuU12Hxc#Xx2@%S_0k~QRq1;)D5*8RRCNJ0B%9AXd#$7ogf6QVj-u_c<~xDJno(4xj9qorht zvNtfKKor5WuDtci(pZ_E3m=Q2^Uu^O<&oElYp4uC#&;k_WU`$HEyX$1ke^df#<^d`f=eygY&`o93Uwvxt+0q9#yVQNqg0{hgBwh@NHn zc{xAc#pLDq*?irdPq;k0d_J6`(y~r&_>>N#$YAt41iEZv_hR9~ zLwl^y#{#MHJw3TfpzQA4jfU4 z%jt+>I@WV6+Gan)5GIQalf@3SDrC-7;W%Tz*#l>Mtod{qKhR+99s6xbhjs&#t4Wd( z^$>`EDhJrFI)8va6bu}4(13G!QW~epnZI~L=Rs^-?bkh}q)U$cWNbBKk3o00*YBo{i{)OS)bu{3Mz=i(#R)vMS1L zdJsS{xbHTZxf7#<5Eg~*IHS|$zZP1Y%UdZUL*Ou%ag*y8OZB%%Z{%jXTDRPEs;dr3-aZ&}9^puENVpX!cSTnmhsx8CV9D@GbQ>U}}@O z4_pnaiDlqJ8wa>>Tn@L{X}ca2k>$drfq=sH6^D1eJ|zr%`AU{k{r@O(8QSRXe2!C)(|+B3Z7c8Hqb&M#s8;cb-h-<&4`lO%@%g3by5 z-m>Z7;37u+Th{Unsp4TGF{SB-X`Hm1?9hm(4+AcV<{ujoYhZC9u_Y2_e|_DbE&wSg zfyRbdt2=XJ+^T$pcyvfP)X+gtvxUK>MSnWF)Qc{Pg&GUbQ?bo%Z;rlv6kAZaM_L@v z^^~(qBUmu;(k18f6pSL_b8O(j2(m1JL!d|WX!s+?5;Zb;FqC&YQs4W$ev+|JxnBS<} zk#EqH%y}eDGUk}Zg5v#OC$HtLy}8`9mHqB*am5Ok*|dInKG3Kp?^ypd+%ZdF)F>jl zEQz4$QUK9s9dy{PfpKrY76E;v^Hdz{(gCq_i@0L;XFA_qG;H{k$L-=7uDmYbZsZln zMM7J>urQQtikrMaA|aYd<<^EyO}6^O)s!coVAzAY;i1I<_6_B#h7R3=>mhhsTc;rre?#bG->jL2 zPZ?0keB^5wDIFx0qobR@mMtiym(lHEcsq+EWOhYAId*2%_mP4Jb=fM8M$r3YAH{+a ziLSo-95k}(Ol>sv!2L>R*m*uahLGlqdxx0FdL@T=cKPh`ihxR@=~2idEm0A_m)%{~ z9T2CdJoz^eo4{_SI6~GmakrpHtWc?1d$~|^a2uNY`<6wYw2IC+N??MciPlUpPg&U8 z1jtc6(Zp?w`vC=;&i^kRq4IgcOHvuRht#jDwH14P*L(tB7eomSbl;H+1_cFi7|GK* zaxhqjmkUEx4j>j~^)nt3%=6=7AI2jkH9;;%`>y2(2X{c_ih=UVHFA&rU1pvn02r$YlnXkp_HLp5=(| zn`6rQ#NT;V8R^5PJv;j29R|HbJPCgmlp_5O#II}kFUf-JI)=m;EUKQ!KlH&MayRM1 zt6$&8;OMj*{rp(oP~{T23J)PfHmxE+@i6-L`QL>K@yl)^2cdHY!Ed*lt$z(BeD7*auxOlPVlMjMh{6z-1)!T@NUnM;cm#0fr2Dn1iJHNeKJzZQLUTO7N zpcqHhQlhihs-B^{9c${WRpo!-f!bE|yL>?vm&2t1;C8pgIBb}xyX?`}?M?qNd-j{k z01o;r?9C*t&7wlLpuZasy>y>gZf)M0!e+%IzA*lpM)q4G-K%aL%VSG`tg%0 zQelS=v(3iiF#Bv=cnf-bJhWK*=Hw#P!!ZwLsnrI(K;$xIA-X`br9 zU>6!~P?3GSzZ|U0&eBsj7JprY0SV9BUw7i1BbSWo)sksdwDW$|<6_fbu|X(4B*lgZ z^Pwc!HaZuK!gS37PNp1>1+lGC$|bw4`MpQ>m(V_3`CG)y1Wpd4xrGezgn#2{<+mLK zRolN*gIvCMZg&t4l}43H6z%~w1Wlkzwb20!f7)WLq~H*6(Ow<&GH&|gG0xK2sw!hsdg_vJ+ZGZfUs z7BI;>*%v(I;2wH@mG3T8%*5nY*o>$|RV9*xB(Ls7*(@(GY&fQWeam4|bW(?BN(v&> zUG>F!>B8ydD^yPlE>3BPIp{AgBL2&-sw@50q!fN zm?D)49&b{KiT~}DSM(Qc&U{n?fZJ6LWj3ZCA3cOO{{@a8n!?H0*QNBclb0%iv1#w! zc!l4#O5~O9xbUA$>q1>%CrhF9yK}+0DwgKXkj<-}Sqq9ohJ6)&v75w72Buqu|uq;S7MfE^Zg|7c>X z5E-pU>Z*z!lvi(W#{eYB)ts;bpF(?xT}k49&vRe8GYJ+qwY~nIFfo?&8B(OlKsqUa zYV_q|V%I<{$jr3oJ2VqA*EGp3SzK^@0Buiux3}NN)Zj8{R@Ks%?se7D*4x+S`!mj` z-j~TudX+=%U;d+!`y4C^AQQ&oZ6LshYxbm(19a%P3q;sVS(upn@#)k&6q#@aN z(EDn+Jp*#q{$7q{M9+b@FI**qcHr_a{*8&An6q52BzH;OKSMqZ5KSLXK2H=1n&{bi9kU zUZ|km?O;T;4(je2pgpWPL_rd->CQkw+vX=`skcbvC%sY1#a~W#<}tk>N?`vMJIQoD z=r9s7J(BABGX1GEmYjFLu@n7oBs6$>>2+W~>_jeu5(Ms?SY+}8U1e2H8cZ|*S-{~WI{@lPnE!L}5R4aVf-UFDG;M939wW*0j!doB$wK(Hf*lTMuA@ZQSXwxO&<0xoWciy?{ZI&weU1-RPZN7f zeW~j%2r-?$paoY!+YKK5d>>~K<73ym*&d2jddqc7_0@sW}flv>VC^)l~O~RiAaNhP0Sq#Zx(i!l!E*J@Zn`bHjo5jZ+ z%i(SxH@a~8F=KdFbCN|5r0Pu;*$b$5td*$=Q>z_MblSxV(Gg-Y06DYFp|`1&T-MU~ zBB1VAV{r$%`9%2qG*hWQHBtq`kEVDPB*%)Yy5=1k-hbg8_F+4Z30(6DB;SbcHZd## z>J1Ezv8e}qIrRs-&~?cFqLCe;y{DfdkJyxQ>F-@ffKmEewSILlIYrM`di}*5lw9Nf zl$V)-tB4m}|IFtSuu%U{iOnbVGbwpZnk_D>ZLf&gIA{rwYMZR2`_-tZh-r8%(X>&X z{AX^&Y{1aTdQV7B%$&vi`7D~}Zqy2ZmT~0t+8sRurLB0_ppo|;jgwl&&h51AQRbZO z?d6D>OMTv`Z=JMa##H7^_W}16VH~Dfor~HZHyo;;RVN{*aWDf?Nt~7ePnIL~#T{fY z%X=vHht9FAxUuuEa(`MoJcHs)Q{}gGP)A`i`As@2X?$4IJ;WcL?QPNAKTHGEG8fGL zjW)W2Vu$?5Md8}g%|^*2tG`KeEo8DgJH zL%+aQ9I^ir$-Vb8^X>J>A}sm-OEx7ULuiJj5dd?DN+fn@|pj?`J1I^ z=ufzlX?VqtOZtMCmb^;9y&wi)Mf9f8@V!B(S1n#On?LXux^uBKbLsIcm04`W%l`Wd zp>8_f`LdMk{+uu5pp;D+$k(ZQe{B7tFynBoEyFB_KUm>f@C#}<8TYyEm5-mx{^uXO z>Ul_=;Gw&={+{0cVo=sv^|Fx6>u55eN}o45#9A_8O7WG5L9eFN)i>h@PsHI`OmVe=%h`hPdjD0oj6=vwJX)yNGFj%M=F!|^sElP zx6D3~-R_51CGe-=o$XeH8}EC~$MvcL+`b|e+%$t4^QO%2wn*ht)_;!9C?wufu3mN< zLiOze!q3V6tJ?^P!&&zL2J||qoQnUl$pPop=|7>e;PTR8FZ6USm0>jAZo;f{V#nI) zrl)bq3CX5fknI+|And2{`xR>Gw5mhFH|`S;t~)u6EYT0JeUGgg13xb==G!~kfMWwV zbQ5SqNiGByUub&bi6FJ6>=6e!^I!(YYGK}TVC_>E8UkpJv3cBN zPINXBk0_@ae%u3B=QgrYDH!?4DtHk=UH>H_j`ME$HojT?j|_2X@D5rg@)daID)MLg z_)mslokWeBEYDmSXDA&wf4?R36|>MtQfSOPq-ZpE@8p6m^=KbYQyV^ zm)q@;o3W#-N#)6PsS(bCiYU?R@mN)OlYxQyC(&*%7iWKW?{j}O2KB6x6V_in!u|(g z?Gt>M{~6<7FAqjm-VBGQFD1d90(qETV(mxk9_xv%KOt7Xr)N7VLL+UUmSt|!G-3eQgGbs?3HecGg zk~fwc+AMD0M`|ovKJmC3*Nd4E>kb-8X)^1W6j>Kr@5*MdBx7U$dhx~0=6WgW>i-D_ zwvShfu~`;B&$0BV_NM!P^A)8C&)<(Gt%6uiy?G5|-3?P@D?cN6(9h4FQsb=i2r zTq_8b?EnsmjNjjBA;-WWuP?|0XhXPb)BH)Z(akWqvRXDn8{r}l(XHN6NsH?^`yhiv zpKKhk4W->-dvviuA-E&xtgR%I_&fjI;T=!X|A&SxMSF(4(?T`Fye(zqv0-A@c{OUk zZH~vE5ug@myZ_gCT|aHL$)i(NVn$zoT1w9= zgTMkGnh+0MDlr;)p)>ubA{BRo%XwA@9!f=9eR_$ z{W+NlcX{o(9X%3|!4LCo@#e?q1H@rmnF5+g8=#}lYAl~Xo?s$;V6*{H3O9R=QXy*8 zrXSCfCTIJ;kGLv!Xj*&HD+O<)N>FSSne+%i;Enid7oRYnfFGxg$J_4qaV@8}BXB?a zaWn`rd3Jf-IM;@yE%Pt2`rvJ1IT2NgDe`PZ_3T6JZLKX8I<}77KjAwtBZIR-?in)< zNQtu(6bcrV3O`cZWKoOU<>4m{A!1=Smg!+3{JW{pmzRZpUSNs;Trt)>rr#9_rgC1B z1XlZmUqN46>4{JQD(vjhNskuV0i+v{`WMmFs?ViNb`Tt|=U%%qnxSp4J^G z^*Lf6>S{PNe#<&-rDK~GX|obZ2}se4^K;ZdVJ9#+C$bj8sA9y|J4=#L7L3RA!*H1* zhy9U0p%NFM=X9zDe-gI?j~(5D1sLZxH8#;L z^+@2GRFKG;YU2v3x!-Jrk_8|lOXL1hzAk^_GRt@ITrH#j(tS6|8bpG^MhK@QyJ3se z$8ELG^~y3L`<7DHEBsw_OVTl4h`cAKNT2aQl;0|=Fse{qcEIc>O`8~6W~zIDc9{Tm zvWY?PwL*^eRj@&>KTc3A2M}H-=QqMtnIYHHu{UUznMfB_l>xhMoX+{%pllstmw@S- z4kmH6=Ad%;_PsQ!0vt_(U2QnGT6HgJQBVUro4A}>gAfa}c2Oe|qX3y#!h(l|N3Jqh zGrmS)j+MMCt~`K+Eg53Qo|f=xWnCL4UhsTE@ED!SnBY~TARbz$1kk-3AIO7$1xeQ_ z(|kQGRN}^f>cJkC;-!nR`z#TF;|*poc~@HyT~Ab#1W~JrRRlErenJ>DnU^>YG#WF` zV9P|opD|Mh%)$OO82PO={*Vx|0r(+RLy&dOM-@Eftr^V#za9?>mWskeVC8R>m*e?waoNY&lKE<(y zC%@ePgUE?Gt5SRZHsCq@&7Z`}?7hi$7_Ju(fuwl5e$>pkveghG9-_qf0d*p^N&Hx| zI`)z*LkrReWcd%WXqY0krPtCH7Wl}L@x6VT1YR^ZQ*eO~hk!sq2oWSXg9wR^My4WcTwF zfy$GtwE**uo#OJLAFt}+fX~!`^~z~n1yg*RXl&I7(4Tory8kb1JP&UHvv%{>aM0Vb zrvJi2%tYm8E#$=9IHp|^%l9Q>!$n7d?bHI84|+K&ICu0J8I?VxUu|3m=`CyTSF*ID*tL3`&`xc>!a-hrT_+4&ggQ&YJ!r1sf+>S#GJB>yI!h~tS zz7x6a18=jMRH7(;rBZ?ZY7e#ESe`lM_Y)q2r8QtTULMkp+IRB3#ctEQH@|kh65K8k z%I880h=$^de0(h{Io2V;!Keox3oQkY3bisil$k4~a|zOF$XKIY5zXK?a|a#gHYp{) z9*KXpUw#s^yAq3-Wlft-Dz4NNzGEru{Tvmj2ZXp9Jr_PS%Q1Q_n=qT{DhiqvqVtG) z#JnPvd9&dOgB1eU3ui1o5YGhL&J1*L&yXeqZZO1Gp?DB$4W-9i&0Aij!y5NCTUS1EG(AZ>@5kP- z9ig(&^=2@w`Ay!-P90CQX8n3CtuxaD@LiPny3WKFlOA@Xx8qx){O*=yc~gHE&-+ts zVUfnMdUKljbsh2tm?LE253T%Alk#Y`?Nux209sV6^${PMa;fBlUhvev&)ua3x_!nFyx{w z%){)ReHt^!`}cVs{&>1g*}K~XO`Pm}!^e5|yx^*!1nS_NrC>f6w%+QujfV^2GP^aZ zUA-%}9SQMn9u0TtDs@YzR{r!8K30Kjm6 zXijfuvG9pT`?65P6d~Hf0~SSx1Ly3WM_FZ&SREHcBZ=eq^$EE|&Q_P~6;A}o$IF(S z5ibq=FWaNkeIGnc>ZCaHO^L#K%OkTFdN;jTf?zlmyUD5+tz1yv*jFY`E)T2Z_`h%U zT7r<81+`LCe}J+Mi-*P0L8gWIi}^Q<|D}8Mt5G+JIx|&yaR8jNmH&Jyd+OxoR!RT! ztv9Fk;?)l%$yjWWvOP!(sn4R-YWlr)UHzEND#dZDW3S){Y5-K?e(PM)|t! zaG%W%k!S7?9(Jcw3@N2R(XXyt8!K!VakzB{Ws-JJUWqs{s-;<`yge7)uw1xZ!YCSd z9Be<_Y}=7+(jaYhGiy~Dk{YRWt(hB7#K&DMqhnLeNKD4j$*CRY;n6Z!M5?x3r<5nF zVNd8Va2Di)cpQc*b4VGSTvdUliTA`i7-*QCo1IFA+Wwth>DgQtyks=-w<9uCA=sN; zr(ra~$cB&4Zo&qe*?m|B50X<$w!EJ128+=9PjeGG z=N4UWBI)MJ2(8i&Khw32cO}6O`)3-*gcf6$u;AwIQM-(!F+LZ#jL1sX27cuEOb?#j z(jQ?+ppD}E7o%wf}5zmKOAJd+pTyd6VsEgCI>(f9*oS^52_|53S~h%u~gACIHJ}L7W4q%w^0} z7`oWfr^AuFv7`hVH;ECcEFlq1TNocl@E);!yCiNFI|(-kujI9B+8ZbXuOcTDSfxFb z+9*Ft zGT9IJu{27U!%_jaU&SAhqVb(S*qQ3}kX9_i8YqzT56ph~KnCS&I1xnBv^ghy_kcxq z?&FtU^$HWk46Sdg78N+yUJZMSN3o<;$BA#R?&m5&FBu(u3u4@LFXzJ3vP5bFJqW;> zH#@SxR0783YOt*sju=FI)-RKcQq=MU#7oTSUQE*wYN}9@K|1qnDI`%bmb6Jj(7qe6 zgGSb#^TQjSch=FTy)G;b9Pn^pTytWp1)I)WDI~voOTRrZmtpo8b4T9PD* zVO_w~K(x=`L>ogM-#1mv=8=ou< zXy|1wrcjr_Fh1*u@|GJoh-xZ>pPVs=^FO1Z!{@DBgR&#La1soB3xi*CZuqzvgPr-L zDc8NIAzaxfUpsIjmFQzndxBp%2);vF%5p7^aKJK46$k8&p5Fy!s1+w#u1uI~GBxm^ z;Q=FLe~j_CmloWck+hPa;+=PJufo+xilXnzx7;2(uCdw32<2|3bqPDs^+YE14>Gk` ziz#KdW`-0hx9>GfW?%}?gybFTMfZ*GWK=P?M9y^J#MJLIr(wV%jxtmsF#;xyd?xi^ z>H_@YA#ij9;1U1IpZbM8v$4S%eXwWkk^ox{zN@C=;^$bp>;DqxyOCR#|fx!M>yFP3N7He7&(d>_h?Fog1fo^4U8Hi6bB)%vP zPL`4)`{;+h2~HCuc!_|DrBTs!CYv2SUG&9uf&fXF%-$E`$O!2xU$9_{7eXM9gw)?+-MAdP zNCeLJ6Y|FGFAp*qSM%nGI(_|krg53S2U&fS%s3xZIVo4n~-61rlO^i{}#> zxZ+-uPn!{Eg~l@`7Q2q!62QZPyeq!-)Ty7ea~RCuBxoBOC<1(0y%!3MbmwIH|H$7speP6_{SA0$eG}v7QrWEcgKC z+g1IV6T+wW2tF_R%)9EdAypF1q5Rea?dPe|;gqfHbo^<5z=!od0^4)fgL%OMxw@ZE z=G`SNO*r;t>DgW;ghc~2Xa&62_IZs;^M}rp$2sr;J1|oT%#ao_Zw>80a1Q|l4ZK;5 zX}0PDJK|6xsdb`pmlxM@ON_#zdG zXphT%#EyNN9D;V@xuG1U`7bacou%EY-%>CI;_Q*6F{W1CTxCoJE!m2>@!seM%#RP3 zHY~K;U;3JZ5V@=Vs_W9X+eTgKJ`B)rD4Gc9BlA;=>Ja%Iz}ir_z#Lk1FvH1ths_Sz z$GsWNG2X|;ruhU4c};M?nz8$POVlZ2VM46wHp)=B-Dco|- zLo;il%+trFh8CCrb>KAHI`01$A1}Fdy9z!3?Led*v9bWF$TgW;(G~zBm74+ikK1^- z(%nHLWDR~oQW1RKP5s++{{~x}aBF(vs|EddEpojVX-U8V# zDt&(}B5#N!Sm8Kbh(gbbE!+9F#js4nv$%a_Z6Ui$374r7(8?(r@BTUKQRPPk4~-Re zp@CJSTRaa26YfYsWlbjuA;wLUAg%fNX#F!Bgt0x31R|Pn58MeG1wHbQxnFeP1UuA= z2N}iymy1H9FpR&a>q9#X6oz>~F(&lXb8HhJJ03Txh-#acb*wR=0VG4P(lfJ9^Xz8v z8z~*0z_^Y5XuAtcUa{~b*Xaa8jG*PK<`1*>B9^u7p}Sw$ynR2Bx^p}X<8j(_G|QPV zXqEEU&gz+VSS&IcXhGR@@M@i<&od@pmzr|`da9K~06-l2y{x3mbr<}fcdHV)87Mws zdN5A_)}6vJTYdMru~T<`kfsGBqX^xLZzxm^FuNX}pkK`u{iC$rlQ<~l zJ6y9}(>kk0USb*L>Gx(?z%e6<%+*>x9S&Ki{P`HfucPAVsR35#a%B z>US`QGoa_kr6Bikf5*&pZ|+$wiLyerRgaoD@dS1&_{j6`N^U8E%2 zW^DYO_A35WK@ciljsSyyAy8H1!x4mgXx1|Mf$iyw*5&k*XHatm^d-}!$m*tfJ6>A^ zE{4R}rli{9#394JB<=Mn&?9JYaG>dPA+QORp*ME-*-4_JGoj(|{+P?z zR-tyFT5&~xTwx}9xOs3_`DCt#f+NytY5Sq$-$+YoneUSx6&D;qeIb6uSy%u$A5Kae z&CgSw?w_Zx=Y!bXM=kYH^iKXCpW|NvdFpZm6O-JyvD`;Xjg1z-yim_4@g;7di|Ae~ zHj=-KpU>m@11c-f)!o@oNbL|(%J3e@>lrKG_D!Mf@v+DM^X2ySbi(F6SuJ*!Y4h{6 zOtj|{oz-Q{k;c{cJ=*|i>-0Wz!qeYvGgRXZsk=ig-Khk9Y`C(2KCd<90ytTetaa;$z}2 z+hT9f_rQLp)F|f8am>6s%QvI7^%)mD0;ze2bq_SdA(E8n`H&rdfg2t>7iL9(jc=e# zKsk4|qlGrK!7PT6)dYIFd@;uvaOr6?oafO{Ntm_)w+D3nGAC9aoH;&`NiIxxkY`j= z9JCxC4qrSjmo(^lhm-w9m}y!;vjIV?H=wQ67tfai|5$4Tf`**2^6){S<)8-mYHez1 z6H4RX4A@Agl9inX0LaJfiT?0fedsKomCX-w_FJT~nwHvwxZg(07ws#7XjJzlsk%Y+ zR-U-_8Q^}95;7Xo6U&R;ae1fjxo3SFkMkSN{^ZrZo4hy30+Sh|`s-zqa|*`7$(FWC?E89D`QbzEn=p5*3XOe+iO`RBSdPViP{#*rOMt_=w4sCKUulm)Fr3t0UuTU?G$p+6 zS2~KFa?UF82RDm@Z`byU)f;W;DMI-baN^?sGF6{k=yBron%oKnSL_^QjYc%`8LTs}Iux zRVzJA*Pbk>ZkV*u=%d#_B9pxaOnowQ;{r;MDn4K{e+#!7ZP?BL5|#!KhA;dcQYvli zf!`NO)g7f?fc6{1bC!f`xe8vZtcrJgucQR%D!u5Pe<;&7O7sQj-0=VtFsxfN0Lcm` zGF#s}&w!3eQkFD!L8_q;Elr7i-{30(F$M--sJer%An%31D}~%Q_yRDb!JoCWFiu)h z-qn+qf0jj=0;?0Ss;$TYiGme+J92=9<;W2g$1!%$2Nb6p0fQcM3>e&C99pDYGtfMN z;jsr_Jf7U&dE^XW62eY14j_KsfL2T5f4Pd)gh~m;DC&dKDCLJmf|}T25#L0U6**_I zP?^|d?#s=z4MU@tmR-?VL(2%~e@%fa;{$_Ff1$=rXIO0`ZGOpQ9fws*))`i~rgK6t zTCFy-kdVR6GDXbw-Dn*mJ12CPJs7qUH9hp;5P?xq zTt}q@0)n9fu7W|1bP+;`!<%xJUJ3^VLS_@i@?NwGUZi!(kKb+9ff+PSh3I?{FH#bp ze=wSU4oR~X$?Qko6Ev7jRO^>jN@Qfb)_w{`q7tBX`DJ}KnSXGIfC*T7X0UJy#<*?a z9k*V4lO;e2hjO}h-UO}L%!n~t0y0wtO@_L*hXjSx#06>w4 zuSCE0WnG2M{mJYYyQFlMAwWB)jZ&zOW>oV^EM^aqV@Ki=k$je<^`|-(>-TKZ-tb7&M0x8}p0Wpurv>6Qd>QSEntwO|S8z+80E3bT-e$r39@p#dyaS&3ZYr%_r0 zGXsdGHYyA09wa#1s36D_QvN_UN{g6p{D&`-iMDB~qVLl7izQ@{Y068g0o+wt189yE zxhrdc9)cBl>jYT6f4l{0=VS4ffB;dIw=6CM5L`g2>Xh}ji|bHl6B)7 z2J89)>)+QMU|R%b40kHzm2)hxYhrYXYal~aR+wWb*#S0$p(>*i1PjlO$sP31NE@|b zA#I2bEY1ed#tE=`X@k?FBWWLPa3ZVHhV>;V@|-UXuY46Ne~XFI*9Y{MNTV`P2E{AR z5f@08V|IWuq;>jZl`}A?2NaYo1+0ObQCVM(GgJrI5YDKL3d~I^wu7p2RuiKiWe0SS z2&%FUJVBKz7?jqWfU1|Ds69H6_VE)1a~2i(NuvY;${Ep5Px6AZ7nHqtH-M%p<3*Yx zikFC&WBD*mf6>Y*7t)mMz#2$XmG$Lliir}~5Spru3TX;Uk1bUHuV|{W4g`LU;=0rU zWqXxCS;JWRG@3=;rx@|D7Q!7&3?Ri5bkIwR#2o#xwT~2uHcvo`paW`pNl_swGBSu1 zE8|V1m=Q0>>S0nOP+`=B6-hC}8c2$j^~EJ^aQR39f9z0-kXW%cEXRr+SWm%Jk zN;iz?6549?zFpoQm?p;+3n)zG4AO$&jF!lTu~Kc7IacDV1U7_~s>1@u*Ij*4^=()U zU{qS{f5Sw)2;3Ae9-J8plu}y&Ote%7zwtEwSRt-O_gZ~<`E~&BREEVgYpjtau2H)>lnNPCINV-0Lvzzu9asZNr?S2r z=_pkK8$>#_VIk?rEm#kcPW0MAq*GY{{HVrNf5$&4*@Lx1J5ee+pfo#0fIh0w;^>Im z=iVng>bSH*;8!@VRIHf~dbieIKy`dZcbs>F4tR;GosSPBI)Xn5DyuvdW>^C`r}7{= z&e5s_Hi&a-!$QtcvJ2}`Ij6D!j&ro=2=KU^bAkZ9sgB~0H66qit2-TJRKq~6APDhl zf4%lQC?M64d13sZ6-%|TGUY%PSp9~82Ck&ZfUvuQOUruDZ!;D*Zv5r(>FKeIC9N*e z4`i&$T6K&iI=}`oR&7|wSbPiCqn2is1#qA0y5>5lXth4HZpgZ}Ih<9_oq!KC( z=2a;SvI8_CVjJzZpvEm-TITKpVT+`O1SxHHU(5$^S!MKoPns&=&mDZ+X--nZu!rIA z-=xNAmb*l*>k@@=i|h!fuY!PQAD=>J@n^*dLs8%_&9)UD#J&z!EYiN|0?1K z(^P3Y_JjC$*oLC^;jwk|K7egX^aI(ZvR3_~Y+B$Nl3P^<<*GA?D;X3$wD2yHO>IImG(~eQ9=$Gg!#Mz;e9u`)7T*<^VK+Q)5ZJ748JGF>?bv)kfuuw$4BfsoJW;f=pgAHc(lKCQd-rOB0$sQlN%{1pDvcf|k;^{ZSoE z*tq(MH@tBl7zAwye@|;&ep#&B)jk@%00-lgVMk64N^o4-gpXpBrlsP4!b{js(!tr}mIxJv8?IBx#oM=Gkbva`QEeHG-v^Kl(`=Y%pn3_twwx!~^WA8?KF3yKlOh z{64=OwNpRUj?Hm}EZX3P_L10}E;TTVT`py#Y5LmtezEa#e^`j&X)1rKmz{9ui^QPy z`ED`}a+CVdhK|N8 zPv}l3>-E(4&Ig}nEHyaHO|zvGsuw>K3I8&vu9s!Onmw5@TDg~-X>j_EVgJ%@a}?~j zNy%1Qde;G5f3cxrxZRhmz8C_=(}<23ht|Rh^j7i&u&|RPR@@J1_kJ0hk&)~ypC-4l z^(o7($3ySR3v3)2d4jZzPPl5_8hg$ofS`XT>YtGtZ$D*XGVq=Ws#dZhGx)E(xmep7QVr}Yqpi-Dg4Gg1R`pBMz$+S6zd=i$T?44 zYjZTDe>ob)-n8zpu6XAvO3oT>WVexV=u8dyoTQz|R-EOKJ$NzqqPu>|JO$gyze2p8 zkK2&8NW!)o3JWb0U8Od`AdXC}(!EN-9C%6t7Mo}e*+#~(t2LIZ3BgzM{*r?W>d1o{ zqpP;D5qKyAmTLxQiQM;kr{bGuKF8rOQarWnf9{tTS7;}B??$^*OrLgt8v2eyVxFvT z9X}94q)6SrN2}P?8>oECnJ}7VqZu!j%XYjD<^g8GZ5b`nK|r8vnX=4G`!?q?9fve5 ziLo0Fw8}Z!#5)hhzU(?+WZo0-l$PX|=~Rm1%XoGKP-bdnJ-NO0heL3J)R2yNde$}{ zf12<*!|d=3MG8C>IqHL19O0_$c_aUWy5H`%Lx<6(qngOT=dTpsjNrqaNd>c%DrZ8k&vLO@Pv)VzF!(iGb<`E& zfyIEBEPM2B8qQbY9M1#UK7@;asT4U^=j~Vr$*jwml|y_=r;4=G_y3KDwYe97`4E$u z^oIZ#R7CThcwM2lX^F+fA;-m8eCOb6K~EZLvWD}xf$L2x;!2xAu;WxISEQf zcwmjT?XuXqD7oxrm74kII8kPo+8uV1Tyo2sC7x&?_xT4zD3TU7CBh*}tL{s>salbg zIW9~g>gDvqVhKbvi~1~5&(&re5(k-S=gtqk(zsK)GYtc>iGvui8`oBw7TLg{cPWYS9x}NbMF{%c`{sHx+(VXJ zFAP|~EIIRz-#h2={fJa_MBKmlcQQYEfAoGt{aX4nnU9{F9-X`rVq`0;m=dGYv!n0= z9a&o$G16RA){IW)M-O<#tB0q5KOZq(F-0XjbUHnHaQf|2zbGn0ZCd>5*~@RAzH;k= zRYLH%{Pok-aFW;TbDN2A)yexMz+zF_jia3jFa?} zW9q)=N>+jzwLwcgYyC??R+b_;UJS<^=#f&5jwz{tYxl!N9ZuIklcL2D{sdqt%k8aO zk`=d7C3QBbfk^>`^KbFMnTuu9~O~O$;7T2d-@; z7*!jz@CwX=B9_3sJYqPhh{cENMN$VZfyeP_QE7#$20mU)wd={T^OCV4y z>`g~85!IoEH6_Ntu~4a!)~;9S2ue(P?p=6JX)Y5x&2=BG%Nm22U9Tbz1XE@M-XJ@b z;jNKse0w+9G%D7AR-6xP>Bp|=FXP74Nc13Jm%l_4ht1RK?D{9P9VTw%zei1@$6TI8 z%qykU29^~tfy%f+QW9W{60N%=W|^(6T|^ZTjuvxPPgao|E||$cm`0E?hM-A!6d=ID zHWHacBbk@$E{P6YU3!1nBkv$kwaL3S$a{9v!Lpc!V5BL3sD~!odU2hkW6*f}_4#?z zqjwkJ!f7HYSg>*40$t6|>pn40tVPGRL^0u$*)j}AE;~Tfa_)@_Jh8^3%tQAp}4!iRxB5<~P* zYSC?9&gx0v9!L?GQr0>8BOu?d+u1bu0SlI@2X1=R&YLQtg)rRb^rDI39fAPCh*a_d z1WM#3J50b)P6pN?X29M|io_xMQKq*t59J6?a=kap@f4%ycs$3%1y8!h^ziBF=pT^6 zGgBFVpP?T^dNSf%0F=#0QOKV_gplVyd3JR2?8Ru+t(&8hA4c@( zes}crncr!5F)&QGQ!&6{d+ttw|6MIGIXkZ|?pIOu#wwe|o1z#;x!mjeoW(FU5V@D4 zb@rUrQ%VIu;kMK$VEu=foA8|9eE-d}*Wd1c6%f_n?Ljb#z`8h`fS_)vT;2lbR6Nv6 zuU~xm{JFP6L7@KN32Ijt?Iap9*nHyp!YzRuX!h4v7a_fdL=<9Ea%|J)-Xa8H0IDP` zA?2!_&EmF<>mu)t)&#YcU~&tUI_D74lQ1~VV9Wqdg2sqOF-fRWeIU+TDbqgx-nEa52S(vO5AR27=efj5)t%QaxGfhy z2L;jK={lscIw#}v5mpKq~%$8jUT_igFdbWz`68LV(k&956Mv-wL&5dLi-GC&YCc0+; znc}4``q?rf4eOVy5Z}49sPvM~u@TY@@TZzI^gL)##`e$+LBzRbsT4klK?D+* zok4^fwt)e#G?D8nZtYeqVQNP#vGlgF1k%r2#S*Z~tyse4R`oSFx`-m4L+QK|ifC28 zoi)j0Xo8)V+}{EBw_U>)`-f&7>?twH+X3^)m6o|MyMq_p8DpHuC@hD6-p6OaEFdIm zEn~1^5Fo%T!73FYGH8zMiG6Tl`Pg3qEu@Gj`%WQ-fbkAbp}RtZcN7ryj;*T^W5*Vw zna;Z0YyZR`aFd}#EK3IGt0lxU!ci%(J z1X)5EO+O$q@3|$2!yrJuOzk*`fP=)uz)B9ZAs~6G0mY1N3$w7W8(jjYs4sN*xg&g5 z_p2D)fN70McNVS{DBOP5o?j#{O0v{q-_W-rlXhlxcOF9*xJ;dY+cz;t35x z*Hoeyb()~HkoYoLCcf=r(lvE(W?Vv6Plhqgg8C(1Fo6Eg*0ac?)g~7f=<20KSN~BV z5Hdbc@<=j84p}w1_MHXnN#;5|+f@_I3fv`#JyEO&abnFQ$+j~u?Dj)GIpH+=WZzcY zY#fK~|GTnhs6~d}JH!4Khh&pcER?>kIwqkC}gO&7<1J+ z#)l7eA0YW4ZWBumN~$)l!%!0I?WiDZLx_xm@Yvyn$ROE&6P*2jVq{8751s>yk!f(^ zLJo-ClalY3EC+l#gdbY6+|`ByjbBECmlB;oj5$65z)mV&cbS}LylCdj&if$_{!!B0 z?${N{x_FYxsYX#8MK9OW+0Zor10aC zZ~O704!Wfu{|J%n#kZt)&T{tQ8%j4v-huJ$hB5Dm?*kKt_`W@9i0%WE=FzQ0N!mUy z9x@PrSrLUdbRRW-o?rYSixKPc9m`|ib1qIP)ZoKXY$or>Vl9g4#r661u*%Eu9bF+ zgE0=3bs>&v(@(ngauqH(gsLRfNeFe<)sYW>&9PAxo8H`#;zqRzmzRDV8807GSIz=N z5#{M^O0k<2J49cE8v^j`1>wg`xYnc_kTq^jHZ(+6F;TY~&E%|IOy2|`5P&;I~>KxqfW(eMII{do4T8%E}1fa zTbFPahrjaWl0aNVF-e-mbRGvtS#gyeN3UJq8>w+jMq}3k55WrnljCWIDN_j38;}{B@r%5ptv6w!J{ba(h z!MSwkziLB&-UZ>@kGpQG-^?V;S>zC2P5vq%uz33v{W!T^r)qmW=O6T>* zb}^Z)!@ZdM%!Xp0{;#X$+|LbvRu_NsYD_;5uACD74HbF9w_S`M{IYDP!G|8Fp9}r} z7R5scs8}!h_B^Iya2m5nOmfr^mPDSGf7e|9Xnyh+&c{&sYVGe&kh=bQK5tfCJ9+ai zjM%tm6yA{cu$tdhK6W4}J2`8*?k_`*z-hB-G*Od7@vQNGgOP%jt~qa0 zc|K&l4)(@n-lA|(%zY++b2bgch-P~|)1j=`9D5iL*RHm?`2584%$PH*fxd!g9X>rq zRxrwb_I9?sI&1rjH`90lCj5sXiJS4m02DW9#gUZ9kK^WG7-{ok8lM~x{aet9h4@Pc zv!0h7sPSz4;Ql`sZeYWI#|ubM1=%q70R#Ir@g%ab1D@eKo%`d55g!U7zZ!rs`17b6 z!%Su=yaFkeb)SS446XK&tw#iSMN83D-N82j+%z3|LcmX>}uzz?QwlHXtwwAa7!73N$b@G?TQ$M}OPc z5#7)3{s=Wi8#}13@B7hh3T#}XF_IvuBVe(B07H>!n~5YUB9+8l^uKrRYe-78lAuKq zAO^0;x$``8X83VL2^&%WFa4b_k3JrK9IU0j3v9#` zC5DfTki^;1WO;PV>B;0hJTGPMd4Dd5lN{ceTpt~uJ^%U5GXpj{){O& zqc)wr{q@zW^U3AKng2;^q7BcFKYRK5?1euTjtDMI7Ju>P`T6DBs7GJ#F}IRX%12{v z;50n`bGVZcrZ`IyZmV!ciJ&|y9gY;?hOvBf?T;K`%%Mv4?51e^F{gwwnSW02{fQ;k zQ0CIn=U@(TN>Gt+*e-%Z&WYqMpT3Lt8s&I)NfE^{B}BHli5hdFtj=e1enDnj0w&6~Zq+dP{h2>9#5l(CyU{H{ zrXyTqzI-m5yOg+8qf)JLT6c|`Z_0I31u;?)#|)<3?A;=J5ln$1g-XNnQG|A@aT{a{ z(2wS{TgF7D!a9kTHGkPMMHy!DZCN+b5CP6{Hmh7Vv7(()815f8buMT{6-U7k(7!~8 zv8D$xj5D=yzIVeW8f+Lv@OzTR3|q`twrmG2(AIh&^u+FG-pocvsJaP`Le>dslrO%R53d_*LZog z%y^YgrU?)A4A1Qez2`8)9&**3Rj z+uETi$$xHVZ|-6y0PZ=8c2%o+kxscYtQQIID1|%;BVj!W&MtnRn-;`}Te}w^P!9}r zI~GE<+X3K#c0dt$kb%*bfepUj>3K{dF3hWS3Xf^?{yx$_*@+^_)E4q19Zlkq=(61m zf~@V!%PP~xwo)G|A`^&hek!pQAS*aH^w^5#7=O_DY_S;b+yXMfSO8RE4tDPCYNvPa zwbj(j`<=UrjRQKBb||aaZ@~X`H@BjV`PaI+WyCo@4++BU*Sfi?E2K#q=)@0CY%lq5&Ikz%FtvVpE@~!Z58QD4vB}}Qq_aBOn5QFhi-w+=OJ^cR> z9{@$-v#1lF^UKS`LVzJ;410Y!7&HTIMD;*vEHw9HGk`dBwb*;lpe#!ml@cTXdmmX4 zqWy(8{vzN|lb1)we<)Y;#rC>5dF*E|?tiet{@PT_`R0Dzkh{NyOY+a1OA?F#&|4;v znas-7^!QU%UdPrw&OiGWLnF2REg>$`!{W4)9g6l-788!gka$i*)AYZdKFLIebB77i z4nlpKa#!f-+v$+d@TARRo}9*ODU^iin|-r?>2!ba`O~I+zq+0ki>uheJ>@_&1b?tg z%m!!yRawl_r~9JEEI!#+`?us2<8|(8x88ssZ>GnO&NI2yfdAU@9rvWsU1_?wD1j@mImj-jyYcI^?ViuZEWQFP-B~#8sP*rJ8Gb$WG6e4Nj-7d4@0pnu+7D)m zk5Pp20QG^#Je(BE>Qk|=F*0E$`F~F2HIylnrfc_bi``v705{DQ%XdGe6#78~y#$eM8PJ0q?F}zlhKKplBg_`2&$B%zkJ7fG69%PbVTd zRsnNh?4%ZN`(y1h>d(plmZSf}1a{R_S3nOyXmI891XItax9I`fx2GOPEq|w;Pmh-< z;qi_pwEMo@dw&;))1Cn2P3~Z5dmM=c661PRt^=*XxcY9POmP`RP4H`VQC7DhanzHDdN83!sbTUp#h=j^M~^RnHcR;$H*_7kVO zc#xjg4p+1J`7ngw^CY?o7=JQkqLA=6(lJg1xMnOVQE@#jh)h(_P-Km7@0ZI0@*u8^ z7y+J^{rRd&&a_%~wr=6jLm;YklgdT3O1)mAComz4&CD+y6O90V05S3Vv8Zn-EvS4y zXz;8r2}7cUv=F#Pdp4UV*@j}(ez@IK+qh@hW2VrljbtXkRT`7?rhgv9;v^V+W1G-~1f$I*(#VU}Z@P7_4F^ju^Wl`6&+jupQSZ+lAWii{_;>0GjYB$Mg&ITmmsb8n9eXn~#I5~45;K7$d!Ys8tNsxk2lQH5EZ`#V z*tp@n1!ZW1h-DuJhK2h~RCSN-`c^A?-*k3M3KW2svJs)h7=HjZ*PEdsl)&kAyH#8- zW-<4m4h3RyQ+#O#^?*s4D_qFE86@VALI%qDR@oY9c`b;B7w|4sKFX6_jz4FCByu3!%G?*(Kh+ zk0xJB>fNaKy?^7;1@Y=YK=9MXDt$N_3%{81UouiEwA(b>D)${J>i3(6Q`9drD6V*C z^+R%KyB^Nr23*jd0>K0g&p;$Cb)K9MDQTL42CtOBm;4vu?t|0g!Hc1%3IwG=Px=Lk zMy5GEAt`R6UEf};+OuqEUExMjx0`~)knODLBu(0JYicMybYJlWC`_H`Hfwn)?)P=O zC5Nujl-M;Dm50_9^Yn?qt1D66SQqiTrS&XE91bHOjRXMh_KdR}OWltpH7>Gaq4P$Ul}S$3RB zri(lTped3%m+$+|p+3(jVKeIg;{W;G$>)>LGuDlzfAhQ9yUUaBKT0`s#A&YO?DFO$ zJiuno5i4g#NaF15^6un~AdZge)g_=1w*Vzr>x^~s4y~)Ey}4)Po*SQf5W6xX5o~B z1>qM?ZG60Lx+OVLR;O*wSLM8I>UA~mEMkaq>E+MrI9+PV@C4W0pdyB)*X*V#!VSwq zpSoFsILbyZB#E%v4PFT5fqP6Gt2W&jB~r+A@^)FGbI?MY>h6A3ZraX2j&O#{-j(gL zjs_LNqWSy~Ocaje!gV%De>%W+Q-*-zL{O8g@uAy?F?dhT4jlEidWcI}oL8>>P;k5h zH!)&u_d~JyYxF49gE*34PngJqBjOw-W|}x7tnzapG9ZQ+?CqQj$C-)_O<CO6eS@#GONe=1-irEIwE+u#dJ z6ieG&0b;Q5!>RC~VKl4`fgg;0xeQ(f?=x$X2k+__s9+>E3|@#GHws=yq>&~W^C9F1 z6_ls^D4Q?cv)~+K)4azHs)$p9rVuZSPciPfk_O{`Juf5T8Hqlt+OV}yil?A0R;xPZ ztB`1c$4$yQZPSVFf5Rb-%DGY2kX{i*oY13`VMI|(nayKN1V?ej;y&&|4NVz%y_&FN zKpw&zq-q@cw26CIt(OlG_)?y@;?fB#Pt(eWkj;-t`{z;X}= z=`;XTix{e=AF9p7Htn)l$Cv?dNk^(7lE@@UF$+KqW1aamOBYJJUG;QS%~IM3NAZQ2<3-YN{^zHO?9s#tYiaYX0W@Hw@KlqwZUocbmjL0Ff< z@=&6I>m5a2Oeqa`$=y*{qBE8}BSq_VeB3yEeBOoBf2NCmVTc(MJ@uMohv=y}g6Lr* zmMLK$$DcB(A$EXH;RQgGxMR3pQh0$UxgKY|4%g#y2e}?+y$aWlU(^nY0Y!Aj@%@Q^ zoZQtTCN*i>{nqt7F==2pa&IaiEo56-?hj!Om&2FfLh2N`Y}#bXP%|`IP%02j`LtfC z@Uc>Xe_#Qf!-kZZ+<0L%Ar0VXn~GMg1`Of*JWW|T55 zYLVjrQ`>|e7P4BV*;68D-Uh4(rjinI;(CJ8{Se>|2ZCV)L580nJK^Crs#xs!B7nLfuIuje*VDoQNCxlSy&k5RLS9ux;J1=)+;;R3X>g>5|zW{Xn zTPnccMeXj7O)2?s(-%let)SkW(3I4xkG`f9lbSL_70^IA{X$StxrCOJ!3W_4;@Az~ zs4F!l+PJ1CWUBv`5#v?vQDI>Tf0XWq7;Srv=A#=*Ax(L1095OUj2uc=g!Xn5kK%HV z>FP~MZV3XjOGKb$+}dRxOR^CZ6gCu6lLDBHBhf#8w^?4j4UDTuUf_of(gikIR(0r8 zbS+7Ib!0J{`y_p0(L*^pWMim-rziUMw?WL0Xw0y);DFbsjgR{!6$*q zF*lRW7?chNbw*F=-4!^7^Co&bA?U5QD1t9u3yFL!)a#E?um98Y*V|Csf+l0w+Dkod zz*bDJqqKCVIm;7~Cj=h5yuTK;Z#jch;h!g#q;uA)k%T+I4xUzhEboTCyB)jL z8oq5G)`Cd!*XLOVf9=)7owSaEjU6S4*MlKfpRzxP*QM_ztQJ9YCd;0Mvy{&K(e|G92cy9010 znYP#bb&_F6c^x?uyoGEMZ_a^Dj77b(s;-;VFM$+Qbhp)|e=^0^+x9*XKb)LVuy#@=sCEtOits}pB6RV3+_PiRvHSUd@GHY zl_1Y^AF4!#NY&^t8bInjTf9W3ewUFgI;pFn|Nk3PF?>XW|)oK;vOdAaJ>+PRV zQvzTlGcAg?hzF1Hry%hP++V@;nwC?C1HU#1e*`;p4)8whR+?M-c(YG6jx9=@ z46+>fP-ryyebFRs2uTmGqQ5o}1jRsjtlDM0O{X&^cZHJ@&r)YmhGMV7D7<Ryl_+_S-V*a6m(uktL@aDC?urZR!HUF-*7bnoYuID7DjpHf6iLkD5xz{CQH= zR5*1yf3~77UwuK(Fsk~f)%P-Jl${>Lu;?CkAB;V=`(UZv>Du>1a{~ZgHRWQDz=s6{ z?_X$Lynp5IEH6;rn_-X-O3#bTY6@}^N#PsndN%$hZ77^>S(j4 zEaD%y|j4KuTw-Z0jmJ= z59=8KiQtR#%h^9q{NMiorR>#DlMUM&1T!!(IFl^fMt^VI#u4skH9z9uPj+C@`@Y=t zldY(T(71LLAx(e-0_sHjSl^3G@@y-=zOyeg%R5qM*-cOwumB#pJ3BAWJTtTJXRP2e z=KrO?i}lI-llL&2K6xy} zldJ#0`+rL9y)R_plz?xpZcZMb{qX$t)%m4=QOiPEZqg63@Xxr0XRJ)me){$0%k!(t zi!=X|F@>=LUw`rAtFwRj$I=y2D2vNqy#C?*@~0@rzTBt6l|@;K*{QJbG`#*}^DgYF z3MPzBYt;TxS#T{SF554|Lv9NrN{M^@{e^!hRDYq2!1JxQ;YC?!&3JltQ>SOviSde> z(Tdw$f4l3$sbs+!!$m(fH~li~RTjn=mmW8pu!JZ$FWpEeT|P`GP$~-5bm18*lvL%h zqj%LhJQZLrUZPE^F3Dq=k;gu#^PEZ!ClYRU$~o93D&bA|fEQdjH(G_|RjyYP$6EMD zs(;{4N<6{4Xiw>wptqXaW!)A@)5bY`_tn6r4^bY=%KO-?R^e$`SdN;nR$ctu71mn( z{CfA-x=r?!OzUH(9QcF)U&%hPY!+!{W3)<7m+`DdI*OEg6hE2SJ1bXhQwG^6q!;F^#D#G83k1lK?Yz0eAQ_!BFKQ6nUw%C z05%EOR1tttanPf{70;I2W)bYI;CIbY{^b5(7fp`wl6rz7#C`%!6vu?R< z`=lvwQ*_|P-C|XD2}IzusI8;8FqDqKo>>C>3CGxWU30w(x|X~!TH=x^`@l0lHqP2Vt+&%%LJaN zx?Tmt3ht9Hil5wv0~`<}b@gJ`M*jo)VJLk}y^A_Ag;rmeyMV6n!`zkj=86)+lmj-K zx8X(Ru?&y7>*}C=0bptfPj;J|v?>5!Np4m}0pLBZ#$uxLFSlJC+(DSaSvuwIs)}9$ z8kNf7R(<`ck2!>armdnJQh)V*wMg$n0z^3@C(H3eWWjx2#0Wh6@AF)VYHlx&6Fuau$)B)u>5QVLe0kdmB* zq6T2nC^0O5Z-1)3B0Qk%obpO=FbS+l<)U#Sro&8BZ6Ulmy%Om(2K`?X7>A4;|{osiErKQP)g-S~xF}Ub{X$e`G*v%%TddX?GyJ#5* zdBFvFJ|SW`1mrLDPd%V<1g5~AQJ?F2y>0Ij;Hc8#=YPIfO<`v;gQ?*uwGp^ABbXkn zJeh3!Wn1Sqj=|lIQf}@*G71SiwZ%n5BFV51NPC9*DhI9ta zNHrOY2h|;s5I}ipzu41r8%rO{`jgaQ&>7>l%;oA-KCNrYfXDyZ`_qg%$%1LS~=ag-!)$;%BO;%C}&-923yfON^sL03kGBky%(EIZq`Xg;Bh?U$EzCXbUa861&feu3DOo1?!m-_gU z81x0P|0bj=QH)=H`GstqV{;|Ywnbwn9otSiwmR&%W8=hD$4*Xc+qP}nwr$(F{i@#k zbl-2-RjbzCd(JWb(OuNl!Y^5@C%xfeZu(7UGR{$5YyP0Nb#2nWE!@FGkT#PMZ=&7O za~tQrcC>3%pLa!GmfV-GcFS%}8)X3LGX26#1+#oc6Ie^>tyJG|7Q(~hO|ckFYqY%X zF1A^{?=GOfx5JlBZ;togS9N8l82fm1SxUgVK=nsI`9Wm$6(ObE6Lyqo($^D|9YO6< zPtL)Ig}$|a)4{j}vxr9zmRB=8=m$bVO%X0w5iczT(BNv1#%BLmB~(_$oI3=zO!Jq3 zI1}s@jTh+mEK=+b>(}=jB(xKQ=T+dN92&DbPy8^Xs%HK?z(mPe4I*XXgz`kAl!R3e zmv(mQZkOSQY{WY~-1=vQYx!y@K^vSGP1WiP!6DAkAEuFIp)LSNXWS+E4FerA?_pSW z4lBd94oG%p<^HqYcGi?`^K}4hPvI9l(|-eT%dAd=noKpBrxE}o?_>3w|5|!fS)aaj z`PpBgFM*mxnZj_N0-@a)9tPU&JOJ&SUgg#vDqGaUDf4t`90;2XA0*e^`NB=g#VK!G z$M^c0zXVj<{v|UW!dE(0W}Bo8T3vM}gDRfh7aa@Tl&ZXK()@*pZ{`4;54=XOHP1YT z4N>W)_<&eEqFHIavHd#utIrEcp>@ia7$e?XjHIw+lE?AQ zZz!z}E547X3TKc_&c|XPgsiMWF_mz)TzVmIiFP4XcJL|4j=~?NkI>(zRLhVV(yrL3 zK%Kk<*|$)Ti~aM77;0ZXhP9)nXs(i+2m9Z(Wle*UrIRskSoFCUB@2)L{Lz0;c!^^y zVgCdbMor8|LN~#aKEDmKaY6pD2!0Fdr2glH1XgsWV}CoYeH_u<(@6hX%Lfx8O{ z=8fZxz8l5%LSy@CjA=6a#k-T&sk|@kh-~qhV?*Ia0=uR$hb1&WsD|i^gCu4vKb^2+ zALCj=uP-l!7#nFl^-U*F$n&doV-=gml9{|C#UOCZj(#^Kxlz^=4zE}B+l#A9U2Kzo zK}B%6j8Hjw+_H87QySS$U9Hus{ggxsB%~J&Z5V!N2HH^~CM|a1{;FwOYGpr`j)Azj z@ka;0i!ydS6*K0-S7{&Z%9|>PZ9|0{n_|JbOm805wBc$hzx&r64>O-w-s;hhBS6B= z0`xI|PRRH5@}Yy;*>_P&Bx5}&=Yildeu$u1 zHIgVIitHxR=G|f*>igG$UYB!^kYJ`cH)dY}-^;H7xXqM47v5HkK==-_x^eLXoeSir zoT2^T8fcPy$}4JN(PN}*>Z{EeGkL0|NSnF~`cw;`KdcPRuK(xsa>AV#fgYBIQm%5A zK$ZY(8yI<09F%SQB$%YI8JRj6>uj0o&x~kp(PR-yyyWeIbbW713YeLZMiFwKbaS_u z?WY#UKu|eAVd=UUB8zttn(G?r3hDGA(__so9o~x6Rl~(|RY7*M7va+<(|h^9Ny+WS zm9hRW9j&+pB6Ibf4%nWL349qGw$+|tAEitrUd&pcrxa| z2nuMy##gPgi356~mmfgJ1GfRNJ1VY@3w^ zs`A3(Vu!b(g1km@Knz?(xs6Uh4h<(yRmi z_V=W0UZDv~gX>_U(xvis_MTItom~Ror{<(>e9bVelDM&jJVrQQP?TO@d|pV*5KT`^ zA50C&{@S0U?`7Z5x^nA&=l`9|;$Ztfx)Uc8dpyRO2ypSA6?=W;f2`Qv0Wort$gJ;O z<4^OecD7=%Jdd!g5XiPM6l(_g%`pjpW?~s9hR57eq)rMl0|81S{)w#D}p2 z3lI5|+zU4VsSBYCp;RkeplE#e)a>R>Dnvi)FpP#7e-q&Y-ZAAk6-8uHG%0=8jN5gJ zHMSEQ`03E&I)t8hGh@c#`gQ&<6EP*OhGqIhR>)GA3P;r0?&>&Yny1pVkU`WB?Db}JG%0Uj0?z9$My{))=g!(*i#ivT>IGgPWib3 zoDQb-6A+X8=8Nv@3FUdt(73KkCoht-R^^F6f!Om+H10|Ds(pf~stp38Bx#K5_tVc2 zhOFqIZ;%pD&ixp^+HbwMvWV1NO588Y3ISP0sA|S7#B>WS1f6e=0{`Xim2TPX?B3{b z&VB*JDaH-iPgzSXtjwW;37GsR{Fl=W=htR_5S+<>AZ(`2j@oIT{?^_`6CDTv9Aj6Y zdPY*Zn*#TS1SMi9A+?&Zk}T$7cX+A;*Nq^mr};nXUV{c-%QIVz`25Z6&tY6H&S+}C ze%TJrUQ;Lu2jNoD32#;9XJbIXJkF>S%i`svI%R7tfv&wY=ELSdr9#$WLP(9O^5PmG zJoJx6!+L&RDDv&0Ml7UqgVC)Y84w=Gz`eEFX~B}EgnP}C%CSC5nxn@uCh<|AE>j*X zv;VI!p3(=%kV!BW-d(HUy0Nv#<~*rMe>B*&@?F^hn`~!PYX&vWLV<}u8+#M>hee2# zJZx^R68&pU+uaIMJl5i>HWjw2%Xj`Kyoic+y5wl7v}O#gYOiO#vbPT$j_!t5 z9@+^`tRL>7A-`qi3fAm;FT5;c_^amYhYSMcFy+X9d!>T;-125W-vL)1uyYpglKKXa z?cv%X5~Vv2KCCkE^G&#*f~6 z!N`9>jTg&hf4x|lTNeH&)k`2V72L^@kzGJ}CJorBTNb-&;k!MS|$vzHQ+4g1J&B++fCG zYmezCB%Sxb06`Jw@;(-h&L7cv2Gv}fG3~2UoDx^JB2?BXF|{u)a9oV>qr>(2nxFDj z;eLuCeK`E1km2@bJf&W+kcc9Q`XSgiXBs;g@q5??or@h%z8HUUpeS64qB^T}|9)Q# z;%Tem(V*N*5=ikSszhLBYqC&%RLzS>1Y)z-g zkdYS}kBM4B{c;T2PfInRs}=pSY^13S&`~KhW7EA(4`2*EP#t?l@*zWi9FVzlu!#7R zU+6=1WxDoC24l&$qTd;`ia{uRO!6s}U|jGRqzqs-&{Id2YuEyb2DBLVpqxNQD`~EU z89+ya+U5?axgre3ojR?-Iw<3n^{^|JWMJg|Ki8xD^8oh@G^*L)j$!)R&N5-g(64kX zg9^W~o7~sfiRbS}cP1v6gzjJ`GmdLPJrl-m{?pX$SYe{Eu zj|ugI;o$5$cs@~9C`oGup7&ZX4HnoGRGZ&CH=W9h`dnY4YB#SpNTj7DEkPQkt8pJ{ zHz_zCg={oEiPs;w;?o6F7rdS1Lo%R7j+(a%;p%U;GKv7Jr*nRr1%924=f@k2 zC0i_dc?`yfW=?9aRGCb2i$b|pbz>0TT(_~`k2C~CLg2;j{bAEoZmuNEx#wzp3`Z;! z;}Q(b5~j4)-u!2j<%W<>wu6zlHODy)A3FK-p^v?ya99e9j&$tM9*y$14|qsnP1k9> z2Isj&sPBjop1Xu=TtNUd-`0R)ZcPut)KyN9+t`&C?GIVTyt_j-hG-HaEBc46=CC-5 zW={$r%)KO&MX|aEpW+&$RGOUjL_>YszwkD@C)3$ZGi6S}FAatVWK=d1&#f=Xw9S6vA<4~X zWKo`Yx%hK-ID#-zhh^T)Mij7}qe{kkk-m0JYG!#E#UY&P!V~`RjN39wn}ZSIt#&yE z4ma(9n@}N}?f%U2_n%t_4yJvx1>dF3Cg-Y^<9LhmT*cKKgQjZFI(riO1gYuJD&N1vB_%kyg`8#bBNxeMe22Kdo5}{X#R=Qn1;yS_a7K}^UO5vzkk&*4`5hz?ULgU&yn+_(QZd0cE>t$b z$4B*-lGWO%X&;i~jmL>3;GNp{tc?8cF$CT>ja1SmTkT`uoLIh?=`;H;V3nA$yD9Rl zCF#_uHBUZ4?8^$`=L-4LTF@93{3-RXTP(H;(JeUyBY9bM)aCn?)|u*`=|eIMT)qL6 z-bSkpa6iTp*0BFGyy7D8rv!r%PO;rw_lW zq-qwt*JTAmfc(Ot%vlLfQ&n~+JXL5JipX@$^+?H1Us`Y=2!4aOFs1pWItb*4#tmCY zM*m@~XqIt4oSH&{b&>rI1~QJ!_W!K5T>rb;vT(An#gjj%03{NZoO*B}%x2Ih70Cn@ zuzW4&YgM(R$axrlK5e^@i;5y>3~S7J;ogz-oQ`;ST(#y;zoYbhN_?_^4~K8LU3Ww` zPJH1pzEwkaVu^EIno>(k^u76;PviG^;fsgF^A{r+n*(c3tWlfTU(gCRW$%K!x{Ra8iD<_(wZ^BQ0+`{AuyHPHI^iYeI*M?eG13~}NHW1FY$CU+qQ|cmXD4ou`zgxYLMgEz85%s7^H++XQ zAX_t$I60rn$|^p})H(0>l$%xkuq8|AQ=JJAfx&}Aw&%up0#k7|ABi#JWiz4VGc~7? z#YZsGInzqew7~O^v@wE{v0v>NCIE(kiVlQCQ~qZZ00TH8B-3+XzQG>+bF^2%`7R|2wRT>Oa3XcAam3RxbNHQ!S`# z!vOCbu|Y8o$^uOZI^unJ-P>N|YBco*YLcB$b7-YLicc$@I z=^*yo7$^2X!y_q}R%|>{Mn!5=E4Az)aH1KDHhEvGc-OxRu@_qR?NBq!eVsE{5?6l8 z*jj>7Vl<$KoU{Ya86BG-w}h;lS#!$ihMR!?crJJl?c0-DU!|3fvN4-Ut2rQ-OCRvS z7x=|Sk}lL-=9oM~+BY3V2c8Iy46Tf}atur*bPN`Zsq*15+R39NhD*$;1^vcJ1?@TrwQ%@w9-@rzj`N}T#=gT{sTKvPvIjm9W(*m(w){oDK2^2VWZ zXuauMh=?neLc63Wzi4S!l^0q+)Y#%%o;_dVDM#`J27Kniw9A|u52LGz`XT5{H%q#k z9JA1(HRNS8efl#VIkBjq@^cVrUAlD1<5 z@?57E6w8icIAEBxHHHGtcGIvv%I>HFyTVqKb~z|HxhBPd3i1{0s9082vBzAA9Aq zB%D;_9POfB#Jc>&K5i5fE56z!f?tpAg-Dk<&QlW|FtjEkLR>(!do|x@5JoA%SY57b z5xC27VS`j3V$>JuMP-95O40iX`) zcru>MI@2zBR_^AzpW{pRuV%*|mMCOunQDEmAOO$MO(zzCY_sw{YiT#%AxV>~{`+#c z6hMaW8hP7j-t2Hszvd+7DAFF&;<{*I>T%Vrb-Cg%(fm5OBk1zYX8qLp_ny=7X-CF9 z^B0s(TmYBH1R0~DJ8gk%>GyVm_e0SF=KU;3VW-e{bk^HDbO?AWNImJBC@3%`n=8er z06xAb?o`TNATfgVA+iq%;6OS3PYgcVJ*MR|cG_=*) z{IlE6^{a2Q^ZP`5(ARB~?Eq*z?a98Li_wcwf&K-WPaEiq^f zGYQ3VJDyv;X4mloc|mS`qvgQ(;bH;)SI`G}JBqvEdt;@)`*dn{GMXFPzbBE3md-`- z9f?!M(5_L>hUXm-j%bgdhF?1W)v+cmo?Z+c@D>eR2RoczcB?)+S3N_zF|7}1l#ssV z`;EVlOeD{JsBjpOmV9+R&UX@MP6kT%!5=321FqURH6KS3=&$ zc*f21YxUCIReBA24Z47F=EZ84?-1a~{X@pPoaOZuxR7NiEFMdf&i?$=5mWU7&8|#b zKFLcahSz^>Y|YD!F|F$($L$fF4_B**IJEE&=!lw-$a=rIr^Nw?moa(^Q=WNQxH}Q*)MKN zhfW>NTgRP9*>zO7a_7`Me9sNrY?X~c5m}0yHdailLO9IF&4JbeVV$w1C)F4aT^>T{>-rnS%PB=bS;S zjA!Pc9*T~U*cBi-Xkr3Ox<$7Lc%S=V^{tjZjq2a}q4BH&YC~E|FXCuP7T*iG#=MPeqoTute&G)Zo_qIqXh_U_-g=-P+3p zVi7x8KR#KJ6zR71AHXieWw)>5BuUgOyTzB0EfKR+HM4-hx|I74vb}Sjof=D{D;5XU98&W3=Ivp!B_Cd8*u11^k^%^nP`KxHC?GlL z)A{R1^Ie;ig8l*e_=5_OMUE;f{NzN(s9O!3%aa`Quo!xzUUtrIzQs&gvaw1{)hV}b z%h|dD{i(o-c0Sjju%m;k?LK9y7ZO%%t9zM`pi(!R_&YN9MzBUL``6h)OR3mC@H}IR z0ff+Ud|^h{Brrs@hc)ICl|)4Z?Z}*FsUUgg_v0A%)!e2EMy6n-eRrh!s`aYMoOV1n523b#f8GmkV3{Le&G~oFi1JRI%1yj1UqtDDTFz1D~EwM(@DLatNp?Ag@Cg= zs9XXj%7?gzX&Ti0;^m>St$;QkMgNWSj+r?uAw~A@021z;M-+1rkcxDz!xRZ zooGA2`H$XC?wQSlB*ma@nCSh`-BJT;dp-F)5tAf!b&DKfeezP94u(X2vPi3HF90G@ z3@Qnra3P55Y12&?$$5qIKu2K^}g<20ptTz)iCCe20f&$+O&fHHq!+6*j8dA2FkJ3nXxK$98Mhh(Df<+J2s>ystnJ6N43lx2cp+0th zm&DAi?keQ6aP!dqCSrtIzi3bQO2$GioDgjP1Nl1*Bv*`i5vOm#BV4WWUkev_Vk}^v z=2I9T7dWXQYGs3z8`VAzHZySO3zRTe1>Cc<>TNsR)*55IyM+pzN*u<%9XaI@AtQa@ zgev1G`B<}ys-fq4pA7S)goLG$eK`O6K-z`BU|f&KqU6})oy33ap}_-gT&iKjG3a)% zYVnb)*SY?>ermx;2zb-s>@)=ajJVYyBzoYeV1K)+pEB7gU=D=OiHahiuvD_@(x4i` zR?)Jmx8RK!q7h_!X}wCUIfR_V zGUvC>6cT$auRmKiS2j17;OG(?CWoi4^y=CCz6PlmJ$W8Sp~Jl$i`Ix8MkFYw4!ur$ zlqff`Ix@2~SqBMfkg;Ji`)OVef!StyQyZl0n=@byGR_7$d+21(f-K8|YNG-ySkTV! z3U&{s>vtmph@puTVdVlb9%4)oiIsM9C#xRrLic<~iCg}nF#VZ5wAsd7f?G)^C~S~{ zd<;SB6)FkZTS^|!wA*za;F3f(V(sxjs7;+jFOVJvCvDTZWMnq<0X z)F9mqc1(E_tmjFl`$Pn_iQijx_=5S-U;~H`&vSFR{Ec&(92zF<{b>p4z{}~h zqPb{r2<4ws(zOJX;dzi4Y}y!?SFW_0do>$9LANXD&GLa zPemdxOp!-=S6Tl8i4%O}dYqPRvIE>c!oZ?~GcH354zSp;XIiEb`*H-6q{Jl+`<(>` zkSYb+t6sdObJ2SY*l6lX`99Y2sIvOr=iRh_eQr_`>?0udfl#hda$%1ynJcr0vLpo3 zwl1Fz8u<*=_WdD8N%=NoyrQs{Q2SiSYl{AiJW*R~BoCNcz}#htYT}oKI0KtTX`uF7 z5OIBRmwxppL?WS8^6>j76(oBqS^Vaz8=Ol`6!lMx;Uoo9{Ed6sT_@!dgCZg&7koT^ z_k;upoNC}qn19hv@&z)v!(k~LZ10&k)&%D3GnArbP;BhCo1ERY@Q(_7^rV@k(cBqF z@=6g3-Zh_eDNKe3cltsmxZZqewRZWR-0rj`9i>979)CK7l6ciEGJ~4QjHcP{AB2(S zblMh2*E?P>7t5J*Kn0ckc%NZxyK%k z2Jw4MUCoMUP{tF2!OcnZCCeb9d5WXZi;E|R0eYp7Z70ovXWZ{jX%@9BdYfo6VEr)l za~kkOx+<#Aka&;#y#4Bjue-mU3Jo(}j-$GRubp(I2Y{&h#tkAouD^Awk;SRn&9yX! zYVVyyF+T5#^li6i^H#^o$T>ZnTQ>{Bb2!r`@as~V^?5Sr4ObZ6u3Bd8H!UxaWWzJPLgQ%p^tNegJ8q9k0+TmF&ug8LZU_%*cjY@ecgxT-09JeLXzb-qkN`=)tAjJv>lW*&!e_az;aX z1+}=m`M7%>kDpJjrrLDg&dBJ>yosOB?)%RAwub`hbftV89()*UT0BIWaPi|W25~4} z$C|kE_oufQ>xCZ>zEl) z?g0VNa8@$XI^vc%-LGhku`N^}UOQxws=7;7t7RK2qXjsc(licz;T9%Nn*$9;O30=C zGkb0Vq6~=cSj6%x5;z}58nq`@ZmR5Fy8bf%BI*dL>G&o+a%%0FI2K_OxC<*qxa^PF z|6>ekNV9bbp6NFybV5?r-#$EYFHKeg=^h$i$>V8&Zkrhqo8Dckle=EfD}r5;Db<-x zR30#d)G5Lz-3Iko?=Ri>vH=Wkk@iMojoEoxaZS;5mB3x#E32nUl;-i=r0j*RKfvKd zN48tvSNo+G;7R<}c`Y8|v~*jW#%QuOx?oDq(71twmUw&++KPtZ4mpATQ-26%%@+ES z=_XW|Xx4?)Ch+^~#{ws4>3_fBasC5`{Nsi|S-`P!axf(;!Gh`n(-&GvVe|TOD7HdF ze`nFqM&bP9PN!tTbMM}{QHP*Z|%I{oWV&fn6WBqrLIWbv|?mPb@#jnpTII;%f9V{gL>Ym zU|`4wem#_@mnYi*^9}-Ml>fybYz>wBu$lEQ&aZVkTH4&)J~sf0W%6l*r_)_8cdy$U zOwEv{!o!Ev-ESXfhs)kXV#n_(td?+wD^^o%5lHjrMJ`G>G!f)>k!2sRDvNaOF3+C^ zFVj<#%$UxUeFDI)ErBb!gYCzWh4P z;;;$^(xZT5tA?RnKff#|VqiA<`d$B)o4t)GW9lfuFL2oM)Gwv95k}II{!??GDnrM3 zp2KDMo>RqPxf(0_o6Ra*(iH-K5+514$!Tu4{Or4TcbqJ^{(Ex$xx20TM?afe_L{KU z^>#()xE?MrcJ{sb-DGvynzdyZUAz2bVi2t3G^pCffBh`v$kC?Vbi( z`)X#3MuWbLg7Wu#(u8RS-B$N^ayEYom2WM2^b0I-OFj^t5~+(Y1y;~tf26%@4RV5o zChzZAuP*Z60KD)oxORgIknbVHhGx+AwH3BSqOE*E{UGGW7y|hyUg~sEY6m38q1~&H zLBO`Nzy2TeF$1IDmil!z}v#Gx0UkWHbBkW+e*VaVYBix2B z19Q+o-iqFs<6!nZra^gxC9VqEaw>d_iXwg2^HCqH-|<{eHaQW((tShT3v+cTap&CpT3X(zE&ZSeXm#~`@iHR1d}ru+buY*yvg>xk=q2s9y4>D0(v9B&6E zfOqhqKjt$Nd`zIn69#%>8Q{b)dmS4WYddN{F}qm6Apx%rkES(TuB>k_x+3XfRl75= z83|o~epHU(;V`@y6cHi|hqc}XA9{y6)3nU&Xa@_Fp&%?zw@j~yZ&dBc*YnU3ZYGD+ zuWfrfqMA*fZJ>m-V+I@$IB|3eH$^$C(ozQxjo>`KY8L~;jY6KG7lUwnwF_P>XaoUN z`Grp=51)KNU9t#jIhcc~nhGut)@z%Li*kWtRuf4_Jw9242p0t(@zmTNli#YOGptaF zDkF=V%qv_pu-QzqMXg|WR_eM8$wZ?D?XzerHGGSt>6gyMKFI3;Z9R!Ym4*1k4X%zR zVSsbijYm#@L!Xb*b;{X> z_Q!em#Dj5Z^cw&ftH*u!%(Pd>Zhxrt zgZd|TuSnEQG22v|`mOIzCUHH z+ljFSDWSr)0*Gj#%N6``T{4+maySK_$?=6G#_vr zz<7n{T0*9r+6_}8ZAVSWp5(&idkJTQp7^?{WIzLf9%T!WvIE=VG26<|Mle_}4*>*P zaX8HD>rR0Gr`d0!!}J2|j_rzb8H_s!jN`&X^T57DUsiV3(ae8zW^}k^*#H<D<$ z@-V}+!NWZ}$K;qjkV;>mui#Mlyy$=m)s;f~0>5~K!NPP+{w;(Doc%uo0V(Nj8g3Uz) zpWyL?x@WX-hx-7Tz_J{Tp3FAUWr9>}vBda+R?K~izarOxRhvPPg}sA)9%I$x#N)OTwah+&JVZS%k8=7&y&_L%;G`l1_6tV1{>f z+ITh(1EX5D}tjx6Qm#;b0dnE zr@aV%jBx1knUAczgnq0k9_^zCw{x$vq}#y5&g9+~8Of_|v))Y5(e0NSt1*mCN(`sD zW=cQIM1|x5&N!Ya{lSclkL*YLHS^g?g}@|Qv}PHCXDfL?Pg@Jc*RLi2rd~k3@cpl; zER%mk^TOM!~Q#ch9yFrKp}I&Qz7@`y?_!};~YN+A>mks5JeC`sGgB0`+Oi#0R6FwjhGOIfee4Z;qf!-&-O_&@+tCOY1! z*gSs15ake^dKq0$uza)p+J|E43nPvLBhATRGl(cp`;7m zcDuPfnsL-o+wxIbsYc}>++zAbi4yN8C7D|e+`2dyB;0|cG|R)is0w*tpl|6QWbfkMg# zwhs6720r7o8>@*>Ui$gcIt9PoJyIS4W>{w(h@9HLes_u!GvLcB*nH&LB&Bzn=GA7s zI&9knBRSQ6jqlXBa(4!%`@A$&q{CeARt1;N$a<=<1+L+-p|u4&jek0?>YK(TLz1SD5b?|g?lXuS!Y_hNoZnOh4UQdgMJ+hQC%+d6`VMF{?kQ-r( zp9yl#o$X#v%FaE}xvhvDMEAk3e?BK6%sUr!h~JXojT!6Ld26UWzE7QFKkI|D+$=UP zb5`?vxPJ}`=<2-k0)+OeOoQKvjPRbHb%W+e=$dcQK?Oj8@poNQ%#em);k(R%uBFIQ z&j+zQQ23Fg9tgrb?l)ASEhsj1;o6coedKk_mrY;iPO1!LkqJscaVwBos)yRCIoJxm zmCZSq+0L=LuYFUDy_q+&p$P=>)Q~hpgd&r34{I}Fb!OpKfR93aNh4=i_UR*))gvOU zSK=XgnTaQ0bPu)#-QF&9OO+M9*Spfop_6qU`G)AL`l%STBkInDaZz> z8ZjoXYg_{XyzhGM2bN`eJMtvjAGvxB@chmU4!X}kmY-TgvDU_H@e2f9mUouE{@lKl z!N2vw@dD>#WdO?+B*1dOB~`b1JqO4G|Ch%|jW>vf{0^=b%7hpP*BM=~Hb}ki5FM^A zT0H~1>eEx%B;K~#Ir@G`4ALERe22MQ^E&t;9$5(UGC#@oUG%C+`;-@U*6}K7wRK#o z?T;{^s7}*h-Hfb|zi_vFup_~ucfop_=HluQr*ST!hymF~HPbRoqKe_H%pu_TuOGG3q$uwj8SicUh>ro_@!Uj3rHKrDl3Lo(6L-J-F2BH^Xkm!k zdA6% zDP?k!QNTsfQsd0Z5i$(>Yv4H3@#z|86oOV8yya|^Kg@Zz>zs)()s}J7x9jS@0-`_d z5ZSFqO0mD&a6a;yOju5(_Pt?KpF+ss!x_$E8D6#!eBGEuPwI=|!|dV=ZYc$c2+uBm zJ(3mm_h5a9jw73x79{AC4ke&=Jnj)FW?M3`Wz-Ryk9NrGhW=YW6Ik8-9`cRUEphX4?Lw3+)%i8hyyhjGTycLPqL&BZvdMUy zG+iMDo#VE%PdQ>Q`p#ra)e;3vt7^ThD7QbvW9Et^8?ixs?xrg_aNpKLEhPO0P2>y< z^s#PxH*8eORU8m)W;f#bLbusR;$Cf=on(}U!#7XY)km{qS{1U=Sj0p7aXbJRm;NT7 zf4sv3cUVv`J6aX+_I%UyhlWkl^s{x*L`K`F#Pp3{D1ygCyFmSL2H*gH=~>~;Xy4NG z`L*RUK9no}uKGq;2jOJVm)kr@FH`m4O!S(X_hQml4^-N9o4-YMtmsN0R2s2MaD-^x zNOTC-fs2MXr)|_p*GAdH@1kQ9L3P78;?OAi#Z(bzXR+H|u|x@9_mlLD4*LSs5vEZ= zO8~bZ_i414ufo$`0bvnXb6?+3pUVm5?lJ$T$<(J%DmyAC(CcVSQwjg`~AOTZ5YWg8MC+Q&@X8d$exWSAM)9>6)~7xYQjk zAi;qv^z6s=ySW{uk^oZ^A=4ATbl=+52|n!~#v=lmKkC&dWf`Ngx=fsp;EG$5>ch|T zUqI8DRWO65BVq#U>%$jk$!z{Lq;QU;xl^Y_cgchQGE_wo{`$UJEe{9QFMH>q2D1Gr zCi=ZQoZ?qIS5(XS?RL9&vG@4u@EyMt$bny+{dIHq`s}UVB5Z4J`+Bdoo!RM)c35LV zHw^32RFgC<+u}RR)M*YakeD2(^3U3*M hLzs_cr)MbKCk^wv*fGCGTHJ@GopzZ zmrNU3d8WeSy- zU|6ziz0S#L?R5x@#g!eyuX53XbZcS2X0&^_U4OfRmGvHB8L#SG)rC^kSh7Y>a?qeQ z7gGNcrLb;yR*0`yb>UZAs+m&OwCN7A_l!xBkYL^sy> zQq{l$A05r0#vYHlSp}=i7o-wHFU(v!sb9t|OK03Ut{Ho99h1qGK}zk*t%j%y90vUQt08;~EHVyFTYYxX)9@^))jqJG^6v7#F4u6#nXn zyy~&atq|n`^c(=0EZ`_1qrf&^d+WnjyNSU=U_PnpYFKR$cVaVXjw8O|CHEdaPEKFL zS8G<6#N~h)wfV){uiqJ6?nuC?Z;to=*;P07V+R&kXj}HFS1&ja*KDb@CY+<_qwS)6 z?$Vo)S3ba?2#LJgAxGDi2dT2{42>6Zs_WX4s>Co#a46FF45#fdT^>yzb+ zWyW%AyZ-0|wiG9+{ZUUx6rCH1{POzP6xbRA?GI#;Ll1DIY1wXwaTYJuj+brc*rodU zM{-?<9azDMY`+Um1D}iWwGfc+*AHvXPhh^05>u0aDHK(Gq&@UH6YS-xf5A0(<Xw+dB89U6u#YY51=&HuHL)*cHT%>|Z=KCvWpdE?|rlFwy2p%(l z-ms*gy?I&Qz7CZN0f7wLUG>Hf=~t)hD=L&ZEvD_IJmWYPm-8+n~%4qie} z4}WTS;^EV}{B&}T7>l0bv$kuBGjX3Y6#2Fz4}y$CRbXN&5hp;V zd=jxB8)lCKa{laozu{ODc&-Gt415A?`%bs*hkz+5uL)i8K41HaHCQg2I-+FJf>X^& zzP|yYU@|Ux28byjLr-w_`c>3E;!v<1v}Vo8({ldZuqoy@0gP=2TSK^FU$!;mwmlOG zD7NZq5;*^GtJ*rm2xd}4n`hj6yb?e?3cKLPB55P!JNzl{Wo-%q!9z2N8t--;vRQd_ z!cEFGbs<@D9yb|$H0n|HKq#gd<`3sZ3M+-O3_=V9D@b-*Pi9n+5D`)rcX6Pct^@bI zXqOKNSf>xP1LPZs8p8Yq$suSh7+xWc=)f;}e1*6Mj*=cQw^hlLIf;k7G8v$$Pnl28 zFH~DS>|QEvCR3VvIlsAJB>zAZ1r0}O(j%69IrajOgN!t6uX^E6TH2|m@mz~@n|1M| zJYq5I&lgD%@J~?@HLWm{oxup<4h`k6Kcah%$b{5~uQ7sRa8u5X#wimF4OTWbqn#9s zqY8T`3}zeWaB&NiIGqhqcjCZgra_6wa~nfXa4(2;Gj=F-dA;-~YF1WWkEd&hHf`fE z_ikQ4?>b(cp@sv0*^yGqo-V%kp}HtHmIN%YXQ+m^8EpnM^?q)M!I2-2H^=;i#)hNW z9FOfqNGg^&>i-18msRVMrIP_za*AD6Clh zf#>+kR%dLdwG0T7=A09s=b$5tQ zmD61L-V!i|TEq#m4Y3N|1269zqtFlpD2h*jm$;MPL;2*tx{5#1UsR=93xE$~IQ$1~ zHxH@ze4iPdF{C4tp(R0GV3Iim+Mgmnasy_KsC|3`lT)X5ZhP``RW~O2x=QsgwwT2- zqu#INK^Bne`M_t7K)?w5?oNtGkvo4Saq8u}I|AQ-5tF#25^alo4jsVwy>iCqJJxa$ zWLE6KCy10s*oYA^1`Slp2GGDG25+>&ZK(YK_DcKw>Daby+?;bR$GNY2kJ=A4 zR*gNYYRzw!|3Z-xlw>=QZimfkVi2!q%gOb|RlC{@1A(0g=&6FD(m}@pkm7eh*m>+sSl-T8`Hb(M~gGNaI!ySqDTZx!E< zMvv+4`{Cgv+m|!fFNsor425kjKv~3Q#IbI8y8sn!70#6i42Hb&RzuKMsW{}!M8k<8 zHN@|oUF2KjuY&m`uaN4Q=U3L!BQHi)$OfY5p+W2AqIZBAb9qpn_%pOBKN5V(T82mx zugDYL-)c#Uh(z596F?-xRxi4AuNOcgy!`J=kI)NJH?R*I3jdpK%%J8Is$Y87GJ%2GcmdQ&}Hjhgby0H z+pIWTxpaT975NII4Dxp@&_Jfti!Qa;p1whTmo125w+*F{mI-BUZIrkzsL<+jwu}WZ zfLwAST(uYOql1EZtZx|vxa3s_YR zqujkeZNuwr9i6xy-j7dtd`h*sTJjFogoBI$4+# z8M7h`TF90BnALJ(PX-OrZFsx)vr|;ko~qZv>IwXklUcbJ zOPDam=6<*A(h1}gkV05UO*Z~SHGAVoEFSxG(WDQjP(1GPMKh;yQ1Kd5DMB%gY&d(u zDfH9_(k{vwJTCztwStjmSbepH z5b9y?QZ8j^`0FQfasyeDuB)1hOSj|CMW5)UzkHDH*(P^~@q4_{E6AR^w+94H4&SYs zWt$mj*x?O-<_$TRJ^k5affoA0X*QoH>j|xs^4c)%#A?dJ?xI{L`%|XBfwldKcMA06 z>jR6T#;Wf>_nEDoG@z`YpyI99w4gs=AqZ^9URz<=LBGI3H(O!3L2W^SYjzth$o0W2 z3c2~EmOgV&vJ#CJMMMUN0Q5S-WTCsdOqSwwG#@Q_i23DrNJ`Il@Ff`B>M}Y64GPnn z<_%f9z`>ps;{jG7y^N@fcu+0G3Dj_DCFzR-_0vou^>?X?l z;pN<@b~0*F4gMv^<20r8Ze2uny;N9g#Ad@a!@uzI4;RwzfHChhJRtyXL0Ea0sEY+@ zb24Q(6P1&rYkzatrL#N_;dGg|%3ES6`vNTQJz4RN+}{h)KFnO86Pdj2(>T=H1YAtd z^dP(#i=uY6y2I=yW%EfDHcLr?)ux3n@|;5|Y+URZp$jDYVn#U+_q$MqZp(~@NJ1oW zAoHJu``ISqz%|0q4MQrcVew*r$gjoJSg2ppe$eXiTTHvBRpZP&;<5i^kN(>Ht4J_v zc~gQxj1*C7W$Rf2<||~53*$KeaZ44W&`en-Ib?H=td;cbvWp)a{8AxM8L1^`Y#Z73 zmY=mrJg;zIB%;4wDl}_be*!VDgU`}J#wN<T+7`P zPh#RlSJv@K9R za?+@!4RsDk_%<+Rjn{TlFoni6u>g)m`}?FMaGK!fi`>5-uEO;c(L;9dir@@jx<<$S zKPN^l{3V~;;IY!Y@VCmI42ynG`t=^+jNEZ8PG@d#`nH7$9Z;ri7XB#geR!&+m4G^Q zmOON3V-jxMyt2;zCv9ZmuE}IkM(Z_xs}ep@jwl-f+;V~z`YdB_4NI&*p(>HRqybUx zEfyKZ&ORe>m7jZn_F@CM#g_nx>nk_sY zXtJCI79&8HBc68GMO?v?+aQT44410$^SA6IWz4vQh~7$rqjCC8S#2Lz_${UR>Up>` z^7(6fA)Z}vWSK3S%OdS5#y!2Bz*Fvv{-Zkk$80G-j0k}LC1mf(!E-lTQl-eO*$>9~ zL8QN$95NQfkDdzNQ9-F?X4g7hccVQw*RaoJc-NhB9Njgw5|hS>ipl)Mc zq@y>&5^b;WEJK9c0p=R!=bojq2UQSD1wg1a;^AcYPF_#Km{^dF4a&j;)25FP&O-r z#fS$>e9@m9YKcUVpb-jzMfR%y%nf|W!)K=@^;AEcEY>Full;{c1LC_cx=%%Ux{4nU zEFC<=8)Klfh1W@(T8vIv66&&ZeJ8V%TV-9xtD1ouIZdfdCVz0;AWF;3Q zL)1n-+wj*^{Vyn}1hgS4%j3Bh(puw0bO2)e7vDl{CXP3;1Yu-6lT}A$M@9GR>Dlf^ zFd9d}r~IpqP3$H?S5{qJssLuz=*P;x8)Y-f|Hwr*|4`#ec3wJyH zbI!{2wKtIZtp_Vqa*F#rgFenKFE@ubgU{m>_+NoZA>@8B)Ed7zs`>ox4PKMDF zXz25vf66BB0ZNLo3|Vzx7H_3?P$z<;^4j88va-<+_R+DsqiOwCu{phU zKmC;Ps9#&+)&nDQKOCW202yR~VZM#3D-hP%FjfuLL}L#;T;{$Ix?0syZtC{G4VnK? zgaPsPLIVN@k}si$Yx&bQ<6@_Q*-Z~MTs)ta z!2a0S>3997yzKtJFYZZO_T97xTpI}tL- z#WfRtZ`4F?7ly8DCt#}InWYGyluh(4PppY)n2N%rfp^m2vKgEQd|&2N$XiK=pfl)i z`}T4c1d_H#ifJ!Qc0n+eh>1Hxx}BBl1M}bxt;N7Vs2q8V+o@+i=*-(9$2fL!aEG8z z?3LOqem1b)`NL9txH@%VxauzSF{r3@KNQ~5#$wYj^N*7*7L#aQpWlyiKnhb=_3rNZ zICmkr|A=+SOjxiPKRa_sB#ylCQA6c37~EF8u-bI1In`S=;vlwxTBh*+F;{~v0&HK# zkY(+ORKHFMka|^Usl+yLNaG1-Btwa;GcQM@Dsx+Lt7=2h%ZSlWAt{f38#kqFi7-kR z`MWtdk7qy$_-L1&;-PhJ=Z_Dz{ex^EVJ+Bn1Oo0VMe;8fLd7I`D|Kzis}&(u3TZz$ z|J7LA7V}}!RYnbngmhTz4I}*xQUhrQNC*42P3mB9d_TeyIIwLXV#c&9Yc*;Eb>k-OS#4&_@cY3y#@3q$n{S_b^7d?3gE`e$4<$`&w2Wp4j27+1409LF z#A$cNpK4S{$B_Pwg$=TO=A?w^PxIl0JxII-bvh4{ z{$%H@s}8@6!+-&1;qOD8Xx-N3?x8Zbcm{?7S=OGEoz6pSYPQk?cd5!8I9&^4n{g5& z)pU{sfHgc-1uIvCnce3FCV^NI@9-U^Ewmi-E-8$x-b`6N(gXk9Ra^J;J428rxUqvG zHUT#o6F}MWdM`qPO>MY-;ui8;ORGyM~q19%p-AQd>)S4GtbBZR9?L92-^g_ z$aV*2{n|av+-`iJ+1oBDmWrBhQ|U``=*((FFfPe^Pr=KuKB|sT#6Ze6{&BC+gKOKL zlnSg!tgcP*NAThiMLSm#H87D*x^AftsC>$@ksV3IOuRHl_q#Ah+bg~_!9`-OAJc5D z+7R)=nlur+N3O?_8$%*!{-11P^YRHUWx?LG6YP)tve>1-WxAF-SyW9j;0|70b6Aeb zfG_jEGb?Xbi%I=z>MvA8EB`LxkHljQ&(P5ty75YK%PTd zL`oH!FrNC-4huX;5Q|zOH|Y%&NjiFjgr@QB=_3G@Q4qfLlr9O>=G1>}&XMD{r>b2p z?Q=wviZgED$pZ+EMG(c3MXtw>=fRvVOc9fXe295zIS;(_YV8~5&6o2S8F(8vr0w8y zh0wROk-TcyycZy|FL`!$S}DVVhbXb6At*LJ-6Ver;DZX*?mU10G;OhLHN{S#HY6>5 zpbvp+RoE@NN#>>*0@cYrnuez?G^q!bco?T9h|>)*DV`*-^1(X-B+b~5i?vwU5h$RWSgj4)~>>;TPD@02oFP^Fm8BPmf`Fp)1T)$aPo26&cVUu+uaEdUzzMGvfipap< z)EDh_f5ROG(gzU8`dv5)rS`Cou#LShp*lbmgN9Jape(PAHy99QnQQNurBkpQ?l2Pq zNS(RTk`ay)l~Y$zw9X;Y>d^&VBfCuGLymC9-b9zlTpVUE_8K|6*VO2}5)t*)I&6K8 zz=^OU+bIAhciTVkF{BC5ERj8o@Bbyk`1WS>CK7sY#NZO}QwYLSnK_9y-EjgPXW=qj z(&=o1bmEve(}x2C%Z3*F2|yStgfL678I1_;zwC=we_}R3X<8)c6(JGYJ`b<3ds++} z_sy>}x+y!mfb^R=oad&`_dvLE+G(Y-D`?K5M@mL02a8?SgJ9D_sX)w%5u=j;K&tXi z-V`W>-SMMr=sKj>`p1|fTu^`vkPsve2K5!0Tv(w>N?<{R^x{*>LCgwWTr%m%q+3DL?iR1jbdYP=&kuPTAoL@%P0k9hY9yPQ2n;vnwz+el{qKcf7W=<13A7MDe z&p~oY@O=8_xv$NRTKIT>la6Y3<0%j<_p812M)N0MVOW{65BQ$Dhy9Oz-~RQ+XI6bm zc}7Y~EF}t@QMM(PHXXTlXu46B#IZpbsRp(-9r;-Do&D$ArTOFR126B7d3{+x0 zmKy|{j|G=b%j@%XaJ{|UmPV;R9*jcDyjeRWp_-r;BTo8Dq0<3 zFgmKUfdSwv?r9@U#Z*!y@ek1=I^hZav2ZqB#g(j`US6Ece^A5E&5PK&9 zF@;xEukp2GVisI8J20PKO_n!LszkP$(g-q7`PVP|fjgp3_2_(Z3{S3h9oAtvYpS+w zxN@TlG_{+E)qDGw9kEHYhDwj4D;H*|?*VYDvLCo!_o2zEE33YJ4}uzNFwc;3vL5Ts z4>u(`KgjlYS%CGSXw>B|yAcGBJC&%<@6Stj&i21dal&Gqw-gghpN;hk(1Rk}&~-rCEt2r(XObRx;|RI|_L2gpEg zug|$g0bmc$+usv1N;?+tMw-H*3~&UKnvh8LUyQY@lU{mTo&>)U3dBi~z4wIJ+zCkKMOk~>E@IAL@iW;{zix-2!FN}RC>9Z@7>RKfqZ53nu=Iw(w3&@bC5{SG zQJRzdh}CBWH_xg|eYyM;tA9KH@<@Q?irTyi9ojkx$a}NuZ55787eyCE!4Q&p zj0cKr@yLv&t966FAJFec)XU*5xf1d-1sWI09t+I4Aymc)nyO^gINL5?t44bI(WzIa zcWsB?VS-16Dy~=(m)c$Orppd%=)4ZVSe<#PClL2RWWSRey`#laInsvaq#KtwJ~of> z9E1K13zaFkfzYaIAps}Wim`^80WI3&WdOP_bkcLC&|+t¨`>s*BFZcE<(n{ zMJ}BFnl^X1Jio!gXBS*A>YTRfEo9Iz5DtRt|M%6dVSn18+2o%%0w~KJ+7o=v4X+0kjv}iaI zjt<*?_WpsT@v4(>_O6;BbXt{K@@E}jI_Bun5_1&SbR(YPIuBh5>i%t&0SD~OH_}bw z8Fm;*v%`<*Jy+J~AHZ|h)f(`Q*baxsCxXv1rcNQK_jIm^M&m#lwIRSS7nW5K zbN@DQsw&7epQ>f(o;z!B>b(+OaS)i99Nwh2@M43Q@C|mq=Wrc{8f0$hwvMRq-n0*_`pN3Mk^=U z*u2$M_-{`{)Zvb@|IGr(!t}o}UMy^EaNqC$ zBSxHsnfZUhy?A*U0cldopp4((*tHg%zfX;|z~IA;)gmmC!Cy1gUCwB=kL(ewe>-Zj z-1x-{=@}B!6;w8=mcD$E^`x|n?pd5ibzMNEwxf<-Ks*T1p1CAZ2+0p?zX+!PGgsU| z8`E$2uCKB3cWIgiBHL^r49A~#ZYShz&_mcn6Jlx+EyS8bi8v~6AK-)ipS=3R4;4~z zm;mz{3W>PfyqwN9o-Q^{r^xidetm%a`g z*HM0izoqcE zqKSup3(T^(knQkbV9vDNGU%_$M3X}D-K3?eW*oLEuc60acmNmm%j_a=r!djUf2P!b zMyN^&di6_bAH<^tz$65b+ykh+E!i?lWVF9d7Pf0aXkC+$aFoF5AlW(L9Ppp#uiwxA zqY152NVTTncc}o<^}jjRyXi*G>7AqZp>21G(xaB#uKaJ4nF08!5J+CZXOt#~ELM`H zn@vn%fStOQN0@_FqUTE*@+aw?nbU9m@ab!O-+_2 z&yhD-0%glk7O?m1a5Q1RH-@TI1b7I(NrE!x+OKvwv}*_e#~A?C>k50)Oy=>R!)!J1*!Y54#Y#3kL1kR>uakFpltUIt$ZOgQwR*`cz~u?ub_dm133WJ z@8m_K8+%$!4r1a^^l$UUv??>vx1CeP;x%W8ScfoBgzaXa?bcU49rD-YoDZ|ty>o)R zc-%$MPQwnR>XqL_oG+!!@SVvQ1CDzT)%cbpL8vPmlL&=i)^`?#s2-tgf?=NjBX( z&+nodWIgm~{G3ByO|xxNuea9p3~C+`RbQYv#;T6&@Xt!lyII$$qRsuP3a8io&ut*z zXsYp%fK8Z?|Mi-E(3wV+VfaT5y=@N<@W@%?@w@^5A5dRw z+Q)TTx^)F=p7WJlAJCxh;}O~xjlMM5zQcc|?4h&%L~S-BtKn7k2!e)?@Zfj{tj@9~ zu80)lB%XYG#`eLtJ=Ri+m0KJ=C-w5tPPm7(C|%k^TDE z4w8dG!`hP4D&DHfx{i}!CC&5biYyzZ)BV;sj)(={6~SlVbr@D-5WZ4?$Gz-(JUsP& zXbf?;l~x~Gdr2*oIbGRY(1Y2@nuLpBXeXt@I!+Ax+%y%^!tfa%u@eeZ^u4#+WyBqL zO=pkbv3^y++?*?t69Z0BYQn&iN5PAPsU(X?=#6%0e?{W20gH`RirjA#Oh=hTwZw>Fg+Y&W1mnIT*`_PlbY z8pV;dD_|guOSF9}N%4WVYA|!S4SKz#+J{6moG=-Iz5Jxt+@r}9w_hYUh0;Y3cG7pOR3-LAe*sj2ehT^O>4xB(KB+n(o(Br{u zOPka8EoO7+bhtO~#@+81(FZc9|OnuXO^8NiOU%(^#{RGF$Zk z5EyW2vnZP8$3s=@KNdbov<#1k{DJac=a9Z&dl;O9SqdI!lIJT$7=bUroT{)bt_t}1 z<<1HU1%zgorC?~+gwP=@H{1SNQ|r;LZY=xhHUt=a@MK^ts`2v*E!icuhPLa58Jv3L zR#&R-jJn^Rr9z;r?k~`-#y0$GdglwlchEwf2xz89T_p~5d4rcT$8Na6Eca3xGHF((&7Oc%%)>Wh zGEdgiH$URXbhb*44g zHaK_3Pox^ex7wQW*qcK=xH~oE*A}1XF*3>mEFXK8G!d8=&6D3~8&F?kuYnH?yTj#Z z0lqusF;^@jf7qwQrtB8)ljASjveuYMau-DvY=4nyMUKMNiW-z_V@w^1HT3-Vmm+uq zZlR?#42zH14Ij#k1Bxhp-_|m6*~Mmmm%S9-O#(m&#{IsX6JGO8=tq3oG){!77yd7x znLNyYlX(G!k)xZnKsMw)Uc>l6&#Bg)#1l=G{Z2LZJQqI=#C*!Ct$Z4Py{OfQ`&`=} zQnjWR{;%KVsVI-OU_C)%&{ubbEVbOgHf?U#$Pq&Kv*2b%i0iR0X`1K_`-rII5|M~5 z2!$@JizeyulRlO$^+rYRb&6n;7y-3vAT~|j?yt;Uop5~vkX|WysfcV`%{rSGS~ z!6RS=o%@Cj;M~JydYGR6tRwQs@4ZNVNwe-lN|CdHX{slCB-1*omX(%HM>w(Kg0WLV zB?3(HT6;ZuUE^A0mK%UF&?3^)rawc+YN$u{i|wQ>LyH-(y0insk@BUw{B&gB;CeRV z><(ncGuIdcK6MMx?5*^jr@81%@_WLg5eXoCyxkSmgKloIXPD>y>LK{I320*E(*q44S1+8=TnPvY;oq%RFF4 z)SNd6ij# ztSO{*4;OHl;}U%pYo2H>f%v-h>y1N(&{KMyEdUf=gTdWAH^cKV|5@8k zZZo$tN3j+2D>-Y$oRjisNqFLxP8|@jGPw}}44As*Wi={k8*yUoSjo#f!LCNn z&va?Jwj4(?DGFeL{^)q}M8)x&IM%Sbd5w9^Z{`aLz=6-_w+rv(jZiQ&Gw|a^cy)=P5|erz8Y4{r2_6EHLWJNh zQ5n}avkskL|0&pS+O&2p)(!=hNNuR^Xr;HF)G}(VNygYe+78u!ZCGWhq=d@ueP6wE z+x>rDLeztfq{aH|7{L73%g9=2aume=-kvF1#J^@#M$f~Ejx$c;t zgIMH_gD?HsGe9=3KIum&Uj_EwvJD`^Y}1YQG4oJ2Ga;Y3-MQ3^9~Dd_`YlHzWa+Nr;%*C!V5vj z))wKuLBB;dA{l@kBnmWs?u=RjsYdJfCT`6*LY1l-InL>$ctmNE+Mo-pECVPq7wX8O zU@^I%AmFHn=R}{BHe5FAN%-oOHu|PP$i#U$79&;nJ|VFWp+T z;0dsVkQzS%`nbi~vsogaNNBi+1quxl(_DtK{LPHUBGjWKEr1wvf^2og*b%LMKul~% zAE~-QDp^$JVj*b=V)xDAx-|vSi>M0Aj`%Nx-#)>0id}4~P=yd!F=qO0&Er`sTlsLi z-S6B%jb_oyJbx!Jl7>G+gijhPlkO@R&EwlsDUY_Mjz?dd-?q&4^?UOwr_Fn~+d7?& z0P4!n4>DyX=|ETR-xqv1`37gyFip2o#8w^?|1u?0#7R_FCuJc)w}SBp|HPu$594<} zIe@az4K36^huyD4eVKXc2M}cTg1}XMue#cHDm<=ug+G@#`ale?Q=gfh3PB21`b10I=< zdPMdNnr`QBpuxQ<&k!dar^`7p9XCu-o$bZc!M0`HN01~D)l5bfHzPrUDPsg+tDCBw z6yBz?Et1o>qr&IkpwkHU2!SdVmCy<)BDG-!8sc#Pr_c^ZpfnmQDhG`!Hn<%onCHDA zAnt)51;|P#KG3SWyQa7EOcD&AEXTd*5MHJb;gGfy8^E6=O#zI@zmwPW?w%99KL)E* z3UwW-pb27-9;I?GqoIEOr6y870sRBgFb;+&iagwhspJy+Qx+znK)xU$LYxfCRMS3x z*iL;DK1Js0CemGX0)rQFMx_amyz$plf4R!g49G$`Q}7ws$rwy;Z9c0pPw*rf*!;dn z-ja|^v^a>gaA)oBGUJ3h(m#Qj;5jTZZ_}YsY=y>5`%SrTr?d%hZx*)bOgWMlxWOX0 zZ<%ouIb&QGqq`y1NVBZ^jN=}ox&Nt9$5M{eRl0OeI4ubvnv_H%wW1+Y48XB$kju)$ z1g=3ULAYrTwO51t>zo-H8%Htn^!@6pdB%ns2=*O@t@p_oBU+PdNx-!oBGm|@J6jIlL5X9sDyJJ=T89wkW&bOlsY+4CBK(1XNwzmOPKOw<kJhu<@m&woZ~_$u$Tfp6drEy!^0ZD2G(hW z!R4ahm|CXVKdCmZ(-9A2$p2!Cx>m%X4e21KUjJw7e*$pIl4!>~hEuA3HyldEZ!P;M7=?~K zBbWVM)AH($5Xp;ZeVJv78oq*908ARM@zMChgOe14CeT^q5DkhX7L90TEOGJ3{no6& z$KoYi#{6seQtT+)uX*F5L*bk@);OFKUECAqbU(0C;)5*!{=;`Y^6rB0My~slbrQE! z+Mj&d`{(q*6J&C+-zmJXK~cU=S9`Sp{%^1_B@)wWG zW#!q2S^FOo2z-e#zvQo))zq^OQlxGv+=chHN=`e7jOx$b?Wnl=tgH$dPO;{kyza`% z5cvx88^<^mAdFx6%APrW)?v~Pj+@EuG}jjwq413Dn^-bPt}=9z2iAb#ilrIh*-&3| zx@_+hg1J6X-Y-Qe{E1sV8K5_3s&Q=MdP!8wh{jm%-CSJcb>Uc2|1uFP+Q*q2x87Q6 z>s}fbI^G(K54HcQ%I=iB0HXc){lh`@?i3-00K~H`AKyq+2Nazfr+}}M;?)w8i0u*4 zzw&{6Bah{{40HZ1e%KATUW5rLC7gM>3+TvtP{uDmSLe5(#!9R$9iaXz=g&qWMrDG} zJd{zjYpf|fAeSA30Q;+jP3UNjZ2iZ6AR|HU+LdFN&-HX+ zwU01Pq4&~!Rz0(u{TRo112EPzYg+>%&JWp$06p>(r^zPcULq0z z;pp81{ZesR@om+K<4Ok(#XPnW6mayM3fIge#*}36{Ixu+XxD#9#VrH#>cm!XF~%u0-?&28($y&sIah)t?iAhU=?RS*02fuXgTNO%H3NnRLBSlfeKV9sduS zB0L-%{rWf9U!h)qIOL4nsn(M;6)wa;{@NHK8BtscgzG)rnZ*IwS68to^;7Fg9q9e%?OC(p2U&;`pqeoEsvq9P)YfoN+EMM#!^ehu zUdw@DS^E<*@T;S-XeJcfRiDaS>INWi(>2yBtvb#1-W{1Vb;Kku#l^zF9TNnRPQ zM+ueld56oUlEMzqY~biywsfG-`kCe}E@>F8yTQ85X!Bg|+T*~ba@Mp|avH=PSzSi; z$G<0s`=s2vJV$@?GVmMdWr)plH=XBq9n~@uTskBV+%!|wpqZWRX?MH+3$Fx2YO15x z+Tp;{4k0$RYrrA&GVwQcw(hyZ*^;pvd6+8p%^-- zG#OJo!{rmWo=8(B^&i}CX$i~?I6 zPEKkS_^z#!$ik<}dA7l977)~hD}NRj7NiYXXE{1&wT8&to~?j~m8We_pAw=l+HAXG z|8ds2EnY;KH`cxC;qPDtU-*2wDMk)rl81T(NH{h=LFEigGYVl_HNxb>1_c8{j%0Yz zunZdhtHWIKj3H!Df*CA_0-;*+k`bjtj`c-x^!DO}MgO!zg30&kEFFzK91pAO_51TbT+RBok)1 zK$X84bNN;yjK!lLBI;j>;ovs%$Vev^g-nhgXMXyKx?PVHT%n|}=vaHFIAGv!)teWj zVuD)rJpJRig*nl+Ox~$d6M8RAl}rHM6&?w(o{8nTh3VQGhjLdf24P7EXxwNSWRlC8 z4W2|o*X+~5A>a6SjXd7ShSawWNt5OuRZda;+&U8Iw|WpRJp1kL){nv z(<8{4oT;e$iik}MF*iD<%WZ(86iZ$gEZPdXaMJn8oo>*yb8_JY(`59=#0iWM*h(RO zKj*r@Q^&I8kSYBV*K{rklW>cRWW@8--~|lNSj2R&bFpj#W^n)9bcQ`iU-xX}v%~hD5Hd(ENcan)l<@5arAi_DMn!{F> zG>-ZqY})|TgbYB#2+y_`n$R4rcWl;;k7k(2EcyLZ-XATSAW&nx6bzL?xK?7Y54b#K zjKByOVEsF}+*yOXRw2W!IDc3qx&fD# z~h%@Yv?%_`~$&_226} zemE$(k)+^)=oK&`V7zu^`VZ@w+N%vHLeTXM#rT-RX~^z}X)wOPPURP+7N~aFPB?C9 zY90>XkJ(@w7{TuT)W%S*H*ggp9I47JV7Z>apzZdmhi{hdT4%OBcn1h8U-y?a%X&!k(WkQ}IG5t6qvfZZcD|em?=SdKUo08TbUI6W*K#|Kg<58;U{lpq zlil17-s>tir&3kVHQ9yQj#m^_Ivq{w$#%pcVx}N5X^{idhTF^y?;;|X*l8m3J4x@P zz6BIEB$V`uUEniVH4iZV3vE$a_36caG7)R=lW92_V*#H`$4eV$Uw`h~UnBE8({|;4_X}gHO zb3N5ffMlXNzaU{lb zN}sf<)@`F{4`jnk|DYT7gp|1pgmgjbu+&{1Q@AgS#<5>NcFJIi!zP;y@g`ph0u10EyjEwGxeBSO9a;L&IuxMP|A+ z3zJnJj;;t0@Cpj?gB{<_YLTk#sqA0Fb2m7UOqi1$3X@*C3PH+W%F zz<~=?*q_sX$wj&IXuxa9i<^y^Vvl2zs>~#;?oA4XH>hrtUA|zTCy{z}#V~Jd#Zf<*RHr7Qk`n0K_56zDoJ|Rt>YlhBz<*$0RMhFB4ufZ2uZ0M&qH&JiLJINg{ELeG z*cMNce_%v8iv}B=)Q{RUZN>x#{WXo{na<*?9UT<(fjtlfWHmej{J-S3_psOubof9Vq_B9Kj-H^IIz$7J*gsQfmMV` z3<0H6t_|%W?l~Mg>Xj_Jg8Tkk9-ulX@T;SM&Y-ksP?P%}uZdSDF?vB^oB=Nx9uo3U z|3A1tz~SUm&3`khCbF%-rv$qNFz+h8I18W>N$t(I`hky`NO#!E^GC2hp{R~~44 z-U(85?Q*x@mJPVRc&htFoISCpRO6m1`SU%Az>n?zlCD6N>E znbj22wXt$rD16Kr2`aav3%h0B0f6ukRx!%Rn~CGmh0|kT`U$1_*1%nM=`*;%puR>ikE$Ig`X`{7huU5^+>iFIGxVan76fqB{-wWf>r6S}J-0sr4 zF%4NL+GX0O-^1?vcx4ppQ_=)0V%%F^4TGMqrF!{jdf`q;qk3MRz8lTGD!*adRMBn{ zI$W6a)3poGtC7YmF2{u>>5uCI*N&j&KoH@D?8#3vE!Ljr-D33U2EYw(nd70p8U^oS zli1m22`@UFt-}>v`TS=>V7vIQs}sb&CUQ#;PQ(uL_1kHqIDD1sTE zpt=53&2q$v-0fKzvVvLFi8 z7MdJWRdRWsq&yvtEFVkt_Pa=Sq2c{D6K2}uc@l%Y@X8)dwp0C?tVBkBe?d1_kTmFx zGF%XeL3l*l$`0$XkRDuj>ttqSOo=xm5fVJgxXM$!cXxRGor@{=jV z<*ifMKD*fANp(XIHmq$x`-9z_BB-LqEhG@tAj{HgmozXh4&T2T)kqXr2>zq?yh_g# zO<(!Nq>2B%cE?pg?>z%>-VtBfmUjshDlpNojoMBN{~_ohRw6t0<+8>>_Y2ceGWf^a z5on5#n1h;iK3J6`oyQ0^Mf?FhOAjwfHHLF3o+SCh{8Kq`-CY>q{JzNaJPIWFE&o9h z&c3pE09>HS^lM2bpPFUdh`-jC&wm4vEcBes|5IFXD4c_8&q{gM{Tyj;lVK%egF91UkiMO~of^Rq+BFnW}-vWAX!}f%EnwlfQzmWp0SBbQr5ewp{ zg&K3S1dy(5lAHpl-2}^Cw^rl1qYe&-2Z&XFR4QHfagq6MQOz|5>4;oL8JwVf^|u$sn5irn`i11+Fhu z;J-#{W}N{PK!Am4r4wCDaQf60It5?oHtW3i&B4rW-87Fo>k{p-B4a_84-8!<*4C@1@$GN zx%UNWWZw+wrDjHt@))$%$uiyjI(szu2$nNYLa7Ig%uW*eh#BHVC{r2$7y>iY&Jq&D z2e|8e!AfaSd)XR0I&6QbYZT++r8W<5nvN9-vIS*4!6`rS)x73J0V(88WsWOBb=Bsj<5e2I*f7Eb`~aq>0nWb|P~$+#@Qho|@0TA`uJ>VL@< z;zntlIoT2x&%q-Ox5|x=Q(;LoB_D)i{1P07l#(%1iiP)iy}`rqH+@J5n4QHQIC%iD z1TSaohrt;#R;f1AUD)MrPPfi%Th#N0(-S+ zU{)A~8YSX7Itb%ki5)c9@G~)lqb(NPq>fkmpOr zlxDLF?h=;(mC{5-NF0FYkoZd4F1q>_e;cD$sO*{kHv{|08Bwe9?If zy=e8+u%2^h(ebI>8$Lr=c1F=xRVKP z(xjo4Gv*t`U0`U=FZ^%B&}a`}GG2=!=u{t;uOL!eflyqb8ntwkkYo9?ALmS8y5(cy zpB0d^MW_+>k9dK}@J`CCS+0`y%&z#$Eg@)!TzP*F~9n%Pk5jTYk zh9LbN!MD?5ik!P#Xo4ExTd~?MZJ%c(zZbE)1pgBI;BUrMzT;L-$5-~y{1&I}d55^S zH`4>3=D=f36{5!JK&)vOv+(k0!zIfOjuB1oW01RccuoY6=5}`SW|ZNmgfGgs?mupC zYfeu7TOmZmD&gj|mD=uZ%ldR)HsRnbWy|0dIfQqR7?)p(ipnJ*9+g-B)~}^~cX5vp zRQ&kWZDG%C`7^9+XOCqx3(bGEOo%4+lx};(l;U#+p+g%RlK#2%X1Fd_a=GY-&)5L7 zpQT1@A=yXds8u0sb~fudD{c1s{yBx^W_f_(W%S&QlL{Ok( zn@kY+TV`~pEYAZl2m;N5)x3&sP)|VM_;#=keJ|@z)3x_?v}9Y`j<3I%8-y`QxxcV+&CL}$!+H-{F%gu_qCQGD=3MZB<-jTs)(_8IC@Gv zs`2kU$Q|vOnf{9NwEj1Ka>|bMMbL`*TQY0YE?%*zEQ2YFK9Qm>Lsx&kP?r4iX zTtEXNR!E;qK95}C>?8K$ZQkA~qEw83$`BH;rpe%bdYqAA9!e;YT!;Ku;QqzO_wIi0 zFnrnieAS1~i<=uuUy|Et$g<|x!pRj$&w%taJcX2$%+ZZalaN?fFO>r23z$SUWZG8sY%H@}!oIv;kDmv{1RKKpD+Uq-U(Lej%kR6R|1*i` z%dEiY$Dh{)c%itu1@PPm^!F?XA$4;2*tfowc7VwCY}kqLT8Kr5md&qdsvc)u_K=3{ z9ie~s*q7Q*oVz${SW|MVTYUTQu&cT~~L+*rHXTjcn}X2aH5|rl^`GPe^r!v5W|+ z8UK&mg%+N*i}4k-U}&^I+D1gQd1k%2fXtvs45 zuR|C0xZ{_PAz%@P1GWbpyb3b24grc$V-21UXkzM_^8s^*h3*Zw9hfYr1VV(|gobZj zES5IeA3!#U!AC)OV3G|;>)h-}9GFyEG>+7s$Y`>bp_H#xHEuqgSFH)4=_E;U`zxZO2HXeWr>wX zCtH*)ysL(jBF(wH<4IMIFqkFb_d@$9vz*b~9WSPp{WfIMU@>L_Nl&%1?i4?}fDFjT zdgcM1h!x~uIseq$YXtI~R}5Hot)H$s?!bV22QW@grQv|W7!K7W&=4EdXN4hEcvFh_ zp6tVa+&O}N5>rFFy1414K>`OrWbp8FtpmTwd6d%iw@;il(lByB>no9WD+E#b>(eh1 zN6}r#!B6nUgdWc|O9wF7A;V;0xK|8`3_GfnW<|z6uS>b8wi&re8m-V@v~$*=b3_KD&@ zLp-9X>SVR72b^b85UIV%Rf|b?xaeTiu*(|6BUHZdR8n>gt}8G7!dU9mH3+7U+!&k^ zbQ&a`;V?~^zNpcn8puRL^4%{3*I=wPtqzG#X_xVuHV+s8KC0Lh;pK!s_*K`812Dv$ z1q;TaL+yhRDVya>#hzG#f<3Prw|2A{fLfh#B?o$+S@`fHKvtX~PS3Fp@oBuQT_@X4)g0VbC+e(__i|qegtKz4#}40kKX{ zs63DZr#3R-3{LI=P3}kUN3(N48Zb~{AucLqCXZZb$#X~-`A{gSgW*)0SPi_;*9{CS z5%BzqQUHJ8qUWD=>73r`s|0AJe!P_P7nA#y<59q%@lpIVtN1QA5DN-JTu-iCWYuf z)*VkNgI$^Zqo0c(J-ZWI3AkqXh4te+gfLS3CBQhVu)n$y!Lzb#Z+SIOoNZ<>f<1BaQzr0 z`~__E&V=H+jF!I6ks%NIv)fp9pAcKL-}Alhi>==>!>>11IV9mZh-D^eWvv#RurFnM z*9H9h+HcRjSZk_Mlga_e*n)&Cb3fvkev`~HM$Gc7LMkj2L`}v3cXcv-p{elW^-^-> znhFg$oBeaY0LRQf0kGs-VQ!U2ZN$YC{PQ@NxRTg&PE~VU)iRa zQx46WQ}xziet-ocxcs~v^Yub9W^;>4)H|HSVGC9>&pR?3W)~4|4zWyY=c{PoV^ab{ zQleinlbe0q7!Gu(I7I-eIK|65slRy5KC2qo;8Rz__C#9#O!id4A^P*AY zKuSR_W2}%~uVWC_`-_|FW$W*5=uWz#_^9!roSxNdz@U4;!cB5hd+NEqqfHfWe_8;el>UZtc`m^f_z*KduS3de3 zi#+vhJb>jH`Oxxf&jNa4($rK9Rz!n9%`g5f`% zmCT16k~sA$+wPnF7*EDf`(IPMVxa?6u3u30ztqgg)v%^$aEAH$+Ox}_DvAR7CRGFD zzl66Vv-|{4>k{o>5QV>y93z4%o?oi0A5e8 z=ZoRa@i%YI-w)Cjl?R9oPXEa(9k2erg&{I-F=Y$E*E_x{{L|=!I+Mp3`(@UYo2m>I z^vdhy^k(Q}zvZD-z{$o5$T95nI2KK*=`=R&U0oxd5)Pn8Gt@Gj45>&*&8PPlOepBl zU##!iuU2U;x-ORW>TPv~h^qji@5uaG@0}8*nG)q|IOV#^8bn9?Z@1(Bu$@tFpFWjl z%&M1tV~*2MSaft}^MB;v;w!@+O2>^PtBrip2@jVjC7R53E_?Z5522x@7V)W~Ij{PT zs9Zz_`HjL2Vffv|?Nc#S$Q#wPJj&P;L!`Ej3p=ng29`I)pBGPFPelP{J;Xwe99^6j zMHveQiu-Hyf-CkKw~FCcayOaX;yH_DF?PmGYy~HdfKc zH_D#!-(xD+%G*_b&8aH;62R3XnH2LyIfA>4M+rJ2ASB!?WTMQz$LbphGuKc$bRVnRr9eb-ggRteoU zH7uyn+8f}@+obh(0)vuwWVmaZms`H>?&U$anqI6S~2UkNMp_w60KaTA?@@DIr08@7jwZf zlG}Kjnk_;XL#qO$rOi93Xf$oPfg&6=gHfv_z|!){uK_#NxhdCB<*9mA?E-~tBW@})YD?Yz&8z`PDz7$LV{W4qY(#@ns|ueM z4L`C@lT-4CeGmrT^Dko_iy&$f6D2Z78_J9W?rv(Dda|b`mk_v3tiA#W?qlsJ_ZVEAwv=}tqVrAb?-{Flr6gM%|rtRnPvxf(HS+gy&Jej zxijRJNv8*-NaOZG*-YX}mU{1cwm?iAh1Y;%)`7M66@E7%4t=8?ii*|#2^uf|pfr_W z|HfLS$trH&EoM62Fp^weT{KrMh8QXw*#)O2H)$pF=-v_Cu7Fdhsw(HTzRM>dC=Nn6 z1U^EvM}SMc;Xno>MoKaN_m6d3s!s+BD3w0)^11`=5kP#gjbl}4Ms?h9_PW-AptzPY zQVXCzb@Y&9fZg&wG0gFu?CeckZl=9DgK^o?^fm`n`i>T#5W|^KSUtT{WZ|KD6hPkb z@>?HTZaO?1fgpnHa14?0T8G5a!CEFG(!=JDTac}O;*}J1Ezx(V~5!9 zk`qLYL^ncdUO#9sow zr0~)M`z^reprE)Ro@#-9VADS47&bg(J_Sv^ng-~a%mYW2DZ)c)i-q3cvXaJ=JUi-2 zuc)B4*`k(t&VU^Bh@NzXN*yX@Xf^5@F5@eIt1?G@EIrzxyQ@QOv}4hK9?5uTEKTC` zfSk(uu|t<0k~2zShcARJdd${d)FlEi$9^0?WZ?z8LsVHq|yhu=gFt6Fxrx6Cv& zpcbPb>oZCiAfFEE+j!m?G$V5 zRnGjNZWJqSC9v|JfeBTTFUtd<0F>9*Ep8M@si3G`6y#@p+Y9+Zm*{FadwK^VtUDtQ zy^A^oTiZT<+cHOPOuUKVcFqc`jI_uG3DM+oUlml+a@qYrfGUCawQ@Lz_Aiz#I((no z2bz)1d2iIRW<$}b%e^q~QmYQx$POoG<`kl)(~t>Sv9cVv&QccjX8QmL?(d#iA;1F>56h|FBce0`TUOPHVUR8OeVI31A9D`#C!K?Z3QLmXRIa z;lvuAQ=d1Sn_WJ;q2j>!Gl-v#ID9$ofLUGV+A}>cpvZtv;XyeSTGoWCUoPdPwx{IK z53rK+sCAlr7+owc99aNdbeRBf$?xkU?zVM*?9I<~YmORjzr91M%V%!UH$9&m_j6a` zKU^}9qPDc1GamDOb(?{oQ=T?A)J44JP-ciN42UQaMnS5D+O}fv(AXC8_(F|+J#YPrc+K+!G}TV~1!B zV2rWeo-vC*?l1*9`?cM}L9Ve~@UH`7Cu;~Ehd8GX$YKGY(c9AapY)`H0dMUt)~gi+ zYVBdXu-yVb9jS!%174ClERU&jn2(@Cq&=;A!_0EeI4OJqN>~1obR#pM;|U#@qolUU zb!!fR_`T;(Qg?u?#XU}pa>_|Dzj2FdYy-Ao8JT{IM4|Y3jREJ$Z>pl-ZejEOl~^LG z=sFO*ix_X8#0;RTUZR-5C+E5>p!_3C1R2aXj%M*wSfS)!LC-Wb4s&|Kw+Yw^jKz>L zqAh&VBHJHF%rD~dpgfz?wX(NLnSSp3RCxh-SDDnL6i@(1K<~f44#X=K8P5o@@H$h0 zVNfsxp4<&84)qIk3@{%lC;cm2k+)B2S-!DP=*=Ux9pvj&x;KByVSPTEG`wPFm_Wav z^k6~$dI1~%QeB>J@GKKNSWv&dSmnR$!dz*+w`v5ZeH7SMp6h;)YX;n*2f zC`6(M?_B`-Q`5U7gG;gF=yt2JB{_$C1jZ=A$x7Zr8E&zXIC`i)WjF5_+(DrPGiaCyKmhC8UhX+3t>E;-6LSk&NqWQvlI& z+}Bq3v2g$AM8e0}c^dmpmzg3^a3|Cf5QW!QI+bc8c z)Ex${q;rk4v~Q<7vaeA%PvQMyV$>vjSigC4-3RxH3@Dg>VSLwKEo%M!+f8}Rvv|* z^R#z&)64ZVGZQewN`Tw!{XRAN_0IL4p5R9RsbSN&cy8e|?P(VOuPbEZ^~(uT(hP2a zS2>!rsPWwGNth^9Pac5tJG2}?2ErkiR)ndJN$Hp1F!6bip-Y10h@rOgb$IcQ5zF8l z-DI}^y2Kz?6LC{1m?6qVa6EL|PqA1h#bV1DgUu|7l^RnKxa?+KZ@rPlz5rJ3bQ*Qc zII1UB6LMeWsrt2E6U!|IXN&~;jxw>_1$b%O*(-QO%=-rEicGVFGC=&g!c zX3%eOQxb)T9>uuyOrdd16Zn=q`Z#p?X|VI_;(9wh-<)i`-Oc&=nD%z3?8h+#S4Rnc zGq2f7?o{<6huS&%MJWeUyocx!zoxM{o232+v^~a*OX;|((C&ez`=I01vNiiO>uIt| z$~$OY@;7xS3})*&e4__obh@xj|8)6kxHTosw{gna9fULr@pg7yhEW`UsLL-Wk^r^0 zF)Tu1CJQHiF>cQn9IGRzo6AdC)zrG)H8Hr>S08PrRhUGc-1{JQ-Nv2G`F^a_mF| zHXGKkR??}Ptb|IW7FF41pMCkBu{b4Q^Pqwqhc@9UgNZL7bWlpsOw18pHMl^Zj_v4- z=735HwECOgCCX_QRfGyK2DvivWtLIdm9u+nX?A_941C-pEmuz1y4h6`DRyZM)e@}( z8O($x#)!2@^*RPn8vQ8Z0D+N;95izn@VDz94T2a;Ob)qYk{O^SE9^l7AygP3RzKQ1?R6;-6P&m)o~ zu0{oO9D)P9(L+5%hGix{(e`p0;OV6^>xZN>))=Yk{nM;_^~1r1DQK6|##u7kO|X%C zc=`86Qot+g+C93y`6D?6Ttp$*NP{O9o2OsaC}krE)-d=@%RtfKLGR#OhygGgbW%G% zJsZHlAuR5-&87E7_*Z@5ITIN+eGt|aH=?|*1GWKa>);%!`iM56Y^*=}Su3N>tv9x# z9n?$Hx4Hgf7kM4s<;t^ujq7FQUw3P5J#C1Nx}+odngO{vzpP7p4g;zSh5yKUO~zaEuFrL&@W&1!>^Y6<5a}jT`Tn-^ao9sT4*)ka8dRsn$gwFLuapf)_ zQ@9t)k_UDnzUg$RVdM|J^8w`#AfdoT;XkY)hcOGnV3;B>xzm%2fP;)6tbd(>!%hb} z5pvXkF_DRaMOb(2bBqK|-ehA&^a*9+Qf#auKo~Mn*zmbGgZKzq#6yXdJm>!A^*{kk z)K`H5k^9`qC{J4SUBFlg1VU z=^%*~jem8nce#Z`q7ApL`@2wt2U9d(35#7vSOv<0ABlGI$pq2TgUbqHQ)4R>G;wn0 zdjL*_ivJp-AbBrT8iI4fN>QA&hr9-G;{j3-330t80l~&-`~e2KAtfzIRM-L+Jet>S zJsvTJ3J-86yHXo7W#K9vB@!2c^A|Ljx!{u$YKtD|k9rA1F8x|QW(EUq9BjhF6LcKg zr-&{WAHDK)C9LFe$lg0*Vnf)vbnw0MHbda4Ojn6=QtzaQ667N%M)$gvX#oNxy+R=6 zHj$CAg&wM=HweNt)#qWN=2dtZ2~HGfkc-N(Hyc`gU3t8RHRG0T=8FgFbWW)aDCP(j zJ(Ee47ehla#So=WS4YKlMPZ|ZdK8mc?F3*Fv4p5gJXF4N&l$>w@-h`8tBAwv>}4ZB zSjv)m-lX>MBipKM0WcR-#03FIaT0o<8nC~8U+n28IURNU5wfskelCAId$~dg%={#N89tqCMd0}O zhu+f%p{Yur-M}{efdqS1zkB}TUXmwaF%^Q>H)O3#8V-o5&y)BLmFEOJ0);;NE{aUZ zxkzG72P)SHlkf8y0O_Vxc}n6}h%^yy$^X%qDs{tb3@9`_pQop$V%(23c8{mQuNt#) zJAg%1`9}^}VvPY8xzfjwCs60z@p?JGx_hOdM};`k0Rx8gO>K{3L`H69I9WmDN}ZVW z?p26CtL@6<453|{!<3S%L8#UclMA`=UO?cgr%_eB$`^WN=lv8qh!S~m1ZH>Ynea^* zrYRjB-%0Tm7m~8*7@6}qj~Dx;zr>`{tf7MWr&I#D@%a`2EcftgkTzQS9}oDX6j&tf z&I=SA@Xr{*dPpdAMqH1n=KX#npKJ361vVgV4JH~03@#HV0yPOQgSAQRk+a8gKT2K+G zFL^Lh9$Y^)RIh$|yDQ*6=m5c<5i|J1`=ZRAO>2qwxX4zJ`Wrdy+xhL`^Y8I+#*eh= zP~X$*^6_xis$H_?0J{wA%+9CJH@{AS_px#=c41R`E(@2++j!%;Iir|3ONhkDOO=l^ z;DEd|7(1u<LY6*pU?$9jG`5~&cpV~a|PF7xlntTK-j0Yg#Eqs7(aFyI(KyoV= zER$P;o4o(f<@%;RTlC7iIBq*z=mf3+TYJ*1j%O??HLbYu_xggLCt+Gc3z4E15ZUN@ zs3r7!uUe_0IK``--knpXHzf2Av(v?%zJV*voV8u6X;&!*3$=NIx~fV>y~o;LyT4zZl09Ts=_=a!C{JS(R<;M|$1DNmFyh z^}|j*F^1CE7x!gGk8J;{X0Zf2rmA*!@11D4f>G;9y@M-)Aw$`gjfN)c!EVx>{ zGAHZj9HoH9BIO-4eNq)HHXDE5FoHxwq}i@!g)Rvv5vsm%f^@TB>LsCvJ+5uZ6gy;> zOC71R;s7~K37FS~C-P64YrGCps-bk$TRG~z!J6NYz_rBZIE((D3Dln$mk~kVF)Y0@l|e3x zCer~zdKDcS@{|2er_K%-BN&)TX7maXDnZ~ruCvyXNyPu3h67SNRVUz@r0#>T9GbO{ z=99|feWt`J-*{xf14rdH46@WaRUO3T;D*;9FZ?+r=ctyii|+vU5QOOy$KK5OzJjOX zAIStNz09JQ2v7hGlE(&Y1tZaK5puC|?PLbgz$pV;QqhhroEyI0apZc%ut`t!>3l3L zy23gL2L;?CWB~LwFT0s-*?xQ+P#;^P@7*|7uAi=Wvk=8T$ojM{vNPsfP4q2m0Dmk4 zNpSx(jyHlX2@x$_ixvm8SC5uhgdyl3rZ-9`Q#i+YOAkzRI3oM=bWZn_nSW5=S^Lm) zIPjMMJU_ggb{bC4Jr=^CTeq_*pS~PYXJ)*8!?-pFdI0!E$sj$Ea%C8nbbD2vcp>PJ zOZ=Hj3w9}$T^4iVftBDo^bLko02MwFb$l1|*rcs6Rz>~6+BSr7(4b=w5_=Z-Z~4M@ z^2uislk_sI^;2rW@Q?9?tQMIeq4EK`&{2*7L`)}}zfi6Lxbp@&I`wXwXk+EP9@)%LaKtdom1zzbtJ=2BwyI2Rzy4P5aOOJr%;fl%*zZg4aM| z?a(EZL$)hKNO)}#Mkdv1_B_dmRcu5Jp%cDE&11)V4<>BKFc`&at|-kFu^Xa{miZIb zYz%6NzmFAzGYD)i@%Z%9I^{$)VWv2yT}38x=mDLrz)Q}MnrtiOkk+vTSELmC?W!Iq z3s%E1_znm}Vp>e|W&*cSuJtfu`<=8pH@h3q9!X-@%Q?^q zCY=+;Tqc<@R?qV^$3BDi(Vpc&0c4N`(&_Xw}mlCz~!Ljcv0& zs(=(n_dm$JnO7T?o{}eK7Iw`wYNCRE78D5Lq1kUA+&BH?vr_N@IF;O=kcJ z=7F=^S;xVq$Z8{KUK76=T(Yl21sd3?3FM8aO%Jwl>@{+7`i8pX8y3jR$)82i86*?`@1 z#9av&d(#xq>xU%&Tz{hxHef7M@Hbq|{b$aoX3+t*w_&r}x|OG-^b9v9iE)>Sdft0@h2?!D=mBXx1;qi>KtD0^KZ}lXE=Tazua%j|3b*pGRi|F+*rrq8h}^F zMAdMM|9~Ox{ji0N!SbU*RW=!_Wm1!4LL>{&%srEUVmX}no5pD`Gm{lScam@5ByN6) zgZHu~-0v1x>Mw#lIBAOw+0u;Mq*-gE{7nPo3Sq%IkPaFHd8Tw@^w+D<2h7D4O!3L+ zhC1yo8j!3IC@4F$%49t*y~-waoOjaOmkn*b;_<6hCML9EToD%hg$ct8cgJ5KiFO7x zZWgrbR|iau`24>1U4d)Bk6z%ycBzOW3uFeOw3i@3Sqyv|Q;T46)YPpgiJt)`SS5E~ zR?DyeU6fd~W=UPXj=1@uoNF@B=y4u|gSZa5O8|c&Qy=E)C-#}|4<9op1|e*{`Bz6q>W^lTa9#IvbT_ishZ z7K?%-Ij|8S2Kb{Wz_QN_+BNg;Omq;24UcQWwr9~WYf*f~n)&?bkTu7&LCS^?9)pat zLCN+fY&&!=+ex9EZNxZgk&3;~lE5!iSbi|#w|92whX%K>MS3a{YQFoRU$t*DfY$jm z-&Z>rVyI;I9TpYpiAT62Uyk&SCpgSoYFn=*aar_b56l*@$f zA2lv#&t{SBqmb?h1^b+V_TTKq6q4$h55ANwipMYiu+Xx62RQ~qClVyBkCiYM`wd#5 z`Kmm-y4a=-)n@mLC<=s(I^2L_qH^j}JD0MYiteD@gTh$jHg-o&*QR0;x_O2}|Z7VOT zI?Yqk0T2g5xzyTDd1)P4ZE{SeyfyUBXnnqR^F>)-w6w$0GxLBexz*FpF%)CBWYa3p zmM6nhV27QgMdry&&Fhd~Qw_cnP}rX(o&3u zGhV$4DR~F8;sHRjqk8Q@M4d9yP?(()W|HoYH!N|C+P+n;lJ+qdwO0?LxR$Zk{XJUS5Xvi@Qz3RTJD#oVuc8>t;t%dD5|LvjvX@2oh+ z3?;NsiCFXXbtUD3q2v)$Sl&YDV^@gw^tM1F>Wu8OgGoTg&E@PmyzSZ05zba%8p5g< z$hFQxBD6iUN0n8%lO>nJh_kc|1$RkPtw4-io=!q8bQ_$Wlg>#OjfN6LhtpsHrjC82UoN&}h(_PMh|1sjU(PAN%H zW*qc9N*&;QZdWYaob5UQCi#^IWlNcig^Ddtkhw)}3LG*Xn)BF5-BxLh*b~O6G48N{ zFl{g$K^5uSiDuBMah%(|?;ly`^3pc1?{mBG6&ET`Hj*=phQ5t6Gayb{aM~ZppQEQO zJxBjj<)7{A>eII0{8S+HM^C3GI4`OftvAEh9T{+)jWH*JE(m;_pD%pjfMB7xG`Fn? z|MynI%$J(W%qO8u^2YIZS|DU`AN7bWE8BAE8+QmuW#oYt{w)OxNFrUuyYSd|`q1P$ z=zSm_C@VA)qd~dPj^G;2{IdJ)PIs91)8JoCsE3bqcO-sbv;eT*rgT(74NOa#Rb8YT zKfVAahp$fs%I0Ke_>S_TU+oZ>m%%Jh)d`%@ z4iA@t0qfL?<+h4~E)iMCj!-%SGO?F^ye6qIzZ%)wj%DHynzrNj8N>VCT}SHtNwO39 z>U?^ZM7J?*%^+&oa~JGg$XB3! z7i13NK|{c%#4_u1HEW&=-B|5dQunMBk9n@Wj9oW zHr-@V#=S#<4kgR_hY)DdAnLY{Lb)?LY=q1g6PICp3bs)B%idwkAETF1?sTZxO-ly+ zvL#HDNV+w39Dj;7e2iK|tSVl3Jq-aQxVi)h@N8Hx9@C0igk)xW0*X~kZD9O@2;VP{tSna|E#q*i)iD6LGU!T> z*Av&_c#w_YHpt|DD`PFosFy9$;!l@O*SbBQ@T|~u7!v;!Sjb%od~a{h8c;Zu#%PdsJ(1t6T-!&4}@;!gWc-Np1SH zzi#E~^<##2OSw2BoVG^z`QiY^bMSq`{rI_56itN7(y#Oi^l-?+VD{I#fcycIJ!&|( zi4jVIs!hAD82_O5m77`t>g@R52rmL>ElDS)J6Olu?960@hpbYz{H<ENmqW;z*GTaOar*|PH~moA^hLhzH>5oi4^$DH+eevS*H(RTkKVf>>a`v8}FHQgp7o_H`KlgXt+@IDlic6SRYECDP+)4Ki{CcS~MU3`z(n4 ze{32o%-pTy_yD>S21i<_74+%Pu&PkqkZJi_d z^8{GA{HK64(BWbU3J~j*(EC6}HQcPK{*Sl3tb7BGH+Tg=kXR+XLJnix8|FssWY2Gj z!q|Is6&iNt!F2y}9UM$bLMQ;EsJ*R~<@81>J+F)gYHfZ1T0+0wg2VNt29VdB$o9BZ zp&$L$x<~o;;s|nO4=XzSAhiJcdEu;3yal>K(xQt_&r9J9d#j)#Y2HYpJ}31{>SY1N zlO5 zDBIkJymsE?>J>Kct!skj9L$52x!*o=?iL5eZEVPreAkq4nuc^8PteI4o9lNW2b7n) z5CO)hUn_EOv8fJqbZgdTl=KBW$*^AF-*TGkL8h$dX+f%gWm-x#34m{(i61}7rd!yY zonLw56`#(Pn8^)Om`&mzku={1#aQyNN@jJVA&1EX|3=%eJqsO1mG2WDnp}GDmt?tC zpypULri5^<|9=3DKytrNFY${K*U+xfh>M5hr5gYm5VRa5h$0hn=S%UpU{D%GSl`rb zc;W!Ctr1UI#&foES`B9O)F|nI70+m~_Nz^S^5+hw zV*il4#SgH0bcER(AXYmhcJ3b zo*yfsBujZ5n8ARM{lT;^^smwk-4UpVe}aAGjCek)E<%_dzGxMAg3JIL}W}n@23&rt{1-o*)d{KJ9xCCF5{qu`i?Tmx^Lvb8^zB~Vo zf8gK!dWwNZR3|I;x>MBky}lbj#<2UzVRQxK7%1?fZbD(9Dn)wP45uERxP>K!`qg5w zJRi=?;RA*Ym;EYKI|0B%PT5*;dFJfM$DcdaDd0F`vGf9N zhQ>UY{Q7iy_T&dYUqGp2iM{`Ls346Qf9p|YQvt}-6(De~s_#1gBods& zy*}IKd3on(_`tnz)>Pmpto#Dtaj695L&Yg|9Xz_`X9%YRK68>_f8}dfHvQ4X^^0px zLs|xIXwh<`v}t`64mV9wISY{m*qL+$Yg6XkL>J6Cv%3$28|=B}^!QF#ic=hCe_j-; z;mmN#_DFD9)vJXMLf=h7j)tIoZWA`LsXsrlN$6z7?QCKk$`%;Y7K=coZ#y7pjwoij z4+0oQMK_cGBgcjt74;C;I;Bz%Sx-BL;VA25`>QA{^i9mOn&N864XE?OVwLnqujmCf z8ji4J@4V1B`#!)zGl{r;z=ft~e=I~ErW#5kxjtL%hUxV@3Pp$yGbuhvDE1=nLzFy& z0~90$8^$lU2cw&!HAsU*Z-QT!;DOPgY^kQ*7}Q0xtIHvlIGp3uHY2=`2(%J315SX3 zbgcx_PWu1odKiEPR?;--uGql{X7z4d|6#G6*UL>))!V&&g|Ym#830GPe;o=7c{m|> zZE2hZx-*j4_~%e{J1R(E0%NhnE&3)v>0&0?=Y_HX1t=4FDleyrX`7RLyxrA6jcu{` zCO>dmPG}@qQoGM!d9QgGR35>S3NBNYwrxsKs1lMtDOBL{Zr%i;3pJYSlvsJb32FOi zn*9v@C-aTxF*FPr#}b+?f1N>!D+s!6QSYCQPELQyV8LQ^@=HcWC*Rv&_n$t1uhWOw zN25olZk_#oY(GM=kL4Kr1#4j+po;5cTVU^?P)Rii^qv}=dS8LA0-D5_8CAXZEeEu_ ztgV&Rc__V1r&i7PJ3we=HPxPT$(ylH=clfrUk}5XM-4?{kHGJgvwVE$wemqY zEC@}D=hr$DE7e76f29v&34~S{$v*lwZ54$ZC=@86<9RhWP0DzK(UBC554$35pV;es zdY#)1fj?@s7r%9lRaL$?8iwX|eOf|;38<2W--@~y4(}B8o7+L_&=8bhg^fh_)&3!P z3!WX8zU}s_qC6Uo4nXdl*)7P@YTFiM+i&mnZ&8(n^)IeEf7GykpS~PxL8byRe0vJ{ z1nmGh;Pqn2;rEB^zBS$qS2$Jd0sjW6yj(|@=T*6FLUoiR73;UXocJG8)LwdNc576j zK062fZH|A}wsfL%o%8D6KCMOU?JY&=TuygtK-zRC5-Xh$*Y9ezBFUpXU&dn@D;&8K z&R?m7h=_dbe_NtGx`kq5Zy`ZnLe1dsPq$Ea40F2=BK`*6iRJO!c@NZT#af_%yAVuQ zsqT2r4_vp-AsQOTC+E9z-YhGxstxpzGF?r07%6aF#z^_l|t(p#14^9)+)6&o! z`X;FN5+4PB*M)ee2|~#``}r3v$6+#;z|#R@f3;g%ZyPrj-e;pfLXYX9nhft`_bC_e zCW~#7bsQ800u*C;Y|Tc}xHF@;M*sXC-VQm^*p`E+1!{oekca2`osaAvv$7zw(*7I% zF4iZ1ocu8(ZY=&;tY& zf97+Z&zG=ANhy4DetGij)teU|&QH(mM8OKKhzvi-!j2IEW2FvbA3mObdi{QW_Tt^^ z_rKVmjVKrqB>epD(=RXmQd}3Dmm-Y+>-62}*$X#L3uQnIKYsrH?4y@(e4;rk;V4AS z=2XF`oBQu=KiIjH6skmlR?QbDWmyPrf8utv9a4o5jHxg*EZrcHg()=)gNx>7S$Dnt zfw4jw5r3#Qmu|Kxh&FMFWz{chKbaJ;bUehJQ(aNAq|YiGeQ*d5Bo!WLQElwtoKX$xAhS6kh1TIZLo+}nkg1(gDg<<4FR zBV^RdtsR2p1S_MFT5n}T;GZybwcRX+rrq?x)ubUwDQ-UDcB44>wYjXFr74&oopx%o z?n_WKVG{l9&uTHOoVp<9O2*>4f0Yve^kKAQ=z*=*3I!u59;bo{f?P(6$DP$JU<$=| z{H43|wtzseVK*mqtPrPqE@5Xvlj`qK9uW;vb@k6aB()laq@oaF3d{_;B0eOW%@B;I zMX7fD_jl`tpPwyS=Ox-e8i}40+}<9!Ok>@4;SCSA;3ST_Wq!Y``$gB>e+*t(S{F*P zXsy4yjeh)xQvih=C`Z0HDdcvuE9Rb%UT&*Tih1mKfFURv7kWmN z)t{aT4co(Cs6sE_o;-j1f6EL`S)V-rbw*B}zp?*$`Qa7(dHZ_yx0BPiZY}%0TZmYt z!BS8Is9j1x)_dAg(^U^Lu?B~<3e2mXai$gucA>87y{p!BcE%mKC=*c9jxQJGkU}9* zXM(*RIm5Jgklc+s&ymGrr7222(%YxLx_&@$TpIPQlHKcP)=BjDfAKTL`FBznpZ2q| zFknszNt8Q%{pQOAWlE>)8On?-N?FFy+XKAu$kJPHlu+O@@m=!gP|+FI!^g#kTCbBC zDSYc(LPB*oru0ez%p57-Ce{O@=*VhyQ6xu#{nMi-sx*R}3hRcJSZMoY+YNK5Kn@sM z^MI^bN&pe39trkw=;~@6 zhz_N&-F<}}=p!NW4I9OBDK`Fs2VtmC0%kiBwZgxA#fm`Yu%r%3h z3(C`quI3`mge{x(2PA)P19t`P6h@jp(pik_U0*VmqJ)_p!FY-$G`-?z`r3VI3PmUe?$EVvd!iu+k*K~q&)#cg!#`-RYuAAQhnV7t zbnV-1w+J@{ydV;-^7+}9u#6OVfcowNqa0yre_M5zKLv7@ruz~&YhV8qjbl_?xY_Jq zE&vMdwl_oXrgMuk)0V@+CkrsVLViA7dXy3`JrZrMII8k;yQt9@vP+ZwJA!Q_QI)}5 zHE|IECJf;Q3X>95+z(w7?lRzTJEoj72K@nGs*LRI;1J#_mW)+myd_lz?K#w*6Mue2 ze|G{|7DhpCncK?f1NmJ$L{fYlqu_H?V25$O^g-tCT~u`3ESzYG{y7zn{m`sd(JblS zsjn9??UePuiKFHcz#JXRQ(swqxVQCYXV8`i|r76T@g+nkZpsvC&{?B z*-9m@H0cHaI;wfNkFfV55<|oHSw(P3e^au!=chhg#5wgx-Sx|MySfZ%LvU;~;{6i9 zOo{#*dPK>D!s{{Yw4q=VMpC@=LtR}KlbM_dUU2a0IdkO=m$pn_ejyZ>-b>tZVwSic zldU94w%+F?&A7r|*M~O|1aEJ$+zluK3A|yb7J>FRP~*aINIT4wG^%!JS9Rw@f7ZE` zz`WtlssWfrgQm>Dl9ku-?hqn21^2LQyLNlM^tWOF6d=lD)~NgDdgH?!j8Dye#i0O& zF+}=pGgKF=+B*^;FJX-mFSdg7TcT2A{uqE2r>LmN27sJGV>#JcuDb|v$vJNNb_i8M zGE^1DgCV2R8E)giE)owpEJK-uf5cykboUqi)o8rXyR5IO?P>^Fk0!5g);Ftq?Q4^R z?N~sD%3kILo0W#*UDZ{nxs+mUOIV@YW2g7A0;EAcv!Tbduucr6Q*t?jWbWpWNk?bQ zF>!O^S{S$1vhfCkFfQ?i>b|?znA>4Zg&NHK$|Qj6l3+6gg-d}YBCyyzf4dZSW`&{v zh9!9#e=G=@+6h81IZGz*SIzYj(=+l=;R2Xgu1cUQ)_ormD>xlu|E~VC2_9{cfl7-k z5nYMoHcy6o9Jlg_z!t`IIgz}OB`@sjO?EAfNCO0luPro9Y8k>tB)yerH(mk0ong5| zdspavz)RpSRADUNHp4O;f1YV2_oUSlrG0VwG0X%w5)E^)Y6J4fo>45kUl7BvYJBmD zm4d6pNqLh7=s%8!gy&iZOn4vPy!eX>_o9Y#Ft(0c*@q!PDwF&oUcDFLgM`-3y>3{h zo7&$$L#rWi+H%t@s#SPi0Pu$((8wH_?>Vxoxe|(b28(VJupk&{e-FNLQ0bLJW}cFw zbX7!ljFh97FaRY4D)LFD@$lMA*@ja5I`d4!F%49UMGaurO$VUI5x9raDH%Qz0UQ2x z;XN6qDq=`3#Q1%Ue<1x-q#o_`JakOlkMQCiG z@WF17(4SBN72B_XQeg$e(ku$GQ<`Icl0m7gra`~^%{9%Cotg%!ArmzX#N4lGR$u!y z4OY z1u$nU&^<Ixou5cZ%05$$88Mix^C*9H8QCvzca1O;eN$(fPf3~eyqQCwR>uBw zRmDEm@ICxwyBka|)kW|LWiZLM*uiqS4;^x+fUpm}1ULZ8Lp}rT8B?3NigA&<4B!sOpZ_jso1d%7y;@hAs86dMYC$6zBwk?P(#O^ z>wbo`ltWOh#C-8}qMmml&ZxxKmXXJE@RRR)3-|;y^O;(pooqH(L8Rq39?c~^mP%~1 zZvouYf1!#i#p#~wmK0t0DJd$P4-kHOw1_!JK_NiC#Oo27IOv{S7l-kX0@cC>4Af== zUH2M~E+DTb!gW%Mlczxr-BNUjGCj@+{wB%<#UF@y`|5c==CiHt;YByqD&i-Bns*j2 z!ZoifAx*9FqO6gDw}1) z$}wYUKg~F^tcJnS$BEK;y~v2k+4>=>5_E1?L7SlBeJ-6R!uAGB6;#@X zfAHQUy*Vr$vF5Z6_7&wmPRK;>>gw|D^D|HLLz_b=M$f1*4cCQ$72!~`bjK%3Wyw#% z%O^hzyXTJ2KHq~TSc&naxddn~VSjrK?QZ!Z)kMTh!Tb_x1k8uZJeyN%3aGjmmcr3= zsPqooB`s2-_1+=~Lk+~j#BIMl0!IM&e~HG6#faM7Jj{YwUjd5E@UC|^m<@IqyBnY= zuF0tJ7SIToyprCpuxZEs)NK&RO7h=+0LjWW&Vv$Y^ zOU<8y;kg7B+)xysf!+&0W-G= z;{gr~e@|*=_72N_erBf$0}qLt;%7oS%Y9XJGicjh0iPD=iZASJTi#voSJekK+22PO`Ew6xUeb$;b?#RvYReE z?@hNUdv|4!p$wj4zRYUxJV*y<_|5sh8U2r&e@|Mm)5)FP=gRB)%i(!!iR8X#EY8D$ zI9_r>D!1==HAaLA6MYp_cAUGOb9?Z*Jv;cLJ?YtFXFF{>L0EKQ1ETHLw-!1^xu>Se3YB=Hf*}|LrzK!j0_F z=a2WdOdh`@==tsEpD**9{rzr(mSyApOfxoTNHc>OE`8=2JpBB~?ULGiB{M+J{{ak8 z1HaBoTVO&t`3N@PEKE{+KNlRuz8EhwYk&`&SETq|0m7#@d<#C1UF8;hK!Vr?`TgM& zzO{o2#KhonXBj(T0IME)hOp}4?G9Ke%if=WtF92R|NaMAHk5y5Ze(+Ga%Ev{3T19& zZ(?c+GB!6LFd%PYY6>$nHaH4pZe(v_Y6>zpmw_Mx6PFS30bT-9w3l)50jmMbw;l2U zCXlnj~niR5Sw#?Q73OOEax6JYi7y`QBX ziRew!J7|F7byd<@w*zRyv%~@1W`Tp@%S8S zR5kD(XrHL)Ba&czij)rMEz;P5e&}=JBlEa6ti;kW3+uF9I69G_ z5;Ti@c#h9ZX>Qxq|LL3v-UEVRFp|SE%Wb2Mx+&FeiVae1JRzw05f%1M8T#Qjnx+0M zrgWa_uHAlEK4;jp-B;ZzTqUXE1pKI;{zR|ZY%}P8CCqJ=%Bh#5Lrd3o>K_(T9G9QX zY}ij@%|qcm_S$~$fC6*SI}FaVTp^R!{40e=aI1*5&LJ_T-*0#9+u$Tz)H@-d?S8qpC129O2U zDS!cgR?d+;r>giDU_Irpcedk0?Gi~rR_IYuP#o`F5XVMW?!D1{XC&3XFuBi zyt+JxKNsImes}Wv!oBBfKFkt!h6Y}HvpqudBCSi4=9 zZE&4ENz}=8Pko!xJDK^$`zz>;uH!($8rf3L|AkG3!DP* zl(0uAJcCbAbEt?ptPj%Gb4r}8LzAO_tU>~ix#2pNoA{}Aa&nob8 z)US#Tn_Ga7Od9hpUNYDW7S+1ASw{d9DGn+JkP}Dc^mDcKXmvA#G)-({pCNP_Be{Ow zEyw{whiA_e0+@#J=MT5{;SiPC+`vP~db6wIXFn1EiYmC>SDn}QZYY7GAyBYM&3Zgm z@*iHfV=5%gz5RG90++h)MW(Lu`3iY>j+7JIT|{&5s@RT0&K}lk(N}PTQwIB4CdW?X z{KI8%ghopfV(q_w1KZ=Or<>Xy1M3J`5xS(krjr%ju;)(ehN##!*fd~**2{Zr=ax_;6%o8S$>`2y&*^v8D2adS@}`{3aIE9H1ErwL=C6LnaR#WC--!wo2iR1rUH=^ z`v*^-_Js_w=j^!p(fKKqVckx|vWC#iCp!-gK$G=MaFl-uu(IoOQJ&e53&g+`|M87A zZ!#$#Om=-F2|-wOJgs%Rs>^lr%MgD<%cmsDQt;gIJv2Of{ph`XeRMS0b*Y9gip4MATmy>zlQ+lX)8Ah>eiLy) zX$KmVL(Oy2Ew-DX0Xb+rEV?!9GSjudBw?=~zV8}?o@@NmM(1f;LA4v~+2|X8Jk>T2w>Uw{Vd)Uah#(RY`q7>`F|co z36HKAp8EG0!m0Eir%G)kj7|hkfT}n|%IpN0SwDxqEdm?kEF}Jw zp00mtw+&E`kI7c0`fWst2 zf)PdIX?Sap+d%^(T#-Pknx=Srp+l@WjSatYQxVZLw$^+))s2-)Q^W-h2;K|_%4G1N ziBX^?u_|Z`Gb2MOL^(>RtJT@L<%T-osp@};CM1dufrM2|ktn#Zfs_z&saQXdz|2@0 zT`6bQiWGW_$~qEY#p5tgEIOogVmut7m82pHUp3A)KoiTN6|L(Rl5SA)p=i&YY>1m; zBG6~r^>au`1c@$Z+Uep5OBO?HND#7&$9kKu%4u6vW#c=9#4#bwYU;BmM6~SOg=c>| z`*{0#3i6JR)j+ygbH*A-lkYAFN&{q6RJX_q^oa8 zi9*7_+7+~2o2zCGE7HPtCRjabY-v^LTOh}=kd_yDJFn`6)4>rXEQIRAxpq)AI?SGS z)m163!>s{%54QsB;6bOaGC)xlt89OsH!X@8Olb^^_RAL`@f7JO6EY$(Abdzon!m?_8zBYe&o8}i6 zzC&QB{9b19R!1`C@A)J$MFKsaSzQO?et_LX77-Evz zx>`n8W5ZaxvZgAH4!KzleGCa!@NOfkbv|4Bm+u7vF@J8s#$^e{c^b2{to8e%S~=jt zQb_0(6<$sjA+T!vmI4KrNw$&hs}oMMZe<}qSg)S;;1QK@vA|T|uH5c)+Q&WSeop&H zz1?YlvlZ7~=+Zs7-G%-tUV)vpd2l+aB>< z08tR4x);Y6c0B!O;NAXs>KwVD{+aFG?IZfjRft9aPR_ojx)d%Q4tv;>1P!60pl6{|aq*h?^Ly}84meCX! zUI#yhH%bmuCUqJYrbd`PMpNTcRo6)hA*#~~J+4wEl?L&GF2&E96J;(pS!yPr#>t@= zr6I>(cyKk0ATfVgUZp_uTd6Hk=JT%y3O|b{xefZI~_l;voSH9u5Vl=o7I_&W7H9M_m;O z_PJpAI0{PlVh@v5%mf&qpm6yck0Ifx%aoeB%%KQEH%fo?J{1j59A(C3DNFfes5Db{ z05n5(5bS~x?1!$rKg7EU=u>k=P;O~b~?iW78mBZrdSRc$mG zyt7P=F0X%fr(M=@dcoZCe-aRMi@L(D?5W|FY!ctAk7Clygt>&`{mVao`e{y%p>Ru1 zbtWRrVSvs@lkPvd z4jtAnMUzvt!&cT;-r5B$uf_=*G0WP;B}SnrWHY6 zr;Z{(=}xs|lpJ04AKc1-mB+y7x!H8|I23Crky(lZY<{8cjO2b_bX`ge@XrZKFC5rF zcaCp*Cvq4PrA+tiP#UbDN)6Q)XJBQiC85Z@zghl$@ntFE<^D=$b}6CJ@`B8?gYnn; z&j5dKuNPO>KQH_CP%f_ixnzs0zxn^(es~9euK&9H!{YsQIA{J_!8Bv=TY+T$0!I4x z04KuNg4ia$N;(C+A*sqXChGk(oIq=1Pxxd z)xM9H#nSh5q%%GCCorbu?szcG;g}hPc*z^R>SKOLO0e@6T`M6V@`HTR_lc486nM3x zpaxL+eZrd%t}ULKYK1TKRLW*#lZDKuG6m7nGM=wj#_h31elIuO`>XnUqd`WhdcMA$G(dnN&?n3In?^@ z0HagltnWOe9yGm7d9FrZJ5m9GgV}$;MY`OC(&jGu6)Q;Ui=51fxqmFzX@2txXxJ>4 z6M@_oU#o4Z@?xmIhiyW`G0R6*Z;~+}T9!b@flotzP#GC_kTApLh9Y}=>*ww>nhdD~ z9i!J~po9MXG}+&Kf&TmVWa3zol_g0Ya)6D$C3z3xwcg%&k0JP?}}*)bEy9)tkS5j7$NQd{TCj%iO-j+5&|9p zGndH{0(yS|CfwW8M|D-bSFiiij1+W6+`ssDu{rs4@@YnWTl%xu%wCnG8{8PT%mWurreP~<|}{vjJN@K!1Dkbju+184C( z6`Pz%f`3ywh>QMAkVYXQ_3@biB=Sr}bRtSgfBNh%;RF?z8hx!!-H1wNuD+C;+jaFE z;RJJD$|iFTaYEp%Qo#FzF$I;`Hz;A^j}NQXj{;FGN%|!Nn8aiJ7?wtO2F2=YT$*7# zc~A^UY73g<@BQ1Ce^7s{+`&ik!LrF);{y-W1(}F_2-zI_lU=`~vnopaY0mqbNzP6gb3}DH|Mi|0P*F4@y{7tCJW1f11&g z7jNBvUY)&$Kc_#c@Eqf#yoOjN|5k&3Oi0eYtG|)Hx#%lMZuv@ibshFs~f$ zi!o*TXY9vNkoz$qtlA>vQYB|#PUn)I@N)QGXzd9vWa7ZZVaS*h2}jTUH8`_|I86uq z^37RXt>zdFKUIre%pAgsWbi~ze<9!N9^-~Y3T)E>FvPWr(A-8EY9!|L+mDOpl3wo0 z>h^L8Q}}o@4hzt~FP_FsBp4cL5j+C$QCS=-I;$&P(5d&^W_7&{VJslQ0fkOO+>~|9 zWt5TB`V27kdFpHt4SK^sN-;DYO^3I3hJjIl9z72c31A~6$J7RE4=V-Qf5Z<=ai5j0 zZ_B#eJRkQTFV-GiY#0dFOReL685|EU?7-f4p2S@Oc&0H82dCjkSkMuyCY@AybGcf6 ziEGf>F|TeGd$4^V`P}OykMHJLs1&kkm1^ zE(^Kt=P~a&q%%myx_Qshe~+B^mN5_^Pb#SywlWF)>;nhU$+BfA-j5Yy_!ePMxZ-I z+i%Nt1RTW?oBC_v)MVxqnS(1NGjj;YXeB4O=q4f~&so+XUSt9;e<$(*1UZs}5HwjT z9W^>9cN)D8RlO_j^h7xTY={lYfg?pH>zza-o`B>C+E>Be4#5CclD%&~#xyL2#WdU; zfLjO$=HOO<>$?DcEV!jE^thWx0?+nvOAju|Xt$I{Uy^~E188_>Necw?~nt?DBgRr-H~{QL%%!8#(4MYL)yk^IslP1s8EXZf7_P3*rs#RuTm`u;h)A! zWr)iO$u66+T|{cnIckkJ;aI>IusHdg(kWm@7A12!?I%-ju++AXrUk!eN@v}tPC6%p zij8Lr#q7@k1c~X8sK{GME_o9f1-pThW?YH*3ImAgx&lg9iun3DS8|R`4~>=m?GO-0 z%msiP>y<`zf27?-?5PEAcS=VH6yMi@I5$Mt4i|*n2F0_9L?bBoltXB*eLPyC5x~iv zRxdP^Bf=+|Km?yeq_MbJ)RMIwA(aL)l;b@L=D-1>?+l(Hq)D|@N^oFRMy%lOUPcne^>Yo+03B;q+&V%so>Ko3VTD} zDBQqet?e=O_p8lnUDj(afC=V=*dfX5NvIbWNy3@}NG_%KTVZ6u9uXk9agvyury$Dv zEmR{<;&F87(Q3P_zQj5~3);Wz=pS;#3oy`_ANDLTE#U#DU(~DHbVsG2TEsNdCj4@M zLhabmf7HOy6kx=C9L)fowww+e%^$N73?uKDuh9u#0}nJ)z6R9wkgu_kuW3_IrF$1u zh>9{N>&Xl-Nccix!f*DAMO7`ESZWD^*OCaYoxzWnUvA0~cloZ=00m?_Rezbn@WIVj za0k|RNq;GsrpkA6K!$8Vv>GSaj!<{#q75(Af6$O*tb2FFQGab1lC6QxsEgF~X15Ix}~9l`Scpd4qHC=^WHj7}wmDLT4dP1py$4;Ia* zY{v2i$=GI{n=neU`V?#w!9%j6C$zc>&;zK)kLtXKRobg^wNCWQD1jf~{T4$dvILTK ze^dE(uG~#XY_F@bi9yRWxFT@VG!i7ZMXJ;A%G>#z)0Sf^1ZiDh*_ zWhIX5u%XJz{R#I}*0Z0Zbp^u&vDs!_}6PE(pGKc;_eiVTS#B>LNI(PKMVDWxjJ#l^QVfDmlR8P(V z?UGg?rH;38Ug3KYZLd>w=2 zZeK^JuoqJI-z= zvtzfa_IWQB2PW4Hd7qL@e?N19I2+ZdJ+N{)vWT4(!3P%j;>lfVOucxrf{v}-Sw%0S zn$dgA9$MeE4M$CJ8^gk03DUo^0i!C&Lwfk0PIlO&fAtWmFz(_MnMx5?Cn@ra4ljh{ zc9%0Ik^!NR0&`Jrqhb#>?ts>^YO8v)+Ey_osQh3pTZDIj%UwUme~V_=BFUOb-?fDv zoI*HX@En{PB?$1yfdmm)TIX^D`6hQSa0cGQ+*_T=pt<7`*bfQiV&{=#M~gr@8MTQ1 z8{r4)B2HfFxY{;tCcmYfSPUIEO>H9+5}zlAgk)eICw4rKu&uJj%A0QlK%V1PZ=U<5Ng)_XUv% zEEBhJgWMKRar#>0AMnUSj!S_$%p#U@KF%UQtnvii2fx7}Y|LgfL^F+&3L#Z}tebti z{^A`Cf8(4Tv8vhz8U%Mb8c0ERNQ-m>WX!T9*TFYnvlUV!SReO+Z(xIx(;i&?r~rBs z$?Th(e|T8Wy*U(!l?@Y^%QRMuvJWdX!R!OTxbOVj9I$UO7C1M2aPFq5}$#E3K3UtSJmezVyQtgo()lokjxA>JLmj?UsdgL zS3h>m4k-!gq)W#H$e+pdi*V%O?8!pde@sewO-<(3)CAW=la)e~_iYuz3$7GeVt8E^ zJ``SJJe(wz-#EOqAP__8IA{`HZZN!MQ0fvvZ9&2Cese{2o4 zo0WKEch!e|y^ER~l9iEZ-n%d(xQ=0gHedAsn-)PjIfY9tBI~N&)axK-fUgZh#)>$C zB$c86bI9aSyXa)xt2e*ISZRTTe4=urE};nw;ikc;pl0&o><~1ygd<}X!n*mtAv7Ja zK~W6r6w)Izh{XUm$jW?Nen~6zf0%lpmdP~H*1skQ_7ZN)^H8ynNtHSH`P-{k(b){O z+y*HsSCr^INDc&&Y8K-+DU$$bsYtPgeYH0)QU=gi|6Fzv10>7yH2|h-Q?kfClUeE5 z+pnGMmqOZ_sj8Wp!Zvh)5;!jJqA(_E5I0g#i`DmLPCWYriX;&;hWpthe`5^n=xG-M zg$Is5c_T-IG}#Db1P$pf(fr&-K+bc+M@9!J0Ajw!ECbUyH)3o$Q^z|Sm}OkD#Vi9Q zN)*0MB@&Xn-oqD{h_5D*Da9BryUJlM;z%mf+sig7RiS&-9T*)_7yxOi{3to8{3d?Z zpj>ljBLc>V5vG(zz&x9sf5t*uCur%z+%#?_gUapMd_*-RIt85tEkb4X*tegrGvY=I=l{MmFE8Eo$?yFHW~ zUt+T5D!0Huu*RK0MK`TRRmS70?8;(*Tr7X!sEe{=7lT%|4RjOe_W zoRL_APtn7mM6i^Ky3Nae^zN{9=21zn)43-m6q04wnf1L|Ie|StUGNP1cL()9 zRvkuIa~N`|v>})fc5QhmQ5(>XE>R2NTNU3dQ5)Bd7O)PeUgk4(_4%<2qzkcE#H5|B zZl1?PH|c>h*Nt$oe{(4?gwOTB{YiX65Bzn7J#YasV5E8Gdf*@sO}_{3FDI1ih@j|g zg1foRHTSBTZ<8d|X)$q>;m3W}&3zZfpVoJQiUWT=EGxOg1tMiVli_^tT7XF$LHd4* zpDzJq1Y~hqsM*KKdL;8u;t9vGkJF!4NuqLotTPQ25vt^ge`Fg-=es5~N!)3}$b5pp z&iAC5lZ!CtSM;P^O#h#I(#$n8Ozug;9)iW(^}CKVN>5k}pFgSJdZOc9-w(Ry+&rZP z{I%WlC$_bPmA`Xa+i;k)*N6&^cNdnJn7`Xq?ZI|4?rtsh84T`zK~^ZcXmYf}2Cr0TLI%emG`&D&{({ zP+L(W`g34;2o#jhZ0uc7fA5+0ylgfXQMI$e-K6xw{uuigP6Ttb5=D;4U2`Nik=s3U zZQ1ocYDK4?jT-yH_I)wvQWJN5InkE-fIm#%ALEX+e}ZJhP^Vs|s<$WEW<}Un<`!#n zZovwVQ!z@58l?4%!?1z0u2(TSx)35)&^d()jg9oLG*L?|m@+g}hQ@3yedsjJ-;X5O zDsyMB`T**?je!!vOw(R(wfQO9eee3$aeD400)?DMfN6#O%zgmUdTrIk3}%2I$2jiY zC2gDSe}D4{;W-AbYo8jLBv;BmyDITh-BzCW1V~v3^7!nK{6Jyu);t>r32S0pPeB~8 zA>9%Ya2wtdfp5}f1|)<@_h9yMK~I7J8t9IUAN!<&DeBUy2WnQ+~nG@PmnNVg| zivS0wgT!E}PfLf`H)5Yth7|?Wd9mT>Uc2;Kf7zGaAKOUQKv{^B&12k#wit_M*M&mI z*Lrx@+=W9#xRfJ_=bEk)iRVaXBJo^V+G{gyQg6XnVxZOhxxAsZG8%hZ_Z)e5UrK@5t8f4MKW?Q|?Q9tUAAmncDDgM#Pt3j0V^bJ&FR`P_>UXN3~#cX%-Zrgss<$rV5r^(*8zFvmkUSUAi4{$9Fbo7qggS|CW8Zy90u1IJ-OEp zD|mG#tOB%z$dz_3l2OX_~5$R z&x9w%N5uX2KNvFmtCy-R0%w0VlHSjQ#R2;d8o3YWEUp#toy6{bh`qjxvA2mYp2H!) z0EVVp)1z~Dt1YSRcz^vBDY8hlsP;IQOAL4bSwj|!RZl(jqP$;~1zDB$kN>$j+`PYe zzas8g_^~;xp5NYl^CQtKQy57lU)?_3jK4ruM3jZ1E5&$W^y>C-^Gtv6uW$bc-se1h z-^fChl)~@aZf~Bw`0m@+w=aLRFA7!&L!|!)RoG`l6kL_sKl|~`xAq}rg{0g+d;MR} z|KrsQ`C~e8xi<@DZ)lSy}te7-+%n}^>;sw(n_%+q%cBI zEA5&}0BS&$zmQ$%)tV|egBOi|72NMwGAe>3e{+kQf>RMBe(}Z$LEvOU`Dg!3+%sBm z7UcQ>FSv)gP=rPU_Ny>1#`tI4r--tB0R(qU(zuCJzi8X^V ztav{5&F)ycb-4tgiShrkd8|4oqXePL@br&|e)m}QkN@fngBFxg^4X>K?WmdQQhud< zeRPYhsZ}TAt2NxR)}svVaTJ=7f+|9PsnGB`3VdxDeN|w18-*oC7Yw9aPcKxlf+)NM zd%U;J_UB(iS?%_`Klg8c@0(#F1K09W2C0jZpbUTP>i+KQKaGYt1qiT5a6&~3T6&R>NrC60z!?~-S zR;(YIa3fpqa^S^MD2h+rGk8;6b&z3O4V8Cz!|>OCo8TnM=%DDkJCNcl z_bxAJsl&VNgMU|WgI84_cf+Gc0>v~>*MNU?%dA;x3IZ3I*mZT>`qPWj1i?4$;Z*sv z1Adi=q~SzhaU4%n|2%ZnX7CmS3fFinYj*wsT=F1nwX2%oO#t2+(d_Qdd!iFp09Y&B z+MgN}EHkGDuap9RCBk*=$&1mYwbgC3P>19aFqabC;p}%%1VQPs^15d6*#{>azdc>e0|f7czknaF{<`|z&C6GAoiCvyT+@OnyG_9y8v%gy=E9sop|!kn#%FAZp7{bm zW{EmDRU6cQE(?h9E@LnQT1QaHXawNBge#Sr8i!krE?DiGt-tqGy)7LJ>a4>f!!WzvGFN94CZAW~ z##Cv-+V6IN9HTYNqO4_qoT!xkMZT;!pC}R>mHq=-|t5#f|z4WDX*CO zCr_$>ONjtk?RRb0437sNHiRV6aH|1NhIBtC)_v6@a2bY1?l~tbOoZ*=4a%~m@M3eU z?wkE+O$;IgzWr%DuM+VPXfTwb!TcV>ClSibcA_$gN%eYo^l=zm(ng8^FC!!yyD*}6 zJ7B!S-43lkmWccX$XM%9UIOS&uS>yw1@UcvQ1@32hr(_8W~hS&Fa#qXZ9)H$W1Nrg zj;-f|KoY~jJ{|+fVMw$dfDgds{==EM^C>Vrz?!h@_icBm_Isyf4&(-*GOA7{l&Sfr z&3QlG5e3x1)X85G*dFdY3J(4*3a4On_xrA{-ub);+?W|WKy-n~n{r@Q^?mE(G$jas zhnuGI)CV#%Z4jqFHbaQMoT_<5O(1y;kieCh#tR(kUEO)=B&3#8#rk6qU>rzzA+X=? z>w`xiZe+N(`}2T|8G|wi@+pu5r30dP(g)&EgJI;@dJLsj)da1!AG&5UjF$)*eaSf{ zg744GhhUU~B8C7R^OA@X`OGjzTww}-1|%0&hs-%-0JV26Dls+gKlOt@C7>Ba(eFpp zQNZZJe)X;yF&1>F3FLr%YbO;PA9w5&XhpZ@5t$m*p#k!(@!Yt}9 z`4d4B#*hG%1R8wTz}6yn+Nm0yEJE`bRPu-?naFv*_|bMFVVYfcbc0Y66ysB9L7b{$|Z zW*hzaer*H)$-fOrXt16Kz}gXipukC`$OV&&P%^s~aD6}_J)uweJBA1!?-&ENiUE5! z9thN;k+{_{S|hAhdEbHGGaRq!Uve_oG)!Q<;O<%82Mf)_Rda<*nHbEu@4gN$F2uxy zK_N0)>{E904zKytPnC(_@w=>UC%!@MzFyeOCa^IczR&N*Sww}U-GF3&B)j3Qp#fb< zL@hCoiRh*}daE}vDazq>;FwXiuEx|9l1-)9jEtF>Uhg-DC7nQUDb=rh1KFJ{?V+4}XJk-F|3xt{&*-R{B_3fedSS=Wa|CDW^H3hac zmqZl2)GD>md9W4)Xu$64p;t@xCD2m;Y1{~? z16uNLiIE;9AQs2c_Fw#?6iq_1Pop8bQ#mrY6v8MRd7s$o|tq_Y*|{) zFtcSUGq#*0a=*Zq>E~^ktBftPa#qWkh?1IeI7h5bVh^G2`r6x?EHsZ8GM;&kmJ=l` z*nA0`AYj_HyfjA@%b2MC_92`lA-sJUkj|9?U+tU2$>%ketJ9#0Z4J2)Mk6V(biB+~ zXe5=}ItTrZAR_C3{=*aFj<($+^s&2e1Gct--jh!nEN_gV`Tt-22{`ylylVna61{Id zMv&NmIc4ZU*SF!a1VjG*@v-&D!8BGgGf7$%%FszEe+UdU(Jz)KWu!XwanpS|g^qdOe<(qJs~htNE{;RPtBBnMKiUGf6RNq-G!l31u#%E zD&T4`1iT>jmJu)R0t~@%L9y6U*jM8^wswq2H`G55qtE4ns*0tyzh`Y;K)6I2IEkv^ zq8|O-LB(-b?;)F6*!7$yJgwX0(J*@*>W2!mo|-uiyQrxVj(;*u)%$Y~(W zk%7j>oTQU~#@u-r>k1qUQOl&B<2iPcS#FxsW8K+{$ZB9sjqP(!(z+K5@kulEt%cNm zt~_`LGH38Y1*qf?t!)(^u5mfEs6xmR!pJ(j^=0U$lMdLEqCyxVAq3O>H_dS~+Bs~A zQSSH0FjoPIwBUNCd7h8V*ZPJ&GK1q#f{0uHeDX4Xafwdd9(|;;)i8_~`HQuTGzPhB zFTh%ViD|=?tejhRizMkd;!T$1NQBy@+JKyqoLs2^k|7dHIScfI8H&`cI-NWrObAn5 zb$v*M6u$s>n<68)FK41O>E~vPw6^bE-S6X+0B0APa!6US3tO2aM@}T}(oYOuM=buT zvW#qh#YZNcqo~P>*LkxIK{?)hNt-#1v>7vaRboc6tz%HMR9aqiTHq=H(p03IQ#j(% zTImJn)wWu8fp&TNVV4ev2%t4Z8wHpKX8^QOGTPVh4PRU0U`Yn^6i##n0zt31 zTh_jLK@)*6icXh;-M9rxxIOpt^G8hI{6qGC1k+>sBS3O{ae@-a0*XiSd(w|^k~5Oxkrog z|LD;(mj=={cWFpJ!X4PLCl8uhq7r;FQAWCy&VaxI2IcfvN+TspdUSEj$3q8%({a*& z$JqW%xT|LD2-)(7LN@7!0mif)68Z?ilVeQACN3jw^DqK3{CW(vO&AZ5fd6rZZt)m` zq{r}SL2?W(E|0Mm5Uix8X}ofSr;NFOk2_*@toEP&F^)Nb*Ag-xC!%p)_CvG9mZ;$5 zvgYMFt>_<_@Y{|_l?xyxo7Bc)U(L0Gah1@y1l$o=3jxpFg$iIPFyV;Qx}=v~PDkU= zNA|7fXB=)e&h=$#&vk_vinvzyYpop@UjC9`KlatO4h`{nSOI-eGvOw4LL`%adQAV= zp7&e739v=8tm>rZ&Qh&){`$1WTZQX8`fFi!YA=?e%hKy!#Vi5SXcd)o>go?($p$Q7 zLNsl!JsRCOK5FX_I7qW?x_T4F%fNghbpX@so4)W6ozy=6Z9K1JaZb~B`Lg-+0PCoq!AQG*52eHA*gc-Ha3&2^Jl4R+e4JlcMpJKYP4?PAJe)aX2X^ z_+d&rgpR|MR~m6PQA!(eeW-_b)3*0P;uem9v z+yI4#E6b2L#`dQrW&=>8rrH-Fn#G~_*i+DPe&o>l8CCE)o}^Z>5G+_M1fO?yrWMVS z#WCFMXy!R&^CFfaAKH9>XUUe9Fz{Zm5FZ5=#$zoZV-xKTUg6_KPq>+CdE=WB+58_1H043fvF(!W1f zcD!tS8zuE z97gn90z!qD1u7AL%Rn(GYML3L7Cb5LoyL(m01HDdM-nEDgE(6lVIsOFWbkv>WQl7& zj*TT3ykpm(>V^h*{rG(mpb}*F*omt^V)zR*y&rX~IgrN*h3<#$ys_W5jEo76M$y8T z8Iv1^}aBBy(XUN`@;iJ&Z_u%GcTX#pL4BNT1&$LGGjlfJpMCY>&rJs0;c zq%SVlpxo9MDxD1>CcNh=TY-B-z>ldtDL*?lG>s|eFcofxqLGZCgBpzv3TPYy9mmYE z3Opm$WZfr!VQUPwB$?kvXR=?)aRlWz=dmztYrrJ>Q=fMm>*UOQ&L(78%IOudMU|&- zEi`Q`kGx*)vo>R>c$ytD`l}fsXjonvVH4Z6mmemilkU^%lp=ak#L1>nw#-<5Y4dor zJ0W6@iaba}3;U8!$ZXI|#&v^FU_$GxbxiC_I~JaQ*6r|fMPM9uerxjiD*R&Moyl+< zTYVE7$Ph70bd;U{Y)4u)g5HCnP{uwNZruA=qOfkY$b0Qrlelhj04mz#P42?XFD!0x zRC=9Wp&6Iz8h=V(y6uy| zU706>`{Z-3t(zY8_FZBQy<26%K?9>zY98W~3REEWHn+-FyCj{AKsb8edyq|f`pK-1 zjI%!YJvU812hSzMT|IWM;BZ{vIO(sGB}q6K>|Y;y<1t28^;mO^TI!ZP#z)~=4{_b z@?N>vqs;d3VgcNi_+&}Tp#pdFdi(e+xe@lNXHj|e(7nj#U zOl)BlQ(|&+dl7y>C)O55Of(mTHItjo#dBSV;>FE>E*LMEq7oL}EH9p4|MYeIsF;Y~ zeth%#+JEJ;;7YLg`R3}!AAWM5FR!WTAIT&wgiXt&e++AsoKRX=DVbX{<(wB<(8-i( z_@!UzBw}u{paqreKqSuGM;bqVTRwO>O+gK_@#8mTT{iQs+SX%YO(_AnjGj!XEkH@` z7k_gLWuds#N#1SazBy5i;zwHHCTXSF?z^fkTQ8d_2!Wl$-^|@7_`+$Dwyo;Bb?LXz z1?ML1e>B`F+M6W2lbg7!0hcw1#tZA%knY4_YCdu%wmp;h9&9E)*5% zqAf_W==P1jnP8w)v`^*rVhatc)AD^=E`!Ude?k&vk{`KGs^F57q?hfH1~+pr6g34G zxXhmm3Zh8s#+__ehbS{|tEnKC1`@VdbJ>NCnQ4P2~;pxn~xBjAFb4Da8+TV+U zf2Az$)%ojF7tkc#;Y--^?kg{}1jPtN`$9X3f+~6<-Q!OkTN9Mg>EM0PECjltR3+h^QeOOJJa*waQgVO`S_HKC zc~u6-1LFvpBg)_BS=`+!!Ui4*%1~S+e_eO0GJ2I^7?f4LEPsvQ0uF8Qb8;A!xy&qcur0??T`(e{Ium zAG&~xU@S&O($@Aii7Ko;&=y#im}9uL2)CQ0YAHzy?d5*GZzHNw%5+w1)kLTPWHwTw zUV>7q$m1Wr3V>?*(?f4?)N2tdF1{X_5$r3vQl`FbBs0XV^pLhlOqQ-#WI z!@r950SHWrpgKjc6&MOk>ZnFWIi6H6qq_)ZlPMI$tPX~7E`wou6)@j$g%G#DyDQr+ z(hNcnLLQEj(RLqw0dAU(Z@X#{@la=ne;;C2Qi7T3zUo$9A*@hJtG=MYe=u+@$#@?( zA$>2(s6=T{H&xfh6G6Bn$Ghq-YF1lx)Uw|0?^Y221jTF>@q-nNA%5(d@(Q=#8B)rSgQL-+G%yfwhHz+~BV^F@qP%T&_%`!-4?jXbul6lmRg+a-t+ z3hkHzfpMM|mWfjtWzgX3e{K8-Tp-z|hzeC1@@BL5F+PdHFR2M(>#2dcH`Y14hwkldsq7co49XW3tgZs6~o} zTyk@qboOo1I?o;!F&L5nL-G=Ss(6nbbB)A|Dr(V=`t9gwi4Ut1qc8on|yWKNS@j$-!0JZBul zq1QbRG=vSv9S6k1yaDnhhQzg|hpwSCig()txYIP>e7ngok<0@qB~s#3;s7KD!6S%O z$1C4OL^`7S5)6)*e>i*LofMc9c%<>M6DidX+rTMdSKu7%@Sc#&8O^s(8AO{$)iVH7 zfOBRdxgxHvd8&GbS{E)7&XIsszMeTA^i+P7cKq@2xn-W6sA#MT`e=0diL<;A0h!oAfP8n9B zH+9vfjOmmUOs9akb&P8WK&BC(PiJ!p6fWb!NsBqW=lswM-MWv1IQ%wacoE~&QY1j% z$5VmvY9!(#r?#==g*ywDPQ_Y4WNdX+B9fvUfaj`y%Y=^-CZ5*&taQu~&f&@XZkw`1 zXM>_D^YPj9f3_@<&m%J(%Q=|Tfw?CQ-p^h{3rk}TJ;XIc5Wr4*2e4O*-Z4)}1F9RU z2PN(ob=9uQWz51-Ab~;J=h{yC*ncSb6#oIu0)I}cu5Qt%QJZr&-MT22L-8KSW#=SLtB)YpT=d9_Ytf5b3>^?Y}1mHP?pD=RZLQ~hSQ-mVYHSIHf{m zN3wo+Iykfjzsg;rGn$}ObEg5J<&$cHMm7QGf1oD*`SQD~S7VnHz^`&@DS~c@w(8KI zsLMdfpT20?#CC;}zc&nyOD?PjZ0;`2L!7Z(p6{S;k8~Q+9Ok($m8jfcrI$j;wIa@j zP;_{0c+R=8M*>KtFf*=#GysEGb653Zy3!M4#-$`WfMykCMIxc%^@tE(TwvS9t#pWW>@VR?9;RaOFEt#lB2cB?Y7xqIeFBQ z1S8tMbp|5@Q2Co^AnxSjJp-jdl!MKov#9|$NX|AGL$u{$8={X>$Tai}T%U9|-xtSD z%h=rI_(Hq=yLE5{kXur6FlvL)=Wecsf1!Wczg#QfG5%!+G;v#p{0c#)3E^X22M)%M zybj_ww`0$DgcaNiJHokp#R>K!21?Mm3H5tgxvBXM1t+#P6Wvf6dyZXXTO86E_QcXW zf*Z_8qxbANt|UXph4=zeo$VAY4T>B1uD@t>ROR}kqVK0iqglXm%H6I&EPA6^f9@7P zVl?|Y=+6^vBw?sONB7ZOU3F$!3kb&{qF5yG&i0|vRx~l^Ne-*ALgoJppnl~|;dPBW0s~X1?3cn6^0VOKjWqdSP z)$20sGXiAXmdexh>60V=zzX`q10fU*%s`?qm6qX} zwS#|!y2(4_p2qSS>H$42C0RH4w)u(3wkgw$))0BzK2~}90xS3HE-q%YH<6DrP>H6P z%^+Hz#kC~UyiqAePfLw|U+B1J70DWpo>TYa1-hb-(lJ%LG z6U0Q%BCBW7gJ@3tW7F!k>>^{aLePQfk18pEkKEBcSKJcodp=MuD+hp2R@_2xQ>ZfG z9B`(Om2_YzeK;5y+-TqC!M!$zo;{fR&z@IBSwzesN@E)-xI6?Y1#mX~43J*{T>5GN zR0Gr-o1aZ}`%u+)f1%we2rx4w8+jr|dchIx1~oJLxZQd)yEAqJcB;JHw0o5HbarFP zWmJC-FuKptl<-vpJG8A8Beu1sXWNKHZZe&*DCG^J5Vb}JzMu4NL#aG*?s*a56FKxE zHwQ;FUY5aq>bpzFOuVb4SsXYLv;Fp7Zx{#p@Ug?V9=-wIf9&>MUG_A zjQ;q5G!c}ee^(*kPTBWIU!Q@-cTHrNg7y2XSfO}{)yGu{&~cANkH$5ii{*%Mt2uH|^!X1XvW3jwZ%>YmjDzzG9+3fRL{wtAqx_*- z#`jf`_)xAPyJqTR17oFvh|j}Vogsl!YxkC`e?Ntw@IQ`o^VFoKa^mPIfxmTB)se3$ zb5{ja_CzRU2AkhWbCA_TYI05p%pF`3RW7Bmja&dEgYELmh(~ z<_98@V~+bhlxJOdFN6`#3B_vZf~z8j7kZ&4Kg$2T`u-(UUv zfAwFz#2|){gZ3G7PgybA9wN!$Qs>}K*;SWWw(PzFBIpQ<~zzuS-8(mb<3J zF|nI$QF$=G^SlS2|=8GLSlAYSbKbtbVXpHDp3+|dH3(Dg7@&fGg1fpGjBNNk`w@BksN1WzbPA)D_;sb2L6eWgFjF80H$;HjdW2K*5{1<=rOIh!Cni$GCJaaKWdHnMA z^Ye>WZ~aCkh;mG)FAVW(Oc80QO>1x8J@<=T5Y1&;JO9^`{tu{ke zN;t;9Q7JD5)#B6=YYeEx&Ljpz43(wplkf;S6aAwd`9>7zGu5xg-i6 zsmyr0US56Zhh}I)#DkeF&%ycBe;IA2iIPmBV@AR)2#O4$#DfraK@sq#AwAfDiQ(=RSkQR`&(H$4pT^|l+#7UE-Uv8GOp^Kp}Ea6J$ zdwqZI7K;%4mN0bQ8^2Fv$~E z1hW9hSu{%*)*RSG@qF868E$(j0E7hW%o%^s536;Xv^9cOT7(;GKpLABo^`j^?Rsc` z9a1F(RlawQRLX)x{JyfA&jYKqV+zaI=`FaG=^rJgd*yV@jA0s~{5cm1|7>kHrJo zgR}7LtBc7mP_;!Y*Qb)$iO>)lU=Aplfn8IFI`q5QK$DjDiv?~hl>ctW9Sl~zrAdq^uMrPt<% zYvp{2akW+e1*?=0S|M=G+v(%!6LNr*XhOLO=$m5wASs!*e>76Ue}{|&G3WPAN|+Ob zIfrK4W+ad@jE*o8P=V21M&dV{aYho35k}UQ$xm4#)kAp6Xhc6_Rp;?gi5`$;nCZYv}-C4dvFo2JE$f}(T?%6Dc zE(W6HM3x#mZ-yqFKph%36?cE{WsSwX@ES#IDW;JcF`vI^>BL=tFqkp!0z8WEau-f4 zAGfG=l|{F>izV7(1y2Mfkh}u~27F+42~4DKg}v=k7zKQ-Fw{Q~d13V1$ctpw_`s4* zaR2$EYO(~qB|wREJ~WP!7s&x!=x?BsfW88jDwU3q7XVbK>A!(ienx+zT&)$L+Hvx7 zDyV@DE41y7&W6Q)x(H$Jc3P=T_RYn*NIb#qZ`sJSo%vX%r zuoGHORhrMcAdzT85$T#mH&54NrTI7tpRDduXNgG}De~gS{p4#A*bu`Iw*f;rBFS_L z0Q)E*qof+InC&SIVrYL7ssM6i_RCmG(&Q$n8wT87f%zLyV*R=6+sFYxzEN16Q=95k zabZ@&DQVoE8px`ynVQ1k_MWziFU;ZJ$sA@>o)d z1vVBQQ5T*VT3mlHq-4#kTXdPZ0@o1Clj)vL@ z6M>3Rs56 zGlhG8Z8NrSEPKrCeY4o^lA+z%Y7@3*&Xzr>Sp#SXZ4WhT6|hw;nRj?xJb(8t)l-H; z-0jIr-Z_77bJ`fp#exUCu#*b-peGazzqn472M_^@Z)r~j-s;q3d3Tbn0n!b3Uob~zK-6Gt*H;I`FMU&G`)d0baAp1_ z#BS|`s#x7P23~BdC^4F5#qwO(`N96Kqx`Ft()fREhTF}M7y>|2p@s;=SV2SY83Y3b z2eW0tsnLXJ9cwgCg}<<4b&z8N&qp0gA(#)en|sg~Xb%1_kz~)b~ z?0bI#`WO7NjpzarQIAdcwp4!V?>%zA3jQ^8`08P=9DSk#jUR`9J_`R*>`&wh=bBFM zQZ7)9x`phCFl`AfQmwz=l9F|Yn(cqc)9V(n)S9Bx!_O%wUp3&P!veVcx|!v{ zfG;8_7z;9(s}$rhWoN6K+a?tN=zch5`ON03=@R}xEJC}Xw#M6|qq*%e36ZeJ5PalT z3?TtZoCi{0oaJteJgAx!V2W`9#>y<%Y0Skc9!v?)`6?Ny8p_7GMR+A_)sEpjJI#i>X@*(W39OgnE?=k+u~A^# zi$w6}?!OlpD0TS2s8cq1P7a}2@C#^1SiUb(ZZ{y5DqIYQM{Z<>Wp-y+ae9qIx~=I| zNTxEqx{OW`;SOI+DfF$L0Pr)rg%ZrVjdcjSp7b9SFJklkv z{u`p23o5=l7yLg4a$(x+fBpxlqM}llYFh#v12!}^mx)^fMSpE?+cpsX?qA_$SnCuu zBff~Fuw_6uWJ9qa$y^uMFc*euGqzS+awKJGSM0x!6kjBTw3`$y{J{Wu z0q2cPme&pP2qY|GX5lu?^4aL0B3sUmn}v3I3{hk7QGboX7%&vri(vrUy+m0)Z#+-{ zQDmX5(`r4>mhYRX7y*P4G*i1WU+tMHMfJVGBWZ}K!*iQg*(w*yh65^@aU5)leC4~} zz~}y{H%M=u5D>*Ue!%97bz1tH@9MuGebYD~k{bxAn?UVMZ=>Q?u89zNqY*$V*EPp; z+?G{3e}5-FSbnkFR1WGzc6cl^P)(dXvq6d?;s{)2RV_*%fnxncMa5_R*@*@P3E&Co z1^n7~F>_AlYR}o|iL&7Y$e3|sQ|(H#kS30P9VZw8f+Bmb=1YG}R11Hx&eH@i$)d%5 zdg`MaLv1M|&ttdxqdp)E-D;!rR<$JK{o8YD zIDd-c$O`y%mM;zcM+#kY9u5+WEsGtz6c9o?L}&%{Z|Oci`lcPJtn>Y-JoIC2T+0(n z_fj;lJ#a`jw&^?J3tgJ~ma-C#m6G|`je7Mn!DrIX|}=4Y30hI{nq;;#dFlRezn- z1zI_w)OubQ^QuUBUH{g4JzB7bxV?o!i~_jYs{*~y4XJYA|f}yyvxr9 z`VdZi_*M3=C}bkZUey*Z2sUK>|o6agUzadc2ghL+Yhy?#t>)!byReb?c^S{c;ApIuQBEb-$R(lM>lWN?TLBDeHz|I&&mT=iRlnHnv_h)4SmaiP5EZwjF9w@kTBchc=5=9>I~TfM>uk99_$-T+*&|#k zC5KVcHr={dt5CGqf(-6~7Jte}=8H!+Av^hTI3eYGjPbUrU%a**o9s}MgGK$bIyNHd zrKDdwJ53v9fFEw!l=&l@HZ1k8)3o(Ii+tLleXl>lVU#qVsQgap)1(Gd)_(cwrRKrr zM>dVHPxII4f9^dgO=a;bid1jEpwxkP@Vme}xH)AaqvT*es6`6ZHEI#~B2u=*v_4(! zjpd_}!q5Ds;JT#XH-$i#loxjay%P1)K$%&JJw-9tDVq|izpwR!dLWO^ro-O{>i0if zJ{tgKZe(+Ga%Ev{3T19&Z(?c+GcY$GFd%PYY6>wlHZ}@nZe(v_Y6>$kmr?5i6PLeX z0ylrw`(~Z^kfIz#joLId(ji5Pe8fq74Y9G8Qts6M-u2q+*sMVye@HZ*o#&ZnW@mis zVFVs7pZfRuW^g;W^}yKd&-IP>Asn2{KzacRIN{U_SA*&Rc)&0c#1lS6f%L+g!6B1J z;lJ9S(zbuVk-&uLGvRV@c=mBL4ac+6k@k|m@tZnFTGiB-_Nfihr8)m_UENB>p2B3=n0kEx0bn(52nSJaSIixp1!kidZhV!I9a$X->nzP^5?Mb1b}BR zbm{Iw>htdXY+Yp`X}cPmsMx#$vvhwQX5ga$Q`ldOJT6|S>5pieEEDx$x{K?X4HmF( zhCDySeC^wv9&gJTd-O6U>0N*BCTMq9=bGrCPf9@`K$Pz5U7>f|_RXn#JI-c$vn{@S zs{Fen;(rra>V-?pHM57q~?f8Dph>Rs4HogeL$*yGwg3rP6TE?gd~yL{&khVkDQ;o@Jf(Z%F)Hm(lq z5l9K_1^;DG^#6$|^SehnCp}#iZMSYc@8g|v)4z{v-|mD|ZqUxDbjILPggGJ8Ya6ij9!J%R7y;OXcO;QaNwE;b za7x2jAIs|G5X*+I-M!o$dI1f8fyI(e)V4f- zr@FVL6tJt&vzFLaZHSIsz-iHCy7T=KJw$3aR7Py@0}9TBet-xZ1MbkSLn2rTh!vJg zzzIvi`tIf12!02?Lz9T-ee?cY$Iu`w0^vh|A-FY9%U9cTI3(l~z=Ixt33#DfA15?Q zTr{3{O=~6Uws+yB6@(h+G46;6HvK-i2}XymUbXcpszAyl%QGWw@;e6U2)!mmGDsu> z%~C&xkOxUca}2!u;Ea7Z7D=Eo*1?hkq|6|gf)Y4N5ggjWj$?<0V-7;lmt~sL`HQ)3 z1_kl>ObYo45KtmHg5W8CyaN`W21HcRUuKsP$PONgAp>kgtyB;)^fhHmA1(ABj1-uW z=Oe`g%tAo$gm^G;#F(K$e=hF|3~m=)OGuI9_PXgj&_jL%8!C;FqB$D5TAiAZ#|0$taQ zNP{tCEU&_!ML6ae=Q}F5Ze!x|Lj`r~l)6}n}WbJ8$OH$9~YNc`|UsNgNe8s>yQYMb* z6QE9@mX?WszF`1a6JnsAns&U@5`5WrGYC`O!m~7kfs5(|CyGB?_IaOh1KDrCME2(h z4jb9e6MT*!G3|iHeFdchN$KmY;hUeOhiMIGJgS!5=fS9p|8W@?*ck{3K|~KrjY7{L zB{E;PDvs$Xkm#NU=ZufM9K2RJtg`C;s(m^pngwKk4N|te2#b{CLS6H)uY6-9RF%eu z!$|}I;x93R+y}9Za!3N}6nq4Jx~>D|@&>|srrw735@;Gq1T1|*bIBKrjwih(YQiAh zW$M~CADYk(TMAf&+1#Hf_1Qw)h0x8?UQeOEfhvPx_CLgI3w5R$E3wzE0y>5boLt%h zOOsiD>5tX!xUEAJmOvvc(ui{xS!~}(l4>X$#Cye%5Dh9V=R@fyE6q#a1ZqK%p%oK{ z@#;|HuABpm)E;lp~3+CMU4C59Xsz!{N`( zzV6WjS%pz#Rk=0kGJ3jtADb57F*1{dW*^{x3z^p?oO~z<7FH2{90|1qrqyzFa ziv5NP2y`j-(^95UG5lhI{3XTsIM>YStWOMIP>}zD)*X}%NXCkGI>&ORz>*+ZSg0F+ zQgr(|6lu<4N-!>_7Mtjq17?Jr6bsW7Oeocmx1N)Tqe1?Ui8vT#*iXeljLi`~y00g_ z>{IRw-l}q|3j?RsGl|5O<~=6&DRy<&RgsEA9ya)cul~Z+LHnjJ*6)`&@9EgAs_jf0 zLuep)IOY1aq_n;|O?WBQyXWmXCT2r_U3xml3Hrj=*%90Cu=6tL>Yswv*}!9>Istb% z-o`Gs7?dQ3eZBk`^DCbeFNNIiKh7a+Q+1)L7Q=a09(BmyURLk#Wjk*3r|R|c4w zWS3^3d@v`Ci5)OtjJ!72D}H}vCUR}IBy+Q<*vs>oI;}Gu-Dr+Yoc-YxMN)LyiG*F0 zrO$ISfY`vzhT|WrkOkbI(`GtkKHBr-fGFb3o*Oi{TVd0cqN6mbGu zbHk=G1VCT-haa$~-0MR^XhaiN+lNE{Q_z(KDy1(#;airuRad>c;Ei=DV?tt48q%R5 zJm-y{-Youg^L`<{O6g+hTPu=jDv@!hfTfM8ARG#^!g+x1l0&os(y(7_R4#$J9 z<3$A_Ay1oO>?dYZVoPfN z;tNpHLD^HCPVxF0B=WLj|A6Nz%mz)m%)o~O zwZdlG=Dw}kp4AAT+d1}bs%Wc0v!c|0Ndz`K+#u>F@Yi+94ibAL>v|a@1q7DTNlyAa20ExjX{vwUUK^+?~L?&gX zhzycFfw;hg`brdWEJk98Oowg!U0B`|L|%e}cOO50DH7OsDR8jgV_X3^U}lKaWz zh6Uh#7#7+D60MNozuO;Vol|gS(Yi)s+eyb($F}WG(s9zUopiioJ3F?mj&0kvZR_S# zo%?j&*2}C_wH{W@Isfk)gMnasPaqKtPL_|}AvbHNXk7QNC9Qx{x{sJ)!#Km?#Kx#x^z;0B|3?oDFnO=!FE&F-wT zN7y$$rN0-NG2^CzkzR4?OC5p(CQWR4_18U;aAG$oRVKYbl%>$J>e+k%y%1x*ve>J0OM`0V9*Rxls=4q z>h=oPT>jOFoAAW5a8aX(VzR*wd#m~~iNe(E^@I*ezAGtSdRMQV57H=Ae{fJjV!whQ zNoV#O+a@TfrCF+c77eeF?ghGn>RmGh^Y(2-_fLvV2IBc(*}@q1T;janBLWYw>aYQuvLw}sp0TQ}$BKwJHSv~u4jb@c+gAV5g)EHE5cR6?DMazw zN0x7L)5baBdW{VVb+Aqxi>t(Lh+w;3x4#vHfCf_1CN+S4wHWfLYTx#lFr~tmTkU&g zqa*d~6FP!0EzDP`O>d|woEG3s`-i&M>T1BiF~tS@!u3Zd9JW!4BZU}dy^<69$>+gj z+XW;zVIn}(w&#K)i(WkbaZU5D(^jReQDD;XETormbY%Gh%7%KLs?QdEt0uM~B!~ei zvnGBNCa8*xl(tSZ1<D;ILrpOO4}b9z*~iz*U|NmU>U(6mxPO7exrkXNR?_)lNUd zg{Ju&<1(w%if&2m?b<;seKCXXJQiuY4a4T+yZ{>S^WmW>6yDY$J_KkS_<6MmiXmLMV?3<0Lya6sHhVv6 zjM@k;y|h6~7BNciI^k21$+I~3=qOdH8&U{{YIdDXl2YULnB3rsmoMCC$ z%9Bh0_f0IldlF|(&@S-Z3Bu3ILwf;S4C&Uvmoc53Z zUwj$Rf3!P_TyVHxti7xBH&F^3_f4q1N+|gvPEHSl}<*1eX9b6wVhHLWu~h)HXx*ty$uuI&!g-kto@` z;*w5pA!Fn`6KDqMNur&voB7%Opj>NzelccyB2c%-BP~J1O(>VRx>c+Vn5Ke?A-kh< zc}N3MFfzjRes9$tU|GhJG^g@W-wt5wFAbC&tI{}~0uOFq`RU&SADtOME)>4Walbvv zoU;g~MxYhgZIGEZsF+p}&BIvt;D}q3GK;hMx7>EIKaLO@J&(r+h^&MBb`QtbA3kSV zG3V{UgkoR<_nVvTG?M8GFgIn?US)xCg3wM1MXx2fsqb6sgE>Eduxih>l)tVV;*Hw9 zy~7;gis|t@+M6K)FSz%od8&);3L7ZHoGq%$y#Sy#B7ijpIsqj__FA}uFnBa;92?+Ad zd3Xu#k`r0kyY$=MG3^@KeY{_}e{r7Z*m0yYEqwQWTJ^v4@XWEjp+TD@duH zE(kdKa_SQa$m%);O+!My^cyg=uk@RX@CB(NH35tTZZ3G{{9 zH85)iMtK-Oxpos%ur_G+qAotJ$qD{!Bjz&O*w*MGBNsPsi>H#PG?io<^wxR-uCWbV zfbXxj5Jd+I?P!W*fuvUZfEY9c{0S17luAxNyn&h6%kNkcIY#)mX=Y*s%8Te+r8uZ~ z;?iSBR&8w$1II{VqWO#sCB?(VlfNde5j0R_JX{~(^W<$ivk3eJ7L4<2!9#@odFG1( zGzPW@!kQ$<*UDGfZ073o;WT7yiQ>nu!3U)cN>DU??9YERTh4fn$X@VsyC0OQZ0z#S zXI`&-5UJLXCvjoLIP&U4rW>viFqy`SO%5?I2=KfzL7}XxdgDoqjXyJ(1LI>(10Bi8 zLH2xKEZPiS7`V19F zKk+EBFIj8Vz5%hqTM~xtmI?gYrZM$lQ=l>+dBVK1|0r-1C=9VUxcMtCBmsA#M*KL{ z_od{cCAglTYp7zlrk>Pk^yCcam^8u1;F-o&7>zE%dp0hUj?pXoj5vSge`bco%<7si z@(zny=Ven*zPop#wDRZNho^#s?V_o5qbOKuC52280OTkAScz)r9ZV<~2pv+T*>wP{ znk{5QaZky$bq+oHSiIu2G?{ow*O!lNe{2C}q51~$o! zEZ7YbWFz&4F($KqU#HEyXLDf z**)MpzRStolo9~;2nOJp&A?Ezmhzf(-iX1I)=5Mt%Yvs8EL;*nbw?Fr15eFFA`?aFh3rN_rxf%yx{6~3z;d|hNv%~^C^lVlD zj(QYQAsw-6j5}KJ$8)6AbUPne$lk{x+z6gA9V{aDXDiLjl(0zf%v?=3Az&Dwph`_p zVPN&(5MA+6?#Z2zV2%)NXCExdtWjXJ02DGbL#Nd%QB*!iMUqdH2vD~8e`M% zk%^59vxKzC&{Ops6%u~}zfdiNXi-RFR2uL!u@o{1W3F7ZJgip@oAO5RBDZxkfU#Ps ze(E)OycAQYB8&uc!^jqvB7NVR0api3CUhW4Z%JFHj&+j2iKUgH_x`}V`VNG&1s<=u z=Gkm7rV7No^>#8P1{q}x38{5{H}S40ipQ;t36K8yVk7h&bvS`rgGEmYVK>pHeb;Nz zttRx=gO9-$9QgLEaKwh`8J&GKz}tTSR&CK^M(-*PZAbL#NxS1F_pHo|Z}GQx1DOJ9 z$cf9m-hqG%oa9o2qK_e*>F%8fwpxc`$V=JyA!R%gwD=(OiTQesQGxM3-qyihqo^M; z+z0+!9Z1knXOfvgtTQlrRXi-!F%>)cQ@hGkUy$;y?Jr^$ER)?n&&xt6Dw;4^MgTR0 zAG=(hEs)=$Cp7sq8jK2{`q2;wK^Leth4rP9!|Ow3cSk9KYUGVO9-!aKA^v;cntRHs za&BkEwe&YT0xtnO8`3ISE`O5IX}8LG42BKnvo!x%E0||d)Wsxt&rS&0hMu+hRO_hC ztVS8l6>%o5E|w*~g%H?3LgWi{Tsg(1NphY=$PR5-iuXyib<9!3)mC*Y{t0h$axpU*;}%5u%PMXH`Qz!gvm;$wzF~W==nHbVg^Y53O-826S(s3NkzGy zJUBf+`CYBw*}@0-K{)?UDe1?15M3|cQq3TKRY&Xd>siFz%h{b>*T?0-)6P>?-{9iz zRTuXcH$9v#j2#6-)>rwK6s89QR0^vNpD{` zwp@7q$eN`#2N7U()A<*S_}|s5S9IM!Ew|0CEmaxYLPp8m2r{yR)op0!E;mdU#MPEAg1904n;&VR=4TA3K?_~i5 z&8A4oU8w;SGzmdtpYr+|MaRMAZY6;iV*d){u`&KlXCwjkAX`9)3!2WbCg!vX?W-T# zj@i_tC=%wd6vrAnzPV;+n;zOYMF|fFrU5-kFG<)W3hOPdL^uB1l z&7_}nOqkvvcw0fdVBza=8p#SSm?IH~Q`vRKAT_SS|2;Q20l&N^{bRvUNC%SS)LrZ} zlY92BRGlAS?3P<7_jkW{Vrxma7mX}JP_F;Zck?NHvYgD={ZGLi8O{wt{=hCcR5&h} zyo*~r2$kBc*$Nv)Ww`S+$wp$>e$kIms*Mrz)?ZCjK&4o$h_Z{(r}S3c5dAFu$xm1| z3Npb7wH?!N;Uus?Ure!QSh>f8ft84eD^p!3?aU6qv&G<)UOUp4_sb#Ov%`($V{zSG zgirRC$lvhP-c@^~_eifL^|7_0)-eVUiO}8rH44z0%VmafbrOWaZI&W|r}$-aINFWf zliigBuvC?C5mOrUR27ySBql=!aa8N$RFy}EzhUHw`j))wU1=WPdpY& zZHa3@ZLAk8mA+&KSH3RGp=;Cm=|@#2rDV=GVFU-X1ud#&nZ$>FiDuz(f_9Zuj^w9q zW)4&`nE*(^pGU2;IVf(Lg8Txmj&Q#T?!s+Myv=XNV7I)Z@OZ0GOF zCy(g#jdlVc@Qi$S#Xhn+1tZziT{qF|GsKMC!&*bgt{REM?9hZHyJvN;4)76nqCW$N6Qa}<#xB%u};08Ss&g2 zwA9vXtWBJAmzHQGP%7bdidU+tmWG*O!Td*f=mu zR4QSpF|hf>Mwy`OFMcWl?PM-#5lhk1ASZH+%&Y{TXVX#5*mf1!S%}}L9IL$C3^D<) zYkR11AZj!%WJXIoy|%%;(^yR1(vX1w%RVaF?d=-*k4~C&aEeGUQ0|bifi!G=5Fwdt zSG~*hA}v>M0U7F|RdVwH>PSYI>F^|#%zBi%f*>V0NEFyqEKUka1eC&@^osHc#44nF z=K_8y>*ZhBLYL9>)1CIQ8Q}X+8Tr{Q#1~K&(~DhTWCirhSmZDx=||}w#f&w8cG1?k zpT#VvFRh(=TZz*6a4?df^aW4UerKIYu+$>KB3*;G%=390ox;HGvuN6hf^mx`Vv4wE zgNNi^glMr8=7R{B6l& zhq7xmp8au(0>REM3w#^Z=6B}i67fAH$7PM88q8zXWPR7L%VlEIP)W>*Hd7&qW$fu1 zDQFVx6tjg^p#a+g63FOiO8rTws|rq|w68q`*C6FICq@s~H^o7rKwbfuf`KpCuHf79 z+_$Pw!iT@xYiX<9Gffk~mr%7@A+Omiurq^VLZ~o%6J2YwZ9w{k=T!|zAW=h>)n)mY z@_~sT`(P?>PyA#9msKU5WO3Sh+3Tm{TzV_ITwDuW`h`@l#JA79w@v{$U3n#-8UpD$ zjHJ;^iE)lrNhfT3Y8V7?GN3G7Z|vL@uL0S5$=DrpNi8_@^~zpqV`Pe7oj!HLF2j90 zwj(wgkjlB>P+Nzxg=<(Pu;|{hp8aejOJ^HtYip9`$h2myp$T=9ZEmx0UAoFaKKF<{ z&KU?p%L>t-Jqb6fh9enBw?bwFx0s_fVonMFo$hrD&N6O{#FqZ=fY!W8^H7d=1 zCT&O2Ny3>XNeEJO29Fkb5hl;KQE4otqjz3*tzVbj3 zf4Z~ns)g`Hzq$ZaD8U0oC^IU|7cl1igrPm&iG*ML5b z3k@yJht4zyr?u-6@3D1uv}NG%mAoWUvc{ON*0IiW4)g*nwIqMCGV}(oXK@hb&MUvb zzXvePMh{luNP}eFBvhlDn>)j};Hzq+I3PnsbaP`qQlqUGC3sudPl%Mvkvc2cxa;Qf zG-g=qEJ#C(a$|X{&r+AJ@n% z8p5%&r&0k-fYBpN2Uuee_9aG#Zuo(|_!eeTCs^u)QDo2vVbqnfqE|O=TuwqNRk4#ro158-6%ON{V58>~dr-1vBYL_`DrEp?#DGF^d^)k%} z$W{w8!G0SH@Md~qgcS5IHRBdqLdWs= z?}Dbbm-Y1u{gZ*jFXTmb=yPLVy#Pv7?mH?0<9loTGh$~)N2O(fEq|oORA(_;VZ;gE zHPJOS?Sj9D<`B*}eZVRN8*dM9%_6(BfK9qkCR+0}B_?*}tk;U=`QOk$2})LcFw}X% zQVN+sCPx0BUikf8Px;BxZzSQxYrH$|JeT}r43QT4_whwWr4@X0D6LR^hOeG@n>+Pt6+dq z79lY-{)YfeWGf#NWMk4$wk<6=XTriYf2&jt6SXUA)kpp*a*ygxu1a94_dHQpMsXzC z2gLhL6xtt80Vdi&wlYPj+ZhauL?|hZ#FIcf4ovE zC9`xTQOVwXWr%GE8VDVtDz|tdlrO-2qq24e^zm1~&+Wg8N-+JJAl`(%vp51vN*3*_ zoNHL#z3s&@ziW~IfeQ!UDZU@YoAf6erI%fC5=Ok_lN6(c7}&<&~`*H+6&vJ0i-*QAh;w#q(t1l?XJa z8$O(04dGGf&ifL|Jqp?Ri7q0=0841Shg=ulw2}-iEDa_qn+T$c9>T--<2QKf_xdDj zzs=a0fDw#IR`hvl=3af4S?JAwoBbBrG4Iz`f(&0rY{~o?|EcnFH0fl3IY9!zPCG0B zVA8%gr+3L@Y|9TmIIdkfI`nV0(v7jclF%A8q0(BL4LyT!WqN6sPPLJ4iJeek%y0F) z8(e%@wvjHqJ*xv{f*1f;7a_~YGnVT21nCfut`Rids^0qADYR{b8ka1~1 zOHmSQU!SaUsx}A_+wa19KpucMXQ4NQl?>@YcjJM%#(GjJUG=GSyuIAp7X>9bhdNhg zh1F@lO4fZg8S$G$Etww27}YpZ*je4lF)e@}N2jV4{Y;(C1hPMxV(fK0NQ-$|Fv?ky z51o^Vi4&4wsjXSjm@Y5~1@4~;0)qrmq}!di=dNgWyu@X8#PX*ig$O`$F@@cHa5Zq( z&9hy*KTv(pSMOXC7%vuS$&Fbsq!a1sLrnwmrG~+pLQT8x-Di(;-QdNz$0GBkh2i8j zFRvNN5xR92Xg~xS+MuTV_=mZcZbYD6eE4)Sd67$@<*_g8yDww@AvPknk(FD`U3Q1F ztNmk?Ijyy*RdY$4e+a;Vv3D7X2=a)XM2Y zifO)d5*a)NQL{IK_#*N80n5wiBD^`khRNp!#Y5A((gDeJk+ zE>alw!SbD&NO0miq0nn|hV`KW06T_{Nnr=?Uukhwhj zHq8I9U{86rTLDddC4{b*?|okq_JsQ_pX#}c%D zI4*|-kas8Soxi@e>P1tWw3WXAOtX(j`B+3_43GSON%6T(X3Pozlhaq$kn19lztRHQ zJpisZTiofo?N49rA5RqT&(~+~AuDaj`5CwA52&?)KkcJIRG*DtbovCfu&*AD%zq!p zCpha|CUhp+2s*%hnEtPW~V0GgI{(2hxwfyb>cdb6Ndg1BaGbv zsr9Fw{06oT3bvkYXszF2p~t*bp+0f#x)&fUewR2TCx;_wmL6@Gc7cN4#+nibLO~>) z|GFpo;f!cvp5h^dD}%cKmx#=i3O&cCgfvy|NX{ja!7MHY02cRGa0n*^KYPn9o<%*^ zm$4bwi!2QH;piw4I+NcjCObA3gx#^TYf%&i7gogCW*e9+ewX_eERtrHMF zq|nJ@@BM-DQ-ocQx`f40^O*_*4x?16RsC!7j>~8CO^WD+MiN8r=gR6b zLI>?P(VE9qTgP&R(_5yoaSk5K)j9wb7ywOGcgU~R@mj+i7kn<1Ey5;>Enyd^T!(HB zllF#F)A{|hgPDptaK}nsR?xspEBBs)Cr!tS+?Y$!iX|tCi-B6JSwkKG|Q%(uilAyvAlhKJwM>Jq-?ASr(tgC>hoyBC8m;o;M((3*1HpKVTyJ6b*71VX=gwiz_ff;3b|a(!iAd6l2P8b3wU%`2~aUl)lK;B70StW@KO^3Bzq zbn5BplbcJya9D048d1jc#NucAGKtEo_}5o~7nGNU5O%ajx)0oN6!fxVW4iOI%+V2> z`mH&Ov^uT#$zWw*Jb19zdj$Hqr2O&*gyQ4+qq!X8HNSFHmT5i+z%AQ}xj zELK4hAU+7m78bY+iMq=YDYeay1Igb&q#uABe+;k-A>r;eWsDm=mmYASOfYYk>KMi4 zJci%u{F*PZ84=}mnXR%!ODXd^P>LGFi!rc&c-=OSu|Uq_uM0+YI0kS2Q^i=dE`(pK z#G^1V2t9E3XLeuwY~apph1R41!$)oghKiGFyLx27mGR*Dg;e2z9L3V=o{t zqKDKyyt`IP64ALwb=H8@%C!6+-4A3+X?U7QuITvImKZabbjQVitub72y}O3E_IW=Q zVL(7#nQ36tDqMa^LN6oyvm_W;n#B)S6h{N_bZ9m&M4XKX=HOo|L4SL@Dc5CwQL}>T zs)6F-(GH%C)g>nbGMy(H`8;3F0<*|Eyv{!FUQZFsr{^k znDo`v>)w(x%fYCz+jK?CDwj}GjbpQ`z?IyHsJT%MAvQUZ*UQ290YCUl1~D}J{XFcE zxJlIazM<7*kN4~ zfI$Zv%YvzyX)K{JAX8wiYVCBA3Kx9UVw@LLdLFeO7;zY(>2%zI{m^*VAM&f1#1efH zaR>(SCZnRZV(IVR5dBz#;7Nw1R5|xX4DHMX2gN45o(ca3X&^)_VR~;qGzr%hg&tDy zE>4RiA|&-qaN5$Dl78?o{&6Y(OhfU68YDqTxnhHQgM_v)pbAK;TmgRZKn4~{r@}-7 z1zJzN=F6)slpaeR+*KQ^PAMR$ju-cB6y#MFBB6Ar%{f?FX@>_UicXGV-np5$ghe{J zqcEX-@<5I&+8Mp~el&AH<6-JfVn|B+fq`F&htsQ&y8jWJN08H;=zgUZvRh8Gr@*L^fs9L{J;6noqbV>szd zf{tZN!Xa2hQlJx7UlHd{ZvK$=)w@c^>5?f*D*kySPkf3Xz=Uh2)`Tx5SZ$d0n3H0UeU-C{j zAD?2Vq9cb4ha(oG8t7?4jex4N3D5m?(4K5CozSs)A{WUKro`12O>-g6H-Zr+7`O~m zQXu3K;5_b68qd)NvN8?iPmaYL4!l(`ef~tbwCA7XoT}@|q0=~&OVy%Sfmljoprrzd z!(v%Kh^1L$H_)WP$BOT{3{53|{v{5|N^HsQN>0_a+S7sr)mt#_Ix_Gyb>%q z1V3gTJ3{z8xzHbJ4hs#|kf0z>Iglg;ZblIpuV+w=a8*y89YSeHVzb4yRNFmZxTi6-UW!S~Cf3 zGN9?%T%4eV!sJZdsyM}J!CVL{qa;_ZjUl%O&%tu@BBi&gSfy8lNasN=Nbn#t3RYz) zk*6TTIb+g*BC94-mb4H&-Cg-Wy+}UBPYT)UNHtzvRLI6=o&xosMz1y!vA-kD0yOtO zi?R2Pf}~0b2>_4ohMW9;A{Pa?#Pg)OS!WP**5?-#aV}e%(czO!^UWxTn*V07K<0=$ zcZ@@p=l*@zn-&;o>0p?Gbbc`uN;VAJy^bnrw9`VJoSt%LV%qzG8@hkOQW2pJ=WRGW zTaAeCydaaoNBqjHNMbW1^sXu*{sNgIVTukoeXnUkxCOLUwY?m^P2=(zcg$B;3+wP7| zrjdXVgb0kZB+vng1(7P0EU)F>vdA!J^-s{duPk%HWT}PfQ2C}9+Lv!00TBDve%Dps zcpl53O%DkGdhfJ;h^k;Pa2Ch%@mNQ;(pq>5uS7!}phJoEX@&k-jedHD652U(LEc-; zH9Do5;JWDJFFCrQsc)LVm|BcJ%Nb`(dPt6Q*ek(d#9G+cr9P)ng1eSLexzD8l7#um zs|;xv1x9V|&>9iF*6cIy1W*HbflpSY4O7Zp`WZEy2Ma3VmUVa)FGCCyV<2ILEJ7e4 zas?{rL1BX~c2uf;NpnN7){tgpA66-Wr*5{J-AQrgY9W?2dcH33K}vF75`ne*bALTA zQ8(QsTdMu+6B-DUa_ktu=2bw-lFZap!E$>VqciqEpa8hI;AUoR0OpDGEqze@w~ezz zuWxD((VnC#+$kX{GL9(uNN1X8Rqo@CX>DS>Dvl;>(ZzgS6H7V(>)S*XDrjvqbC*t+ zmci*9Mgfi5m7`U#PjJMw{(Om+HfyvKr7-9r*5>u3Fo|EVeNRzJW@BxwrL6;H1dMI- zQc~Ksq?AniFiQX*RMcv>aAn zwIj|9yKFUoF_wkTD^GQn>7teqV_O=|iPuZfwE^J_XK$xbGRAdANkUBt@23Nrblrpq zM%`{Yk9s#QWRCmcJGJ@?vaD*uG+=VIChO{+B3RmkMgedjWR z%&xm;{Lr=ip0N@gd1>?sj$OPjESw+wC_L=EmcU`}YE2&?x^8(2`sMVWA?v#(ujeVe z8eiM%l^kGL1gGlH+``5A$-voCUmh*+5ADxSkDIHe|!lzPY5SIK9zq!@$gtMem3!(VHp)i<{NSajnP9*IZqVsr?XOq;3X(N0sqdS)Jni5}9L#))& zxjb{Ma}OmUA}u+DXIgDBmRL}u;Zes!Fm79Wa`}ZwlH?0^VD0hGy8K_YZ3uL%nxqA- z5f1=(0L*K&w*9;Ir~GHd!1Lyn9S8GeteI)*i|M*r59R;?5&?o~5GvusE6vYaf2T8= z!2l}|wo?4n7KS$Vp5HHh#^EBofXAbaR_pvXUxVRrD2RZ*zI-_UIpnZ7Uyxzp*9kQ~ z82ZO(tR}Uk#B!Lw(9}ho>x<=O5up$Eojd>tJ~Q8+2hqyp@Z~V#UvRRG+j{n5JzHDv zG!#+TTJfj{WfkeqEF~URC4AF=wat^f1|2b(n@Kx3pYyUg(|5!{1Qizt zt?3KqW61!4OUB8l#=o__*OzGMz_r-ZT(loe!jboqvcvX2igZ*0F{s{7Db-q@ko*7+ z-iQaNG_av$Mn-um`F)$LJtsp8jxgH;3-8%N(=04^BAB)e?Sy>nSojzW_Rr;GD`R6_ z6K}5i6MCKLcPnH1y@2Y^8@x}QPm|A(m4O5MNwygxG-fpZdHEf8H^l4L?t8U5Yog1y z>SYRw{h@caHgaDjO;!$TG>s+2>TCdiSP&HbHrp;8b{cD-1MRaCnd&uapAuR8bj#+q z=XLaPn$FS0&Im8nnUJJ4Mh*N1WR9un>4M<~Q}760=&7KJ{W z5`rNNWi*RxET=BLOisH;TY57|cQbs*cGNW}YQ)X*cRgk(Zj(SbBEF{>G$cR|1LHcR z9r0r8BJSFyk@`_F2Yi}CsXryL)4L>HEj(feW7sE|55<3%W%|)K1=5*^N|+^5;{YxQ zdcLlKyW4@;K;P3+Fr6U_*>D8CaQ!0PME@#{#0~D1Q+1r%=~OKtwk);iX@C-nN>(EC zVor>H?e&r*47$68YXmLZ{4YSbm!OGPZ+QI@jdY;Ik4g$ldEO5SXMw&SRf-*kt7a)e zEQz0kXKWfYr|qd{>!}BLRy;<6uYd_Q3TuLn>Uc@*J&%s`J{WJ+%N$pb2rA2k$!d&E zk!8^Q+HR{yE`lAcj;v5C+_Rl9@h#GJM$G?ksVm*(hPU zitnU=rvvMa=e*Y{HvjUQ*Mo9mvCyNyPxbX-OSf7K)QJt&bIV)2@oico*dU#}qm*kp z5F_=zIB9hFJRZe0LzjcNmJW7?M=645pz|oyqTV=$Mv-f7)5jrxURrlQZly=fFxRBV zlW5rUf*ZGpIzT2K76bHeaAZZTDQ_PioQmWThm5zIg$SY9xWWRCK;_UG1^fN>esOVK z-oc})9L}e(s!Rn#Qk0lwqf6U|p$i9^gYuR8WZ-~;g4}lZdgde!zA?={0@bkcx<8TC zHPIPDjLJo{^6?-&^4JU{Wjy>H@>vYYc6w3Ml+ynnGA94z z1}x8|e(rtnuP>LtsK6WME}>eNn=VxUk_;iNl#uMMqYBd|?zT_uCmqv8-wXq3U29ll z7=WO~S-USi9qmJ?rp9tp}Z{~VBkklM-|>Xz^_lQbHuUp|<0=;$kUHsT0kFHIX_G3689hs-59##bjT zq8eD6fd9)ZIBuK?E=c|Ht%NjydViCkPwWm=ZW~%rDUMh2-}QF<0-LdcMad-_9y1zC_+s(njFgZ4>I2XR!SnHkC zYSLjIFi>!@ZT~i%rLjc2jz})9IqSKQ!Ww;$IuUqtD+@PIgb48Ck+zj!NL%#FL#jT} zCIl@qIOG6IeuG#BRZ%_ezp2XRr@2Qe5yY}e`CB1ZA)bFE+}OjtIlu6v==D-qY0L}3 z^yl?Ak3WaeA^v`mK~L(fA^9fuWcD3R&Q$NYa3HzY?%EGqwfuX|OZR9fTLl^?(g4_$ zALPcIY#U+KNbmZL*C*xuNr322%TBpENfxarQWSuQepe!^InYyT-da6mNhDR3NhRrx zrnYqXhA0gP#1aa@OrG#{-9`$(K^(EWBOb(^UVJqEV-KAm$6@79{3IcN^ASfE?{3;e zXVbyqN zf+6+ojjIT}8Pi^sSZoV}Qyu6C*qO49T*7*xuZdy`eYz02#CI0Gx5(eb*G(FVYrOS_ zlyQUzW#ENts{|-$PBMwd^I2zSJd0K4ZN>l-MV1i-J1qs=EBbqHQR90=;jvS!ou^HX zo?WF-R(&>^sHg_A_KVVj3U^KJ*8TV0^!q-v7*aH$z-iE5r5zs!X1R!`47TQ*Vp|Rx zpV7ba)ZAep8yZ1Mg*LJXGtya3-#e(|qG9B{!<{oIXJ0%(a(a$XPg><}r5s%q#3caw z+nqA?NIvwor_=?+xgxdbzOQ_7XJrSSQMX3Z|K4-{5_zk;X<^d6Qy&)!;vTh*>yb4S zX6B1!%62_KpD5P%^oB?PAbfWsiUy8FAFC|rB4a9E_HzA^(Uwa?H&AzvSr7g%0T8sB5-gVX)+MZwPrg!A>6 zN~$I2wrmhzUqwZH@7(RNkd;(q#FRpuOtYY$*yWY$T*dPoRFp4IFZdhD?N|>U?_E$! zLNu^N%fnvtSTqBtI8FIJ@hn}R2mPbWb$2Gx$^))CyBGQL-L)EA7EFf&AnqmIZjXXX zQWzE&bUzO#`GyX>e;>J*DY01yc#eh6S~l+n1HQlw)>k6_cQeV(^xqUH3p*EElS(I; z4iw-zH=+f^%<04mvm2WP&2pDBVp@K2K(brM=UvCPS~%U51Adk1pYtno0dnH}LMwxa z2ut)~*;qHX8Ek<*(?R`=AKIvPT&v8WhCKTEoB>2*jQv{Fwcgv0plb)+k0#7?sQU%- z4o~bz`TRP; zai+k8p*KsI{L&I(jG5}(9W-oafG2P|Vma?n+7xqpXvqMa9oIxvQ)O_&>+MqCZuXYr z!hztfZTDV4D-wh@G&}H_e+6#bcvd0qDC?br;z0VPG8Gb&#HG+hE|0#n;aUI<{T7hh zV39ET;HI{*Fs7C;!^Q(=i=Qewdh@Vwy%oSHxqc&6Nsi*K+XY zI7pr)SJoBDS=U%5s)WNMZtjnMm2VR!EL_N=Sc&R9$F{GaUmHlGiKj}VDskyLiRAjG zZ)~RUaW%klFWk+;AM_c5R5rH2bFD=2=4s`WP0F2z*O8R(!+VHvsK_jpi3KRPP*Mr~ zHy{6)l(Lsg;sn1FQQ3g-m>DBHOB5`O*1bay=q3hQ|GYI47*D>rh7OxpB9eh4=)^I` z+8y(;Iw@7IY9wj-HxK%0aLaYa#rVPu z8uMDe78tBB-YumnY5luyS zc*iYhBqeRTyaQ(>rSCmqITFBDg3A&vj^`#xBp>J~?%7IZ)9VoRI1QaAQN&1uuzvjj z;Jh^22jJN0;)i-p^@RJ(5uO(Q*m1)0o6}6-L$&u>ZG^9&M!3be(j5Q~ZZk{xlTx^u zpcKp4Ket$NlxQ6V0H#CwWJw9YFi<)y;|;meLGu-SmvL))^zvA@|hG+=)|9C$WSrtK72!Ye*uzdax!s36xXkm@;02 z%HF)T7Zx-u71C0TsK#zR*$-JWOl#}4E{J!Irzm>y0eS#1cyd6m-%7ic`muQ|30Kg* zo@8A>?tGQa;$&p*y(ILoO3VPtgcQuk)!?;(Tf`Oi#>dV?<^y_GWvxpMwnMjf-JFog z%E&ffojmDKr#onBBpP&79t>BVvdYb2Ql}9H_9J<*Pj^{BhT(BdR)O)iBJb$C9gPwS z2Ee~}7dmAtodj3|sS^D*k2NS16Hdn^ggJ8P)2ftr4lk)ozZZ%Y>>}Y^(V$^c-e$XI zWU7|LRFWT@k{3_fpgV*|#=l||em^PGt{5-SNPL7UL*tr!Ed5mMp^nhI;l104VWNGy z?J5Lv%a^kL5C_Vr6C83oe7^*>I9~a9S0Vlsx`GEFRhF?*mqZVE&#%b{cYp4)X;zgC zusZR$jUyT;Ae`knB?0KEo~_wCn!I0pZ5~ORXF+%q)dMD1-cl!bB9yku1$RlEhprt^ zyFBKS6kd3nvNDTHixzpCVP*X5t@d%b97&RQ|jn4A>)t+s82slYCad`X>~5wLkw!zbrbd++I_D0*wd&R$ z$7Pc4J6mKykljyO|GN`_R^_ z5HP?n5K0g*aALC;PFxX*tXfhFt6dY6q;O&L=5r9(|;Ia*s}h#Vo?qna1QQ3lgle4E-t zia3QoLd;nj;ta%`MEOX_pNF7T)AtcVP!MKeS#Qb)f#V4I)FNOGvyjSX22S83=j!R{ zub&kc1sThwnyxv;fp*45ezYASIP6@MU1K`$B zs8LY1G>sQpLjibF>tfPFJP0s% zIEHR1Y7Ey=W)mlYYp4|IL{X$dz!+>1_YI0`g>6T)G)SPy&6Zms_X0)@H(o&%Lr<1$ zyC#}~8ZO?CIY*;e^_0SO7g6lw49ci={U)AqRD?AF#2Tt2wvRKvRRJ)uqcB=Fp;b5M zu66}ujX(~uf7iwiIu}GT>?D=}mqeXF>wfx>l8vzPaEE#VD(^-v-Bpg+Lsd!X%FISZ zCE{9Hxp%w(|1IJY!rfQzGZ|Er6^14@t$o)Bj}t3o1_sYpNCkbn8ru6+>+Y~0VrW;@ zRMk$;-|t?}mtDM)obw7|mgite1ri53nTkK1xA9Zae@x0H0t|pJ?#mNZKr>jd|5UQ& zbRLrOr^Qb22|$2DGa&l*mpCY~gEsX(KlDC0yHfj{0$eJy!={%K!m%}mRd}X5@$zU|uPj_j}!4Hsy=G#Wvb} z)B$W#CLQ&+b0!6Dp?IuqL?KgH>OP>e>0SlzF7e(^=@Wrj%=#e2T(YD4I-)5Hb>XT` zx?f-%+!f_U`gRj&!W(*YZFPLd(x5+%%r8f!*GVLX4z1ZoB4hhV9AC$LSoR5b^r(x* zf7wSUm*?3&q({BD6BoK5dFkm3-D!Iu_Ju8YLHHYgca!BQGF}?F*V|+kr0;t(O6MEQ zq?RM=Tdi`NI@TVb4N)WA7d+FYBE!=n8)^AI><(lqMGc)B-B6zD32OaIIl{e_qf$Gm z-3;-7Cf^$^`ugXGrfY8>e}2*re|P=c6A1!8$EX!7lWe?Ib-4rQ`Ynw9K5iZW zlkd&ax}dV~*?y>p>(7f_%{f$UkgCl1mgFj4`?~HJ%)M{dNljN~sq5=E@f^S@$Ucvs zMZbXLLd=(n+#V8r;z^b1t5}qRvVe%dgn{FDgJ><@AYNZPOMHfcmts&|rk95}f0g{q z<&1k95tr+WAp%ax!QueWu( zitjcmsJoF`b9;h|y}te#*GU7apGk?IJwJN4pubDC5a3$o#Zs2iu&uP)^E%4A{I;ex z2xe?WjOll^B59F)JA=rmv}C7_f0>a1r4}%f;$x9=1RvA8!(;dW8;x{ZdgEc#;G>6` z<2~Ro>ccKOy&(|LXJ2SuKdZyn71Yc~9=CO9rATl?V!Qa<#*{v1E;tOmfLiyo9*VN={C(GHu3yBe(vW#&=`JdWo~41baG{3Z3<;>mnPQ&5&$Hz$G=A&>xp_r8@h3 zoUL`2QVpmqGt7jv^CBowk;V{Qb~VuTDpH1p$VTQ16f;ny(dg!?kJJYUrqP4EaYpAT zOQncw^Of>Y^AqKvg)9;BBzgFGz%L5KV|f^ob}SFuU0RE0!Scm|45mLAHdXWH6A&~o4x3b~fzf6_s(yp){S_gN|syb2mc zo~QzSP0eDdP=W5WWCWEY%%L*$ccdw0SWHFPVM}G`@lUFbTazqBi6bA;hDun8ixk>W zf#gGNSlv`j3KKxNAhKm)|!r_N+x0;S97HOe1EtXCxhjJ_JfP1QFV9U z?2_ITN`K+n@uusP!kz#Cv5TRugcFlUz-bPU@G2XTpd=*VK_i3#xX#O3!Beb&XH+z+ zXoOsD?jjw7yhvx>c6}@;T%m@E;tnF6Wv9RSHGLgQ1|NU@s46f8&jEey=%y&38lWF?zFhAwrpfLo{5uv>jgV865#S;iP5G-E=5<6!8wmxS5 zRlu`o3>AEN&?ZUbeiH3Y)8%oug+I-g{li_Iv_Ke7)5nZy*-4Dayu@+5MDuDL>XFYD zZhwwSDg+F+L!L|!1s8C3ToS3qphzhKu}@FC@W2((VGY3w4FP%BJQ(fsasS6~u?7(@ zwNkhfb|o}0++kN@h*YGuL>^FhGkHwzmPriCs4zGl$&o@$pS~GGXlo*sE17n2cAo@{ zAc~IkiydY2lh;2f@>i>9Msb;)k~yI`D1RkHf?%qI)NKq3g;)B!uKwI?_q)(Y0EH`! z$kJ!%F*Lu$3{eoLSPamg&K~)5R7^J2ugxX{jJ?-QJgsA>GP3Kzn-pE|8zqaEsW+yX zP6xWet^t5nB-dim2YexO@S^l^mn96gMHUOJ-PkKB$Q)^{YpRd8pr{C^`r zo1)Jil5epnJzmZQ6Da%Y#tVax_~WZGWCD;#n)k$=ol6VK8Sd_Im;IJ^cCJ9xLAHtE z5_r;`T_<>^@9bXu>8uT=Pyp8%sZZ%#2yfoEM?nZ5rf!77Pp|)e`NPx!A+?ymX6C9+ zwK!ij>volzYitmV5sWs(I0T+E`G0@}_kVX3XO7`z zxhsL)&%)J@IcG{FPChrDD1@`Xgsaj2>*Z0v{e#+*T1$Z9ATY5BV|{-HL*uz`isR9* zX~DqV9d1Zvcsx%gQWa!k#sp=eS8vBM(Lxu$S2 z|I4R#DV2gQMPhog1FoRQPk(lbPIoVqdF;tfWqzKzS&!Z=6e|?Sv@Ry`crcho@tsPW ziI+>0ljg45Vm(t>U7|CQ%et`+mEr z`evCPpET4orn3v{^jM3wp&()!pLY>$c_QXv6x$}u~Z zRW5Eai!SVV>D*lUrcv~GvUh4rh56NY){`}$VJb+ zZCMwOWk^@4!50<@VS5M#4I;sKqKR+LZ4=EvjAzY2cx*CrJfjq7Lg~oNF)#1F{%%%( zvIL}=kJj4fM2PX`Q1q0Ws_Os;V4U^R}bxf@Kz2)Ri&)BgAc-a zAa=Yr6ID^jq>6y}V{<_I@V$c=s#<4%3AVf<$m5)*-r`*o8C39y{kcpUM*A+L1HZ=m zXsIH4<+=Q;%pZYC{y_0DG8JkEgMkqCWZdBjcYw77YwS-{^70|Zyx@K`{2oL&=&4-O>-Cbo#O#4(bTrd1EoU~0*T{E581x0QDJz0Xjk#{ zY>S0&WTKMaLxL+tljE4laJ(2~@-X@n(uF=13h|nA`IK{S^DMSb5Mw2h2>;(Wx0AaU zaqceve9lE}8gXur!tu@~N@oxAGAS-_Yf*kXU0r7A0kw{;Ko~nilKD0}ruFG^kI2B> zpfwvR!x9lo3ay^e3q)-791**Jf$+~Ndyc{7hEJK0_Y~GoDNH05Ug#DAJ|h_zc8H*P zEOm&9$PF8$e^Ex(25h2@r&+Wc0IeLD@CDTUqKN2I7aMn|VqZS2?|}zGrPYj3iN0k6 zrfQE(>}H_ldZ~u_+PE9LF9e#QLd0R`xT0Wg2=bAQsF! zuH2LU^l<>4;{drC>fFae=t6x4X%)>M0)|88j+2`eG7Xyth-IgGf)W@v(+Il{pF3y8 zXrh7%U@%dgTa*lK5-5jkivAzdPf;SJ5Gk#&rSQsOA&aOvWgkrWxY1>2l1` z7t7O_xXYRh;a4J6SkdHvry30_nhN(ES{2YrMbkq4rHf`mNL znsW_U20>8zS`g?=XAVW7t|!49Zvx$QnkDC&t^w7;Kwz$$TcF>6>66dMKtD!v_nd^p zH!J@nld9y!Cp|YvP?^quW@s3kJ{Ar>BOH>*o?i=WLVPKx(Y>yFz2!y^qC%zAlj@Pv z>iK0rAxZ+L>DjXS@>cKqA=CQ*8?}0y?hGQ7=$}CY2BVk5;&eF{`@l68+7>odB&lcm z4z6C1G;d;?BViPOVCju-@CFJzI5@D1{H&Qy&z)6FDXW|wqBVZW`WXCmQ-9^)!DZi; z+w@{1rGNSOVw=58mAepX&{R*&GG*huxL{(yXeFq2%g4_?&czpD&C|>j-d4wtP3Ll( zlUbHF(n}g2Hm-{-4deFx$>;Jt7V(Isn|#W>Sk_~bzI)w&&am{%r~q6%{TdtC5uGoL z3A_4>pJ1+Da?+qM5{1#Apd@=nT?ip47HbL7=HqT_5%tIXA3}XQ-FYsjYxRs?e)j8E zU2XpfeI1Nwu-&|9M4JhDkNi}o9W+7GPwXIl-DcDEKW{gy-){WBzX6(-gl}bTWOHjFrB))9W+U!f+b>os=Ip8GjOn*xp#AV!RM>nH_^Zn2;! zYQq{YvjLo&YfIx<@EBnEg<>3Kda>M}Jy-mE`FG&we8ew*B%+kUJInRi z^H<-!yk36$&M*pwxFXU&AOsmA#YkY1dE$>tLxV?JQRZncfB42SQbd#pj4$7P^P{0M zf@mgGc>SmA>$mnSj*-?(c>2=mIkxMPQGx_#i%Y72>KM0WS6aCk;fx0(?yKF-Dh98U zK-}i_dgquKVv%=mC>mjZrZetI$6a3?JS$kiWzegvi^j{9LInxys=n*4)}?#K6?lzi z!)MkV3K7hMpuD$YKo2Z~Gn%?6QM5(s;EQefUN!g!S7A`-U`)7C>f%* zs~i!c#;JdN~ zH+zFMiL6C)tbO`W83p%cd&t|~I*0+k#!j1g1>U-!Wq6e6I-G_(}t2j<+R z5mUo7(g@BE3jFZXn>Ta0#stEY4%FONb>5fOFaaryiHHvFdhbq~g5XZ-oU`$zL1mVG z&S4#LTIi9gmtZA-me^!GMa+r)vZ{;Saczy|kN`5);vf2EU$hU09&P_#GCa3)IzdvnktuzY>h`-<(j;5^JiX{!dHX zHTB(8;;yXc1r5BQqDRZNjog-e2?gbCxq316Mpak+^vwKXbx~Y66~PrGLh*goZ>Q{C zvoELAkNNIcx&o7c0WnYrp=l<(xN;H5OiVwkb@P52!~1fEme(`Z_05#C>zlR=Z9gL{m8!@&l7@;XrOvXS#1g8dn7b^}Ek4W%!bv2a&L2B9%S!U>i$o^va;pI1H&krqBIHbcD zug`yHP9r3qX0vtewU#n!{oCDfYUJvn_hmRrZ5Q@OczN91+|*xOObZ{v5)zVR8u8B~ z%Uq3rcKO3pzyGXo@5-6JGGDfyF+j3{^Vj6NI3mzNoT_mp5$Igp}bmPIQLvT73h!Zx@qw~CwvVrQ`0pu}@JF|x} zqF|$nd*$KS9(*Dy5%b&M_HW25oY33#HQ=LO1N1UHv>wP{DTungt)0Tu1d30>uXqgq2_egS??w{wt3lq2&`g}q1#Rowj@8%$L( zFIRD7P8(u$1p69T~!JPm|qEDF78%b%;2hkK5& z;Ey%}XaVUq^TY)uG*T4{%G_n3`Hrc;B?=0f>TvmGJ0_iW%uxs=pfVP0Tn>{i3GN38 zYS1OeafD35lbQnUcq;9G!dy|hc}GCh$tmEhYFPDs@raC#ZYZIA(~acQZSo>a01068 z+UJ)NaoW?LRO+-Unalc%hjPi|I_AI0&k~h29xjB!;dfhIR4e zl`ryX$kOz`+y)18Db(BnP{CZ|V9%4XV+r$<&82h(!7K*tI|8DAt2rWsc$C>Tl+hPO zA6giV)iv8J%U$j{1&-e~9$d(|N?%bD^su<79A-eS@gF4sn0fj@(6N|}ePiHQQ!(hzZW!y_? z3i!6V+qw{fC5%OXFq}PZoE;bu`75(SAWBbLVy=LF3xv|3u?mJAQw*;9PXwCVEjU<> zT!v|tNgf^H5)}MSrJBqjR)#=X>Ye$nYrJuisI;YhI99FSzBB+}x{(iOlEIg-ZX04P zBZ{9oGhzZx-Z->P0EN_>*T^&xb!hCI7r+4cd z(#1eAWo~4b{qzDG0XMf9^#UOQ0$TOAJoW<32!FbIHE(XNx@`GR_jdd^f+F<|y*_YN zRO{o%AM0unRk{|#Z*7Ff<1S}YF=n)H<8SRYq95Ki<>9lsAw8Y4D?f8$3(#xVQ64s-8C zCT+lWaG2<~XX)hirrBk4H8x^`5u&0VzJDAqJUAy_IF1$WzVN&$Ba13KoGq9D|{na)|2U;w>SlMB@PHe*4!c? zcPgnY16(_PhFUHg<0NU8h6zig9zvQNQd@mIF#+dP>qL8pco ziIS)JQ*vs66a*y-Q^hzjI?dZ;qU1FHVe2_Rs~3_WqV35algYdH^F@BYbcKQuf384= z2LR$gq(o3K0er|EW}mb|7O?rpJ70(dl!%4%<=ulr84xr=#r7|Y#V4=DDbbpVfaj+< zwR$;chQ<(WWinJ2^@Xz=uP=zAl!xZ3>$Y9gQVf4_reTF|(2^{4NOviD0{ZWs)%`|&QP;WEPsl??4P z=;5|%%iZ&8Qr5e5)qVY0J-ae(?7d>=twRh^KoJ78J@(&@Pq$-bkgMq%F9h}u#(H~2 zsQz`LH3SSlV|@+MKM7^yF+|}7u??B@#DkxayDdt$L1ac4Vi2eq{+HUtUNl2~H511} zHNHe!^i@|EjW!-GwyQ$mm>B}suP|*S zuilJVFSc7pcE^4-9pCUuj2UPm8H{p#pQoP__x%OSUj=@b2Ll5g0XerN0|V{?0ra;N z1_QPS1X#BkrZ{`cM)-nk?tN^#&A zg@G(GBIj`*=bU?oZ)YsyGZy~g-^J$a?b+KIk7Mc2Vl#Vjb@uFQ?q)voMi@1_x;g7! z;4`jSX2r}(m3cS2+MGSH?)>U|cwVW|^G;-%33%sfdG_SxXU~7Xx_b3>cu>nsS#IzL zF0wEv7(C294t{?5=H;u`ub+SM>dSw<=_Vg<=0a!#vzXb1urL~5YOC-h%qN7gIMJ>t z;-Jl>vknKJfAQuru4yxsw(&AP#xi3ijx4IpUEY@0>o@}(+8eI%w{>3M#$ll{rJ2Iv zavR26#-#IUtSx_Ti#k54Gp1ZxZ(Uy3dHoQ6kRnr_rDg9|%c`5$doR+_ z$_BU0tV$=lsfz+%=8mPcZmPHet~0693G($ijw#qI?H{ZaClwrQD3UYs?Gooy!jD(K zkkVuZ4t2qK=3M+`SvGB5UhmpsnG9#S8fCEjaxtJ@Lthg%jIzB5*#wB^Vx`~f+hz9TXEFm-N$rAmf!qB8QyX~Sa zt8F~G5}B72#Z%6h+}JX2^SCdOS!?<5STfUIn>6%rhg)UBCo2`*>8%H|#}u-W6xhzM1i}XP<@ty!h%R{JH%5 z?009cF5^7E1`rgJnSs=Wb>O5C5r&D7cG^BVOwaj~W%1Fr3l!_uksdA!b_hf zye~20T;^n2cvY>JxE*E)Jo?!5oMLkbK2rWN_%s=!j8iiGaJfZiC`*Y{)k{Pw2p6u% zBm-DYkM^+26~Su0MM!{^jHWC;8lT)~9^%qy4{7${;*%SQEFRZ^Y(9w3J!s*+hn8wv zpre0;kZEvp`0B2SFLS^`%Q*R?Y|DII{v78}EK{6*ijTuqwH7I)KB}AcV+2MxK#KVu zy9GU3{FHC**2SMYVsv&yjNAYvi2$NLlbr|tP;M9N-Ll(<2|Si&|0|@_qJFq*v(+cz zR|8}!L^|oSr?|9bJuuP>5!?f>3P~r9%QSz7>um1I?ga_Z>&XuJ4yFT+T|k^iQm{Y@ zM8Hpyrg(4w=D_=r&$7$ONs%zsH8e(>VvAB=>eyw(}>CyFEm!0P%lI znY=$g@Aj2O2m7jvc2{o?kHfk*G~}=eC&9J;JEg23Y~a_|01-Fme++nLy-rXNeWZh8 z5NW8|p^Pv+66JM52jvOSciWqMQ?AQA#~xBw~yohUi^G+!?3qI&^iK=p!i${h1~2r}9R zsj=PWQIcq)x75VmlJx*!*?~;zs90yl6PG?mJ_DH56rHcj>#LN}rr+=8^SpnH3dKPf z5R{BX7=*qj5mpy(cV!oQP@E`c#FViBTBnSqGv)S;HPVTba_%m#^G(qvlGPxwU2;)8 zl*y!)B<`z@JHX*Q?QJ00nPG>qKUi#2Y$_}n9PE~ecT&|Ju5^@$AscKUV&yz|>%$Q- zsJl!<4F&5!`S~k&cqBI{c!_@-N5u}3RITfmM!(A$!^P<01H>427Cio(!Dpyy=R{ zC`8?$F5D38suRI9se|Z2VNU1BO|@QE_`Xzqp<8ZmkNC(yA>sMZtl)p7Z@>L^J|OI| zRLF@HyWs(yo__D+2`w=c1;!9gJ-z;=hX<7Vbdh$%9dL^sDUtuE zhYtE?RUq<0$)*SF`heWUtxNQBcSxH>oq{pGPg1w3HmTHcyocvIOpiguUetL=u{ebU z;-fwE?F;UxebKa4ohE-4{GjXy@!InlP{eNCX--ge)}`#D5>yk_Qc(E-?ZGm@F$cgqs(no;N{Bck=BQBB2-56znTl{AA=#_R96M#Pc|?U~P%l{D zL->0duab-#w4ZwPki8bW$x{KOOp1!Syj|gwOprQlGxUd%D)Estp!78+ zJ%*(5G2%0Gn(#DLzfzIv37x@RTVQH{MF%E_IuFX)^x#zXfGU>KrAPiYIZM=vl%V>IwJ~m6g89=0pJV5NVoSYm4y!Di)o2kj6w9%ILB-*i+l3J(NjusTL zi{PyqqUL>y&w+oQ+D&y$LOFSi{UKn4+G7@wftzXx{NLg32#X(2!RzBq8uY!&f4m^L zgg_0|16222Ne*Ei^iAkh+iumM!!sVk4aPK2%e^SK*cDbPl-6b#$D!}phdbb9gJ=g; zPqHYoGU(9W%6mOR2vIi>e?mtKOKyLoF5&p}B>uqm0*rqpqc|9VP=xWm+w=(WbI?io zcNhZr=GIb5)Mdb%W}2Sh_z(`@_@JGcA{W<_3rceEHc9dm-CN1PFR%fq*7%3y2FU^oa9GEItT?X9A03{P2+;Qg zcufHecyE6PHxs?q^iK7I7_F9S&$iCD%^kXmX+oi@PCYgycwYk)*=>fV)|Pf#{Dd48 zgo++rPfUmpm>RTboCRQkhywi;`c)|sf0)qV58Y$VkOq(7kpAZ`Um(+2McR34o)(R% zSvp;@jjc9NHF3t!zOhtF7wsa$cDI0R;e=SfSWbU4Fe_Pb*t3JGQfPnTPGSmyyVFCR z$)+pxSnZH=D|8EZOY|yzRjlt&I_SQfzh7a>n!xhp**lU0bVD_AV2_a7&dS1452GvY zIGjrN#nF@+ZH_cogRm2$f^WJVdG}qN-+$MXKNqO-qnSX3*-@G6Gq4*;tEW(WQq=$x zve19s8&wSeEcrbU6+GBcRj8;Won&`&v{D60Y^0p7R0mui(zLq-i0MmaPd>#k@z$hs z+?GEgGB`R&7fvyjN%Z&Pj)}gThwajE6(ab--H+xyt{nLCp~cHeP+VLcl&_Oj>0s$P z!SNuD?h*MVmjiorcQ~L&WKZ^!Ma5+GyUu^xwzKGk40pPN;&fzG@QWm)=8JZhdg37~ z6>(wYmImR`D1BJ>YxYiO>@T{*O;|?d4c+miUR|JKstHdKmbS5&5nO!G>l|qqRH-(s zbMiVT5ti!PmG1)xh&o=$UV~6racXl%|8zP5;s{7}Kc<}>aOEwrRCn)9xn69SWln#^ zEY)Mgq6#)bK6$b(e?X3bR30^lf@Mg8uT7 zTJ_!?wCWwm1F~bd(Lz-Biq@M4%ArKtsO**-RO ztzko{`5uvyAuxcj>TjS^Wo-MV;Cz2xH~EoVg8JD9@yDHu681yol8`oBKZSK5CSooD z!M0r$2#9AG2?(f<=I4*l{?-v#4?zs1h42Jo%kuY_HxS=m5rVB#^$zUk=%Taj&<@}R zlrOb^K%R7_gBsqjJ=qQ*Z^^moRz312$(uI+0o~TabkTu@_Xk~5ydW4{H9~)#kH{#b z+-v**{K$jGj}4-0$R3!kq3TQu2GAX$9eizR6L~{KN{xvV85?kUKVwmGF;Dg2JZ5aw z9Yb;Os28WUye{%3=2_UCr`-)wN{G|hjItE038kqY)$l#3u%1*Z*h%_C3IKdRveK!H zA1DO6(1u-dCr|d@XzOff#^ZlL1eVogrTHKTLqS58E!ze|3rf{=l&Oyc7D?&#-@V}H zTt@c5(UhSBRpXH$!O{l4PhS^6-Kpqu3F}V4H)q_TRX}TmukTzR$}M_@hkgT9Ta(un z1AD>fyV%QGve&zQ9x;WTQPPgSs`Rn|3S+lhZuh(l@l-p4z` zTa({F7+59`#i3+`I@@Y{kxmmn24PH`IL@}X&2jUgA+FeH^YNRA=v+#y_c=jgEMV1l z>6;2M-8Thx6Z)hUZi=@%C~A*=xdQQKW3f&(3S(qlO0iEr#j(N17joh`rifg_zyAR~ zu?PBPZe(+Ga%Ev{3T2lo8v|Q^+{O`hUKe=@kRLG6ODsi0v2QX#9&ANU7LgQXwSi$^ z0fRfk-K8~`$QiGdU!STzs+%)Cvn$&P3|KaY?4ypazN)U)$4ObRNs0gXKWEFck7pkz z%svZ$%$Ad{FV9|FNI9vCT5~NYmp5nb12(DaqLLFMWKma>%jMaZj2FCrczXH68LtXn za|3T(&d>aMR@74J@aFlu*Y;f@idx9pKYn-d>gDFzM^_uP?r`&qY-*F2Y#f;UiWSrsm8)y880XyYs83 z_`{0}R;63jy5P)&Z%vJV?@R@(PF3|}$_>0}f4OKkeLJ)(J0C2Nv#`MJU?*fnDatB5 zyKC)3Q!rTx|FE+kSMXj{%kW}*+xA{|HLt>$Tq(EMYOEI+Pl)jCZ*u#AVOXsNjicR5 zTuyXR8&N4cjsiheW+Dp1%aXfSv(hQ_WSYM9M|=xjP^AfLl~s0ssk~q%=ckscKoamj z4=$BSBS%YR`K8M0;kD+L3PPIbN zgx94(jq6(J0{jlp?d$Wi7w2y#+kV%cz4&&*&R+Z-|Mm5|m+;5=UngIjy*jt!?vn}eqeEbQ&t6hS#G{ZJ$>Id_gDBo zev-OC?*q^qo3xxP$+*7lEvev@D-gs?DD4^{il#)>pcS1pA zm4qkRhzFnFZtuLdq@w5R8!uH3eBsmpry;3uW~kK!hN>0p+M1yRD-g^EZ{q_7(iR)w zq$w)H!tn3%OVg&+;26f+mEf(I;OG9sOoSPU06fCT*zghQ7FF0^0 zbzr8dq)~A;KPoKCkP3qoOhxOmBNhsx7CSB&AH=mFRa_daQt@mBC@Tvh!DOn0k^X|uP0BZ<*T#zqiFv!7&Nk~F} z7E^y4w#Eum(l&0|`>=~jrA`s#10j-A5PRRw*3QFt=7S%g78LM2E`l#bPaOpVOaGiZTr>cV(>JhWXXgs- zoHDWporS3*Ai;P9iN)=@@3wbKD_04B0*8nZ(y|+;Ln14P-Zd*P5;2kqc#_dDAhOaL=Es-6$SL094!kf$NuSm_mk^)r-x|!Wm0xYKkZ4f!UhKX*PWW>A#WsU6T({yElJvyxHxzwvU=F=1@`-j&UO8u3CIwHN8(?b1+x#z#fS)}ds zbm^cit?uk*fw6LONgn{xXt`Lsm4mX#hjM982&$k{wdX((r?^(J5YTL0@ekk_*%xi` z+dBsnK%AJQlK8Uu5QrQ=tsId zmf?gg+4{RIuu?Sw4eK2QHy$*2kt9MbBmgUq85qtet!={hkzZ_^>qRK%ftU{1Nfn`C z=^5K754-DD?eyOBGbJOv>F56Cx>CV1hG0;5E+Ywh`*!H&JMS|Ux>y*!>8X4rs6_t3 z=^6_%VHfRxW=l&utcN9ghzyI!9MIFL2Rvn^?e!M(D{ICy?2?M2iYV@U=THg*a|Ad) zS)I`Aq1}4eW|cfe1=G|UWEi0#!6?lMqawIedr4x*5z9iBJd93wp(B>}?GNp2>oX`o z>XK?lv5Z-lREOCu03cxSg>{}OHRF$I3g4Vxt5Wkg%S`_ zlUM?Zn@v7nwLfhG)+>qtzcfdK5Li`*RjOp(J>yOAD;h80R50G%#_O6J;(2IiA;ke$ z4%@tkykzatFI%gmGWTxq@d!*7AVk+>v$-e>dh!mc(CES-!9gLVEy+PQeLJJTgIR#2 zG!k@wZG$t{g&>KnH{Om+sVhUq<(8aO5?jcP-s|wrQm8o_djM})z#1et*V-$AF#`< z4;cavDXD^S$jR3IhoCW|sd|$+=*!H#Ui|0!Nf7=-Z6rhpLkDCKWBek)7{bnhZ+gpr z6*AIWH&bZ@tvr;*#>GN#2v;w~bU{&+%e|b_*lscR^it|Nrl&)|)=HPr5I%VCS2CX7 zxOiXF_z;B&tG6^;qwgn^zLYXzmA7b!?polW)Dgw#5uX=6KLxZl>$`-1{c+9 zH~FaY9;!N$oS2jV!z}gaR1Iq%dK|hpIWCIzt0-Jg3J!*|Cvg<2KjsEP{uRwQhDl*4 zOa`QLK?Ki5NHO8Wk0I2NfA#Y=oWUEh&#bV4AX6nwsM3+Zxmk2Gh-MZwAUOelPDJqR zK2S`=!{Xib^cLK27boQo_E`2fHh=*A{Jhoyt%k;fFQR&^K5T`ugE5#%6-2PUPv4PtMIA zHJ^KB+_8kmH!(5#BDW&Pbb^F`*wxb`lYwwefRviGIf+`bPK*ED5s4->KjsW-)Ekv|)FXmO&nf<|o)Any;_-Zc*iP>7uTLi}+(^v(Ar$6{ZLX+2tF^GZWsDDT+VLngE#h5qw1L97e-LC2hW0>_T&h zinTHq6ArggBIeeo%-S}A=&+6C#7^wD291ckV{Rge6p$IOdq}l>!KlQtVx7icA6#MK z5Rmq>4zSo*@&!KAdkL|BTt9}Po`lspoaC8OKd{`r2pvj99CGt`0#D}{RcsCm{ZdFD z)d3k2u@BQjlqae@0vgbip}BQj1xON$C(w?7k0)$=vkSJ<87jxT-)%O2!Gc9jHne%o zgPF(bQq~awfFRbF@z^`Vx_o=isN3{Nlg}~kWV(d6&RGwCG(P zuxrp)JqB?Ec4@-1A9mEBqaqvj34Iz%bH3SkvAhdA;C$~?f+3AO^!U1bh_l7BQpgfG zBx{jR7nFmDx=Q`+GYtl^k7zJQ)TC5ws{hL|#7TltA7m8$Zpe=eE=^UOkoRLrWz-t; zxFi9sDd_zz50EICy#{_jLoqkxG9Wlj`- zHV@U<0YXa2GD8fWC7n1umWTHF*`#@ZhyJ|ThWu<0E9sEsakF_isA5_8{;r#O;L%!z z(e8W-gymTR>e-@g`bB7Vtt!6HLeeIp5F+u&i0VThcm9Nb4$wr!f_tVc__H-WzAJG= zD(Q`j&(e4nRQA&w6%G_7I1eB*1~l0jgkv%|Ej7+dcN zN<)tncE84d-gzHJ#~h9hUQ8|bc%AD-lp>8wIezA2t^%o1ony0TX5kc130>_QX_Af2 z*R%pE+0S))%7iMY~Rp9G{>*Zq&;RyL$731jqZHf!dR@+f8MPX zAkYkNtpJNG@z4L&trbz?v6z8*Q23v9YbA#^Xs54AvIpvA0Nxf`2i(%0_#8rUI(c&@g-J{$PEyEUemawMn*<$KBGoZ=X6j=?q`#~UZPE>8b7nZSuURc8vg)!^-p@$9NHA3;>!P`|SI6yX)Px z2-|ucn;J6RE7Zk={rl$R{Ml2*Q^f?VJIBU~Y|F>eMLBMViA;M~zHUjT)Ig2cMY1Lk*LHK^C8Iz7ay%CCP%9k}-3;rT(Y7q;lP1 zq)MSjYdtRA+Mb9Eu}`EEZW0|94e$h;4%TvZGls_eDZ=P)B@l;zdg2sed}ttlLm}T3 zC8u@0UmvQ$g-M&;;sH$v^2e1ZFnawQCE{zb?;*p`0F&kP+TVhLSJ06HVU1HD-y$Qmq!i8HABZRk4Y`e?&S{ZBX z;ZA1gXo~$G|K506L;g;?U3pD^;b}f8YS_(yrxAUL)qK4LR9s!MHViZ#+}%C6yL-^! z?jGE=A-Fq@YX}a(-Q6L$ySqyu{JfcW=FZIh?$26>?sKYk)l;@tpFX>5Q*856c^4_2 zp^{j{8e@2XgQb#=JYDw$DpVYnZ@0RqhzG68#NfRJ8+j}cN6C{Tyk4JLwY4lh#tt&W zAAm!f)fNGNlOO1NqzoI=NlTHMd4)coq1&UfLZ_84nxAwbqnoaC>TwrIr^ANHlpdlL zy?Fsqq0+x8u~f=J?KC^H=*)4{_qt?P?Wpm70>SZ*8oE>!9Y zB??qU`7|H3)p*cTcdiROplw!f-pyIB4=(G#n%PuEl5|^sw1+3IE*%0LoCJL3rnI_f zFWHP&C*%u(ena`Gz`<$Ytr)oeGEj)Uc}2FhS!$w?$Tv0Q37wANEFFWe z&27Bx7{VPTP8C;n@lI6n=YlYt4l+Df9@=8;t!oYQD@+;?XQSICO)ScZlm~zAW z+t}(N9$=#ow3CS1>CU+J^M_XPi|4Q&n_LrBc5M5orU1kvYiNRI&FKI$G->*=u_8jC zheXBtxq1K-dJGFa3z|mjE?G&83A=?hU{Q)bri7i0t;^M4PiPIqse-PJ?Wp=iYjQ56zB-}0w=E!hG(Zhn z4cw8pXtx3VZew=qmkX3*r=g_$Lm}=;dk4XdN~ufP;0Js=jWf#Dp{leh$vr)lDfF+88A%4?m#9<*Lo8BwGeFJ_=-D39bcgWA!&1># z(@qNn%hsZT{K147)b;+B1h_!spMGf4?ujETzqk`O$O2Z#rd?@i)n5A9cq4K%E%+K% z6mtA?0F$*VN*8(`9+VQEV>uTxfTmtxK3Nf5Nt0v)Tx3{EEf_Xii>{J@1zpFu`C62? z?-H_Gk_97zAAWjAbfgxoJ&Y74gXG$`=eVXsDZlAGne+m8%NfQ+f+< zeF5mcsd4YB` z&)}9gHo+5-v>2EfDn{IcsQ<7cC+00Wvo26MTRn6@{V=}f%e}Sr!#3ui+_pA#UTY{6 z+p%GyG&IJn=ZM49Apb{>maATq^ngDlTN~GnAgnzD(8yISnLQTYTdKong64GyJu3x*{$! zZA{6y_Ci#*3aHiy0(6H9)ptSJW$Y7vV4Lh+0FNDCH^_@IGExtkS&vu$#VoQJ9Je4M z0pJ3&8)WMAk^nLaKoTF1$eVW%u8nQ9PozllxY()Ckm z>MU%zXPq;;{;nRhuGd!(#RkJFP`_;jD|1zGb*-#j%XtGY5GJs1gqH=heE=@|cJeO+ zOpHj7eoT;bLjdTx(JcB9DMu*w!r%PLmgeTZQFx<4`r-InW1To1&z9UDU|JaW?+CrL zE^YX9Jhh?C)V^5M8nm~zdfp5#Chv}ETWPq*avecc!v}b_*T}N&X}JH&&}eKu=AM5& zX?yx#9><+iI$U?5*&`d{KcMB!XR`7N9h+u*xPh&@l zRt>fFvBbEMG#|ZCkZzaUZZPeHga({i__LeCHU{EQ;!bb%TYjicj=A5f&i$Y zZ`mCOq)@Anms)+M13T`+7PM)X7(O~a>gkTX&dlS?o}{U2yxv!u9KL*6$uUd041%5S zKm14!bz`kUs1*&(TnQb9=SKH%Yvqfc>Fuf;!*V0cR{1(1pcvbwBO(}mn24HmEAJ|7 z6Hs<~c&pZ%38y+W%<~BRra}k21-It^?F>K2c9PV0P?VRALTd7wso4X0iRUwPyaME#C0t)@o}ESEOq*T8_FDUYf&?6?24g z>b@-+C#uz~2Ay+WW*hAa0cmcZli|oEpoTzXUf^1v)&YqeJsJ#LDRkjMEtU*@<}p!1 z_j_)sC?i$VXE`5!bJU1F1Wo6AOf_gSVpH(^`gMz-Esp;CI7t~ZRdtHf(0$%L4s)-) z<*O0g5gliT;WWcso1kI2tdij`#yxF3OE4hPamkkvfYD**+CwS}{v;FYep+agQ{5W* zw%QX44U-1hV%;2&c@`Z$$#A078SuUcd~n7{g&DxZMb?_>O-gm$ukSz)E8!2Gsg81r z<#>t<3aRO!+z)zjDq%FKPB0GFtM7M#-g1hM4e$1!&*a>75I|T|9Z@cdCUooAnQsq6 zbx=#@F1;NBci(41_O_g27x3TqQQAi15(d+b(@Tj0lUD&!p1Xykg9mYZNvE%4}DJ;!gO_A!6*3bvY!@Rg+#nx$-6&UfI|tU1SmB*EVb~PNz4W*5Y+Y_q+>g)lLg9HOACK_Df>N7$V)aWt$WJBV76gS)FnJxZF zK=dnDQ64Zb%^&i(2mK+<65%F6G>sjD`%8ogkRt>Ehh6n2-O0t~nP&n0_S#(T-7~lp zJWPEj4((xWRDt=Hv-4tIk*)8Wmo?1^SlldiT3%jUCXUw!ml=Z6Hm5G6eoU(-+nI%o z>Jv6!D91dbwsx|wnZG5szP5gD>MC)l{gG@o@Hr=?Cgj%wWSXG|Da_QvkY}!sZi6Q<_AB(WCQrQlyina;EJA-B;=JxG zImXc|WwSLQwf|S5RAsKH^_N~n;`P^;`yKD{jQHlM3`VAmN(2o}&J_wbVP@C_!^u|O zBh&t^YC#*(RIaJBHt9Pvp4Wc!W)yjfC!l}o+6Rssga#qk`K}US;kuek#wJHIlV6uN zXY}Y3i$ZDeaU#d8m?*VM2PK-vTa-%mRJkdLu^*N%X;7CtQo|tio#)R}kwRFb@za!V zvG7q-#t3dXE2L3eE?M0z*4(7K>EEr80iJCja#jx%&)6k>05LQ_Dk+HkRoxd7@3UW>%NtPhSkPvpHV z$K>%VmbXlD`h-iFnS$P2#id`9(ju^$UE-xtEHu9BnNi=L457pR&`!&ROHZf|pT@mX zuWR9JfC~&(qm`J>fM%l>rDuYDhH#R<0DSyUu6(pPp z*u%zSkgf6|EzUJ+a?_}!{2lW9>$bHJ?GX0u!ZWH_@Xj}^ona~142}%M31=`M51@JIWWd7y7DxNPmuNjcz2mRRN|n7 zD?0VT3ZWYsqi5+^kTeS{>50WU28lIJvi>I+)9}outtiUx3@Mn%gC?Dlf<~^8KJOFy%Z6Am3wWP@sHuWz% zz;KUlT;*w1nq-1$TiMp6E!c9zj#!crdeKn?-yHVUh`bRb?HCf)SzrPrP|WW-LfiUJ zr4KL!6%0?+%J9YcEts7Y#a>LM6JXuEIm)Yrq5v5;P6Rzr=eb{zUjGs;MP*MApb;+%`(UR+4sn6Z(!E2i^)6}RtsL5n7_~TL%NOrLxARxsl z1>mGKJ>Vw$!2Nu3HE=2giq&YhXb6!6)k}I}tL3n2Iu{N)q8ds&s~gg!_xoQ>MV38h z*p3K{TB#Sb%6E?!k1p)D+76HiQ;pPA+qa0ptV+#TUJ_w@Pg}Q{QRS<_iV|9{aJ^Nc z3TReF$><<)XdEOyu!OCVgq>hef8`#iRhti8c3%mr6U>bg!?4csI;0cLbOq~}Wb&xJl>SrQJeQi+AXEn%} z6Pl5xWA!3hYl=8^!Kie_ak}p`NdS|pxd-2CdJ^pp=ze=|;EHX^7ByT-wNnnAu;i2| z=Cfa;uD24hBn-tKE4d0Ntt8?6P;5SeOJO(Y`|_w_UX+A@vZ$aGF~1fpkRK6f6ed(KzD9q%Z|8pSMqr zW`$Sh5?7VPJom_)#YR}I#*<=_@!Y*4ck#y$6xTUzf$|a3FoslO&{FIG#=V4`3_&#u z?V(-&9~kRRC({pT!*+0Lhnq# zuv6h2E>&)12Jnl>?ZEj6`bNJ7T$0o;xO_d)1D}JcyT7B-LfDo9nco(ZsK-KCso%J{ zs}z0SEfJ}{*|}tP81Uy6gC&07CIZesFH}4S1Z*Hx!?9jnI3Q4(#YnF(aB1Z%_z)Hm zwus$|>uo4!QcZtONu5%Znd#pdsDEUq!ceeQLZx0~#4wN|^5F|^Wz}0^I+&#!&d{=Vn;#%?jXPG4PEI;sM+P(xFb08P`XIQtfJLlA@AgCBOlB9at9EN20nJQ{iXTERxQ9@$@Q zWwRNPl|8XD1b)zSY3l7e;sCfZe!>fwiYZNWnA=#6L{?M-ID*Ltz%7KVL>-70fGQec zUGlXh2P=%ProO?_ojy6XTek&HzbSE1Be0fH`hz;?BbVGqpZ%1js4Bov5twTCbSDtV zdZrUhD6H=ovjbCm?q8qsV5-(l^)-rJjNqoK2#_qB*UKiP#T^K4<#ir3EylW&40B(U zZObKXKffYXC5WfE4(te$u}r_D0+~NulHRx>LD|mgHW0>?28pNkqk*{?r<*=~k$DtP z9=`~OJ0o!~Wck%WAh(n)OZ*(_hu@4NZO7eVk;RGTZyS@pt+KWGA!b3t5bbB9dMXkiWlKkNgk^CXl9z;C5)&mWYQ+q175Jq{N)l_6 zsI7sEH6af+MpAMVBS~Soe5jZI)622-eQe?+8{Dn&zI$Mie;8XO28P_D4Yz6F9sa;g zWMXY3vBk=Gr6A8Qb`xp~`xoHBg??8~B&b#>tE~lAFv>Bc&cz6s zr?Z_r@`zW8R8K$~v@|NX7)1Ha8ZcnA#Eb8@E&mr+ni{;-&27w8Z;lQa#S2Uf=LL0SLKCfNkiCf2XQo z*h63T^!>ycYKHp^PX#6DEa)pqIRT=1?8!d9YXesXacy4-k4idcEYVY;3^Pncp*lQ_ zb|Ws?S$DCmJ&VT|E|+`#(|G01Ux7`6P{$?YFi{zf8*D5T-c?n8eh=2X%|CfMs}u}b zagv0c`BAmhg-C0Hh=F1J3^n{0k|#{x-7t^PIJ`3=N^a}fxwCkRzu&&4c3_b}jSxB$ z8HznqjefE$a~ODj?$789-MlM`#}CRy;&cOJ84`!?rLl^;66Co>@bgee8E zZ+xePCjqCxHr_9_x4YI|P;M8BygF(62{?b>LDxqXcCF^E?3_+WQucOCJCnQp)x%Tf zr&%epVkPUw-3DrLpd)LN8i!$aMvH=>(I{1GRWDvuR7f#nZ{6y?a9Oyi73-zXNaFh@ z9IR!}R;YtJBt*bCauxlwY`SLgUbm%1vt4l$aRhU@$0MlCutj9k_l=%`U-*h7jv^vw zGV9G=oOI5XPjNkcI$a3L!1 z&abhcc2RzXq_o{C=o|_e14Q90jO`l`p2|F*!1Ao0+a7_zMKqjvc(Fnej}BMQPo6Jc zBae5ee%8tO5Rgk9%{pqfQI3|42&@d{DE?q(V^g~+5G^*5ZYK$Ao<|-X!p4%6T{#Ix zi^%2vDkV5l)m6%7iheGLDPgEk20PejW=S+p9^X2}S#dfFhCAhv_WTqfZH!@1brJnP zZovJH9!3DV5vVrMUJZgleJcS|-Js8CkhP&@!6S^LmpVdseg;$uD>8^LUCw$g8s7;* zM9rgbwKiW7k%{`hQAk|9(>ocEm zc2~ZZ0~_y{3)+I_Oe`;d{6F|E7)tcX~>j701Ik=QULJe;PiTy0{uTe}vL z&CpT(uB5-yN8W@+fQGEsewXOYtqY-JKQ$NWZeT}(u=DCe+w|KnrqnTU> zzyN1$ocjVmApjcNe_89VA+Lzs{r!y3IIK4^Ec*$U0;12qj;zz3`^GUO^L14T0@3xY zXCouD|DgW>`gw9YCnI#WkH^npY9{Eun7Z8zH$QENcvvy_W0a>!|S!% z6Y&dF>Hu0en+UYA`~4&1KJW1+Dw{2br1Iy<|BG=#W-I=cFIJ3hqsf?=@u+~k=78KKO`FAeRU zE=}ENlpMW-DUIhdLK`nn_fii~JK`T0d$F}!CnxH}Qw=lN3||KW2>e|Av)I4G^JP-k z*l<;uNnNCQ0d|1N|oZ;k1kPEflB@z0WL~7 zr3w8(L>EH4Tyn14eR{iHj$0aDunOT=cw-60i^{WkAmVNlMbhV1MFppxV6Q9{_|Y%WXv`5Ov&^;;B{xT?or?KO$LPTK82GZ$T-YMJJue(!Ews$TfDwkKV<-`!o*n z*DRi=e~p7n`HE4wFzQS$&4;z)Uh1lCIdn7mRif@&6|i|F_0j?rUAub^=R$)iH*dIe zVCmq%lUaT1MYrLY4Ixak$Li@6wq48J&cFgBg2wypikWCUNvaiL*3LtNx8HU4X~TNn zvcFM%@)fG*mwHf#;8wy+6Z=`Ej{W(|p)kb(%esiCn4wd*>Sul3P+K)xT(RSg3y?}) zj~OxDn5L}w@bRRfEQur0i_NoAb6W=zPy!$SBzL0{h(O$92!8pi6I_+ALjRNM39op4 zggEe*)Gh_$58uxbXbR}{9h&+u_Js;s3YFX}B;#8mipAW?0qv({D+=(;DvWz(O%f>; zJrtE44mT+ADn>1qp{B9?6Oe#!@aX1biJnUug6OJ`baGRX5Q#iXAasQ^vA_skAo~vp zBzAKOgL8fs2LITfUC-6?y~0pdso%+(R8((2p3x+aH8kaf zUIrEws0d2{T{MYk(iKNA4!w3ra7CM|Sq2Z6TPfuGayOk8q3R!~B6*OCSqL+#p+7HZ z0ZIV%C2XrEHcEJwx`E)9?HnjIzzICV_}+pJ1#^KWy)yVzB}xCnRHBah`qt4d z2a-meWq)zd_(n$-^081(wWsbU zCRW9CFlx!K7L|51!kVI@W*X3&UGn{fCzHy|a~~{gjclEi(>nf*t<^6TzBrZSXBfuZ ztF^n(GL}dn!8bAS4XBLz#GkUi5Z4m#^<)8iB4;xwcv7Fe8N{X1a*an4o_vH%w_B`p zsejhDGOiVre`oT91udG=G&9#B!HEIFJ3GkZR_+F?64&j^Z+>qJ^PtFGqvZ}}5hrrk z8MaZityO?rVgVGuhPBZ}jIJNm%Q$mCt%rxL@eA--e*K)Pxl5(SMjmTA+QmFbSESUTY5Ao?~tnk`n&A$aGBX-tir=$IA>C4 znpWD`U#!g8Iyr@Nlx>>`1xMi5pcXKV8|IG^%^}ON6JKZ`yOIQ*Qw22ZT~qZSkd>Zp zT?>nM3&zvxLKKfOMec~o|A0o*ZSF3m=T@UdQUz4|WqU+U3G&-@BE3TJ!WUd*MIvow zz;<&W`j0pQVU_Pi{TyIfT#)$fmfP=VwkAl$i~6#X)5|Y+&Ft%7(D<9Zn9#Dz6O37# z6?Zi~QU)-4oxAG2&d*oI<7%XeF6Oz)?5?>d@zeknx&8r`Xmv0q814pEW?z8O@yA~4 z^<9(rvG#~;M%;;VI7JUrH^WIvt>u*)6*0|Mi6IeOX~$p;(F7@4+LSXV19 zhwVo-lU-=)xKygZbFD~R2C%rIN7Wp&J)fXrA-+oxp{nV3d6CIZsB9;O4_!~sqsOx> z@3%7#s5(U~ugkTEbkknUU{c8rW{PjQ&5V6|Xu8YVEHn!5;8k=mTWj>NWj=)EZ63-n zvQ_5=rd`jQyRDxSR_NiW*WLS<#nk83S$f&@#@(9f*Oz(NSnKkcLbGUViwm&eaokR! zS}jszZeckk!F;g-Ka<&Hm*QjL(bR!LJ2CLYCndDTx^z>^R2r^1wJxRMRY0%p!lj-} z@4WSTa6(kd5-WGG@u1*z39)E^*VHcvSZlWejx|Xenp;_Uh#>0%8pc@swz4lRU-Bql zqzn8{M<=$6m5`(MY0K@OA(`RupCNk`3d14koXT~Y>Up)@56cBTihAUu-R#fP)2CRZ zltLM0U2k>rYMlIk3d~N|h<&)rYrQinn`Kpef_HzBL_3|WeQy%HZYI0qa^cF71?GE% z%R18Gf}1;wxiXHM*tfE>7!dO70SMu?&IGDT01!g3ae^ii04hL$r7rQ#Vz}CsE#}!C zDN`MLN;9WS@VCsvi$?s$v^!Xc9JYzRsF}{&2V>9cgW()D zRKZaoW6Jxl2B{|}gEBn#quH(9ejic%79I=Q9~()7>Tk=)Vp7cZ`rZ5VcIjEzG8x!) zklDA9X^_n?;QIi)o&)Zfyqf3i9c0Ty=7fZ1jGMRTg&Jf{{tmw++4lOLngRC_kA!EbdnX?cZud@!sjC#k_@t)m(rHE3m>B`% zYhJJkD%n?XBs`<#4SI4bYv$E0&pSuNLNC&rT`WaWik#TMuY%qo;+cRzXsk!u$Nk}B zr?ANCm@%98Ejs7enJgwk{8GbMTQqfncAUYH+m^uil1Jfwhwsrh0kS_wPM+@Be5tDm zZEU@M*DUFO!CGjgArFoK&nRrl0KO~-F)BGOx4hshy24IG4 z4=;R=0?2d0rBMhQeiam!rjCdon2K}5!{aUuAE?o)8Cm$fZ&gSXnYrEe4)2zzU2C`r!9qFtMIOxPZ}a5{$7xwkEJhV$_$=L4 z%JF@7l2LhJoI}5)L0QX(*Nlg568{2=+SbP-%Ao}wT_r5a^m$EOop?DshDeT(bPx25 zA99-n>o#B6s@l$E-_F&eyx36+2EgF1Ah5Su8)?Fx)X@Ecv>VN~J9KsPqD^f4MdF4l z_V#pGZNzJsJcv7V28D&SNo&YkAGvXKapg;ufp}`FGX}Vst2ognLQzF?1w=6b)|5KokzjqP!4r^_*oe=3x;za5<-OB{V|ajr=EWhqUp9FIYKtq5cpP zSc2e6vklk{k+UeT}7xcEuQO=@?ypO$Z4joszfwshj}ePPRU3< zAcaZNq1QAFu3l41nl5LH15YBp$?bA+&9si{xOLEnFVVkY)129&-WUL*SC+D+}JKfgk=#IIIU4x(pjMrp}){ z;LY1OY}1o7ktD?x1Y}=@_eyAQjXd)kfH{$*aRfgp_X?_$o!fO!UzwPCb|SV<9xqoi z1^hp9)QxJ=qCo@t(ez}~*!ahCR>1CJs6ZzewbtYP?eYUC=m5@Pvy6yxA;b)wU{OM_ z-xXReeYX)~0k6!IgXQ|wm0uymHLASU_nC2JY<3|{Db#!iJSKcu3qmErtWpiRfZ@Yx zwK_gFYu;EZK*uS(*Mg;bi62Rrh-k^PF#c*3%~HZC zv~lW%$yeI*AOKsbJ4G1p{Slc|ATG6PzQPq(7l-}6fHi(=q+q*{zAE!PdI**ZS|y^C zBdM>?aQ*z8PS9FEA~qaO0VVTw5QrFtH8Yj#%jN##@sRIRB2NSiqgmo57|8SVAPWh7 zCc*tXYIWTi#I>fa%m=l=I5}vw-N6N-WNVvP$K0upv~v~BQJYk^?5lB+owc`zF0=ys zo`GqwMcR6;EDu|aBA{{sI7Ah8HFwAEE@|si7_qgcCLeCTS9kd7CZ>X0bf9n0dKdZ5 z?etUG5T=Gu8dQm^i`!!9WxIS^uWDAY?xVD7)(~X~@|)My{_O#G6~Qzp*V7c zTV_vr|7e<9dQ2S=gUW1E_Vy;V;SZ#FS7bk=BaFk@=u9v)s!D>HP^520d7lNcx>RBI ze&Ex#=0YdKuQ$_9pne3#pto2Qndn&~j6wA~k`SGKu2pA2W#OnjFISWG2*N9zJB~|G z=ZizKspl>JHiuMv=A%@mA1t<%%tEW{T6hw@R_&*TS*`ulwJoY#8fcYtY*_c%Mr=gZ zmNZ()+Ez)cgrT@swj!#8roR97hjhK#G5K0)zkiW&Kv7t7L$xt5z(NUItGu4nthym? z-=Iod=K@Ra)6kt=nbVT8j>k8XDL*`&8Qiz{hDt=*m6qV3h7_@edG}>64;yfVCSkFq zkra+YS^wu@_VXp(sDM~hIm;P7IsOnhOAR(PMmb?N?xyBcH}3~K&ZzeX;$|vS!UwQ0 zT-eD&8Ij!n=QKn>QMq1#1cV7Ew%NL_+yY+Abjtnuf}9;2?rG=|j4h+Nmp3-P;1{gX zr-gpTEaWS7v)~Z1;TWrKGosU*rjO8g9)jOyzqm)vsX1~_@n*UhC%=66U!PxGYBjj= z#Mq07#df?KC&u!Bbn(#qnV*TQJkAtq_tDrA;;J%yTMhjakf|g$_!W$eCz4z)TZ>d) zea^1-{aZ3#=Mjm?hKQ00o=Zd2@yxsL9<8c8JG(<${u25rC(+fE-AT9oE8-W5{fKA% zzYTpha6C8Xt&-0sAj7Z-;`YIE_b;R~?aGGBBkrj5zoXRg(2m47!b36>V;!SR_p>(G zq~6`fxV1l50`+d$27pD~7a8m9H>1Qe=065Cyssl^=mPYV5

kxm7$!^A+G_v7ii>}Wa?n}908m0}jCJ*Tj z=F^9-ib+%#;jQ1;Zd-RTNcGtfYN6N^q|E+9Bj zukyp`r%e6!PwtItXebK9pCMRTlzNf^^yj8rEkbP-)T+~Ygd2D&+r0W1QjM>dn`(wX zR2I-zKF|wlZ~v4tv5N>OXnyNh?_a^k(Zbc=?j04Ce?*yiC<(r-Jt;+2LAS=UP8B$Y z@c>$%^bWYYrl#`aO%bM=1QkBd7ty8Noez~n38=~w-GEJ{h1@P@_s>~RtWMfrHiHT4^kMv{+u z`4^9{S#GCQ^XU{=-pG8LHss%%ls(#A>kuNjB>FkF>TWQ42!?zbO5}6fQ`q0bmSzCgzg&>szda6PU8Xh1p#09@q%vJj-a^X^Cf>-T?l>wmfB zUHRYm@-_hkpq3i|V64?DuE$^gno0DV7w&nDu%e~kHOM5?dfBl4#xLiYaCX@4;P)8*Kp`@Mf5`lE+u|6iW_XI&71 z;{WI3KNAHTw6XuMU@70d=Q788#PI)rD&!wI_U~o!H};`}e~U8QU)6yHLOlFWbN^RK zVS+*r|2d3z8So+H>^(t7-@8cv?a4nWDRcv%1!*6>i~1`O|97Rl8$$uA`@iY$LMTB7 zOYilAd;HG%{}%E`)5OI)=s%n(@0@>Q_+MrF$6zcF%E`Zc{LVrN`usoVf3hU(F@*~2lC&3hxO_7|FrF&9z*;q4KP4$r|;$Xx1-=d|B63=jg93WGt-|6 zlRNvTPyd_-pZyESpAfH|z2}m{*1O_&S0LlFz0Z?uf6t`OKMD3eyORIIu-hAe&)>>@jW0AnB=R3@qjz%uGO>_b`{)2Xgjv<8q$X? znS>RYPs_``EG-ThO-lwbnCyNY3~0_>-=bYTucf|V8uWyL$rPy&LB%XULEF|TSJSC* zL;IC)WmByp&o^veC8Yg}uR2SPdM54n^irqYLAI~oH@d@K_Q~ZtgsoeNxo-oHfkuKYl~4qSm6vV6#Fy~-az@7aZ_pn{*h^Yi zvr0rkzv`^=JNlID=F`|u?wWa3XeE?Uf%clRcj3@kC1bijj>Z!*4=GtN>ceDW}+ zzbvB8xy_l)aqD!&@aJK#<*=N|NcVsix`|;QW^#1RlE7!XbX4!3TCeCc!F20nfgk6I z)jk$2`dN(Hb{}Z$h3SyOM35rNW@W~=ufwMuhwr?1RhoyDq>RnF5Bhz&YV!V6Wc6WY zB8Pc|Ynpq*+e+FE{J`QPWuht^rV=dQ*SSH$8lqDrhWS}dmgrWC9S3&R8R%$|$tzbr zZ%82>D)Rt11SQD5?g-@EyzlL>48T-FbBk@-0S)C@ACMei$_e>KZ21_L zyMN~0yqff8LGVlp3C{T&OgA0b6wtUQDR%@4ZcCNEFS#fmlbJuq_%=w#-;ZT(%EW%L zQaTW-rDrRjU})-{S=6nVO?rqrJe_EL0zGSq{wuWlgv*Yjy+f_*{_S4z=L66rcKlq~ zc#U0G#8(4{5*72>QvH^km6lK-7A(dCCD>A2$RmslGBdpP5n-ysgoqiDXJC^()1~8r z`1s|jD<1WFYv+6ROE2yvFKNz4JLWHQ_M@e<;8K;7YYn9%#9`Mn4mz|arVuWMP#5vL zzV!*FYahSFe(G$?d-G<7q22`cbHg8O>ek^fiI+{~JKmBR>*U(S5)yb*)Dzn5GxTFP zFzqzu6u9k*UUB^n>N#iZvaVXTf~v-CQg`s0O%%Vv64E|aPx1Jws;7Zt+EsO(7{&R+ zcZnLYpi98Zhj?59wHle6>l?Q9-Ejsz(i_)dctTZwqq@~*HLxlJQ~{VWjLA#wO<{tUVmCfPmrLP(+wqYUNFAxhzhX3Yp>E3DiC5a#!BI$x7#j}iW*(dsffcBVPnnpLvpdtmO zqGxr1>KFmH7FlxBkeNDM9S8pB*r$t{)?_nAyyy6e91&3RBXDg~p=`5wP35eZfj6DD z6Oq8Y4xeklM}N9e@%75iz!p@vcKk7vpRx7J&GzDU*#pDZUZ@%%A$KdqnbMB*JlQA2 zyP8#1CU$oBTlP8^ymgKk@P~tGWIrBb?xt3GJtyu?mR2j36&uE;z9&6m!QVAT`td4p zHphjpT^zl?0mm{36eC}W87{tEM3Z&*=F*r6#)U z@0q@742q?qY+Hk^L8J-8UA`W)W{-a{E&cB1t4N8E)O;Dt+`L!@iTES>xo% z5!R)%2f4lJVEXUCHQK{qBAlRel2(lBJcEkj#bGFt-`mfYyPYGDq7WaS!gWd;t69bh ztfj6h1u+nbAlhZFdAs1v?Tr1$oflK!yb6xX`RQ{4otf#gfXUpQ*?Rkylm>)`-7vP< zEmY01s`(OA%F8i3Jh2h%d}*R;u2AfzD-hLDPKwQwT)$R}{OA(N( zT1~4lwME?KfvwUAX;WICI`V(y_Ct(@^@lvX;DuI=FE%WZNz|_rF{v->rOb{xmz$ z=phR1EVJ3%)@;Xa5(Ad>;5+iBm6mhYp83Qt?^Al81GlpKj~Nl&aWRC39?l&!PK%3K z(|F5Tcw1N7d%lI2tp@NYa!gChwIQr+ZzbF=oW8HgA}@6R@FjTHNiW|`&6d3lzQpNt zD@Y~Y-3_q|w`q%zK***2T%~Dvi`^$u5n?U0)oz8c%iaj#yes+s)A~l#6O1&y6yo~c zS;;lBArPuO5OY2WUam-W9|n`~i=v(V<>rwBo;hp2IX*T&}vjtmQ_B$S{RKI zRlJxR;espkaEr=o(Pz3vl_qWMP>cH)eF5d^=Xg^WJY4GTXkT0Djc+|#3!yn)H#fZa{9d zW%W6z>>?TWWI%$0hmJy{z+%hv7%DrWc1PIZO15CR3oo6utRQ`mJF`CXK0JuQH*!n;>bQ7qzqk=VmgfnhN&lWjF8cZa6a1n;M6lheIT}=7_d@|l(Kb*Vesz$81y9Iu z(#KZDY)pBs6_BAv8}c0h5j&)Itdjn?*u=gh`9zi0n3GdACZtso9;^Os=qsj`t`14alARR1@>oBReC@do*qd5+!EnE4i zhNSAeZCyzP*#CgIQBl`LX!+|=S6NK784XE{l|VM;XP;j>9$dg>fEwF;!K=xKx@zCS zkIt^dVyO>xT)YK*ykpyRE~~$znj|H5KNdVviUzO=W!BftTnccGu{>f4?i#ij=O5TT zOvTw^@a8rSeVadItsx1Xn=Nv8VNYGQ{|L>Mu#te+2MnZ0z;juOBy;f;3@n?reeDdN zIWN9c{OPGHb?zud@?Bs@)=g>}Y}M$%UdY3v;%4^h{{wbFiN6;9qEfH0vxk5}9g`ZD zcrp^$Uw9gY;cse8G`=>=2wlPtTvZJipp_-H;%La%#~LHbbQRiqHeMV@5*)k5hT5vJ zx~j_ZM^J0uXo@(0QSni5hKj5v`|`*(IK<||vHt6D^#b230Sxc`SKrW5qpk(UKJ*Cp7G{Dr+*6abh zTI{}^N4Ia;Gcr9f{KfrCzv|F6`^YS;wj<49!}pA^18;CdPgW@ZkRER6RP&e1jNNda zZOLj%PCk{H^8Oc!d3*!c+D`)NiRdwLN(d+k4dLSxqGQ0DC2l`#MyH2;H?KDH#Pa|b z1II6@uBF+3;By#;+tAzId(m>KaS(1mM`GQHHihv3#IfX+eGx%RK;{M3Ov86*`Hm4T z;C&8Ilsk3otE6key}N-W*+5$5av&zm#%w^-eJRN%queq0uq|^sX9T8U0=|a7)($sL zjW%9}As9?(I9wN|mxB-ZgMV&Nrq}!F(Mz&}RcNt)Ua`ym<|79Gx!}sR>GUf8V31eo zXNwlS2xBm8W?xiD5+HX2uZ$Hp=y8S72AzPbv`uywDkU4>!X@c1uYH5_&u6SOJjbGW zMlfI?7cbVP7aYnhC_3{FPr4 z2XL32@){uwVRnS=j&C~I(P?Tnw`Vpc8FJPS zl$5f%B3*vYd8oIqfWDDzBZkJGLrgT>vw!Y|LXL!xSC5c5Ae(`Beoj;vNn~tg4b+rt z4aF5wvId9l08u%3G%BK4C0 zW5v*W%(r&d;ylPJF>1?;rT^G7N7e$V2BHikTM4x(E332=N?3auSJljp;mR@o%HP_N z0(1iORG^APqKtLPG%dVqA}zI;QY9uGifV~<+0<|NWe&b3XD4%|v-4D)^Ky#%AG26( z6_?Sr1QeI~1_V6@Oi)ZzQcAZx2LxyWe?lU9hbFxj0TrpzkrF};Aw7X4qz>uHq)euq znMv;~6JPEkz9RD?=ASjK$@UE|e~%mF zATIBVMZIx+A4Xz zs5dN|6TRJQ{qngn!QLC*nHS=-U~$F#P~Vkrhxx5q5bnQvVZ>JFMXGIU7VijfSrQrO zv36-xkmtJDQ%4Qn^xEhi)5Z+yxq157*cs!7yguH2!o*=SCk=OZQo$m zy^#rOVz%$Gdtt9#50?Q81QmZ~UT4NLLzz{~0_F{70`n@fnpwz9WQH-$%pztIGn`q& zEM_J%BN!KE2{VNm$*g6TGEw2-hOud)&{-)2AKIwfI_WjCXu0yTj6-BV(-iw+S|HixZ z>)&rpzeoMu9s4+5ams&xY2Ztr4cPPYmY1Kr681`#AP9lVe#$uI(SddYO9vhwv}lm~ zAk|>`;NgQ?hfEq0Fl67*2}7e_edpEeVO@qT9d>cJ-|({|-X2jt;+K)9Mjaj9^o!kc zmzBL*?ZJj#7E!R-J-LgwD`nyh%;Ur4>R01QUos!K8FE*BR=s~x+{NyO!movTo7_(~ z0X)GQW`e(&3#?$TnbdyDwhGoyuYOAi4-|LGd$lIht8TD~i!FB0I!7iBZe7Nw73i~K zAr^F+w0Ppx_O)a5dapPa0~g4a8~2+U!3HPvbq3DHZV0QaG8=P^CgmaQZ;v29NyZwr zCJktvf}9~l2xNa7%^$%Y*bj#cEqcxt&8~p>EOk9ctYR*Y_T;)fQOSG#(xvzLKE%Vi z^9xaBvx6^W;$*zbS6w)6ECza)2>o_L1Vn?YNoAyKuo;SDAPkZW`n1Gh#NbF|Xw~NG z(;?ldstHO38yjj^tdD^Z@G=IO=m|%l6bk)uRGXb+T0(#PHcf(RP4I%HkOmPDwbPcK zZG~d4DyldlQk4+o*5Y^U!oD+SDg?T!(dG$Y6YX16R)^~smR&}l%l#Gg*aaW)q>Ob_ z!y>xD2IFy4HB`}v?3N<3NDT*-xQzYlm3J>*$a7gOkobRbWW83S7q*XElIRQE+R6KI zDo*>nV@x&dgdB5vRvr#UUq_roQcPO27IaRKsEToy zP}qN9zDhyW(g~_48p<6RJ8WF9Ut~G9vW|^BsSzt~%23lfl25kk=xRAKGq6J5K>!^a z0EyBg~QcKvC+t)=5Jjx5;Br=!6^^S+39&`Xzl4}Y`Y@wWRASa z{2}b6uRlQ(U3NJ8mOighDORwJro3xHg^hpAl!pQsQlm+5+j&O{r86!oDbFrhaj(tc z$t^tlXzt_w3K7G^E<768dQ;Y60sF`wHN3WV>Beb9ro5lbKPtU^5kBU=9RE4#C$x2W zzWNGQ@#8ZBzbr?mdw2ix<%~~=EMK{t+~7&y4i&&ET*-ddGH%iQbu)%`0thO_7p;GG zAa;|9FNv@6IeB1$bgm!;q6KnQt|n9ME9IF#lr~`(;7~3nb!|P9)u4wor}!*NEW9Nz z!4>vl@?_F|#}>lTn0A-<5_RfIae`Gs<*r*YF#xym_~P)Vq$lY+ir7(Q;{Q4tyJ64o zzeR;WLWwKy4qM7X4uu_n_n?u6@Kk@rf$Bqt%bMW;>{nH}SGmI~iX1<1QEgGVZP~s7 zxDG0+t*RE$$%?)$4)k87m-;K>#6G9_#Viibv$wHtr(_*fihpIv(C4%vfvn1t{Nlmgb(Kmi>qhBUsd>?(0#fyun&KlOy_G4 zmf7~ypMnNxiL<%o#n4DZbI+-QSMSKgpTsZtruWXJ*GW1RsP{62P{^+`g-SZLuQ)1F ztx3>olw<}eBa87!YAy|UhErK(`a!Bvev~2J-~pSB9+V+F*$*LGT^x$Ox9}(W$#I->!i zxVF+iM0^RGk!CccYs4{aj~sInjfO1X3L&dhDIR63;qVi>SbxJt{WjPJ8%_Sw-kyMK zh_Y=KOEYt2`fZi1bu876Ct}DhS?k!=nS2RkskK^2Oc6HB@oijxY&3s3kriYrnM~Y? z7rsU&;yXC)TT~*K3t0(j&?Fg@DP+jN8N?2_cgXtPcpOjQy4~-g-Q5Xfm_=!d2VEg> z#b7Q|cA$Z*wc!}6=+qKc>2Uor7T@ZxxQX-d9$$O>Xzg*}uD&;!*pr@bPn+ZAW7!v? zj4uNtShzJ^Gh$m@KBa&7e&Mg*B9Dqu-;u5}J+`PKm5N7~I>B=#OS47U=KoB%cN(vPE%#a;(dR+^h) zN=w#jQuIpyp%WnqHh|Zzh^C+;a0wbYV;P@`BfqHJ4cwDlGQfXZ+N#&fA+THgI}NXB zl!*sgU*@y&=uWb@VhuzJZEGlPRg|__XusMk9GQR% za0!ma$>=7K+vI;Mel&UMD=fr(9QNU@FLB6xl0$ZqSEh}Z7EHcUcLMW{sCX=EXr0CX zj`Qdu$2U>H5x5dplL0u9%us16!EeAeYmVTK7aqpoT=2q5Lwg;zm1V0 zt5*$c*96Hlbf92VWu!$Cg<@KuZ;E~1_tC!nwN|AW19>utg@EW_Rd_;tK!_`FbKkj3lla0%w?6)?Wy)GfQ73lT0~=2H zBHLd27;<|0Tf5)!r12@u9b6h~Iq7FjBqeCyY~{o2|= z0%6|_yg`4iJzMKu<6%<`G{a$Nrd;2_&XI}=-Ds_JBivJk7o@1-u_rQ&#LGO+lw%KM zZa)5Y#8>1MC3*Ur67ftv8q6QlQn?2{frek}lnzUHEboZ%T{%vMK^t9xnuf{0-t4>$ z>vu~&b7Q5fbzr;C3?t(r=91YIJx-k^#&VB+lox;Snz9mihRLU@14juHF;(7C%y>DD zh3YlMM9EdkgHdJQcK-SD%AUjEV~RsNtyHu-ZPulycls+1;_T}@j-%!4?x$HMFqj0L zAu(0vjy1Kwx_ql$H+~WnsHSEF?<*$-o_Q$~#b;PqASD*c&9HHC+PDFl! zb3cD+IMHA66NcezehNG;uQt{dRVuUd%WIl}`x1sngct(i!jvhA5y4)-jmYNr2Jh3A z0{8IpJ0)ocvq7y*Q$r#bQ;=AkTbfl~l33>*xkcmYA$Zh#m{q`y zTd?4*Emoh(9m<5b=xyN7DOw@0z{eK3A|`*p9lW@C->t!3*!{1^uQ$XWUtc4vtyu-{ zP^;(;sm6fx9X6m3pfj1vK!k4F#?3syV(4d)u>fL~2 zD}h@d=|MGH!ok$3Q`Y5)F6QZ*reua$3^1(ZW>B?8IabIgWx# z=VBsIOj6((sC-++*Ge6rJmLt((m(wbchMWy@>cEVu`rKY@9#Bpn%|k*QG%|(ke&ow z0;EPOi6a{Wsd*VjV`-^iGJ$Dl=>d;}hB7L??4dvX`DDi1p(P_`Uo$MyRdif7PzgRos3# zL}jIkI%&ld)Xd&N1KQ7e@=bqLe?<&N;8Py+StzG{fH~Jx3l`w+VOK4AbwT*+WQ6i@ z0{^Ju`g?Gl`-aHBAj1Xnr{58+fAl<^qJ^2P;ux~>Vru*ww(jwxMr#o)0k3^N`}|I8 zb^&+2-(g@lG!Lv4RGm1T9EeKECs6KWiw zD)b_LcyTSw{Z;%ybmYm4w&g|Mr{Jv9N2lJqj&E4Wbhk{wr~yr0C*pB)dpJ@JhQw6C ze|1o;=e|ia9I|PX2TeaY_j-sjPkTJ^qZm%{usU^DYK?DMXfE}g-24smrfr{Xh!Hq0x|=0=j=^d~|K+W0ujBmnDGFY_30P+j`OOF6Cpl&%VVjj~9PF&C=21;`=t- z-9A4#aaSg`ia+q34V&CwH-~l|J}~>YqY{!pPGAE2hsXT8Vv9w1f)xGnF~4bW>{}eJ zcT5_h!~r+>i7XC%-rdl`h%6cYYq49vPT90@?lkS;69RwU?)>ID=q4%2D0U`Hz%lP0 zsCmCu=~67~T#DcyQv!B@_}rqpt*sG17_GawMe~$hsv@U78jF1))Mwx}^}R zxvFSOaBy^F=(=}<&wTR!#ruMyt#w@2+VG0)+rz`RZ?6cit*xk#?jrR96mv7ma88pQ zRATmB%%*?#VO;ABz76G3?MAf_rxw-YXxigfL9V_`3u=hqXbiVP{9wT=P`=On1015S zC$Nvk$BP{dg}bH3nkq@*&h$JgNu{)MLD9BCGPOg+w^E1P(UCECWvG&JYRO#F7omUbo4Sr%P-Ces6JL@%cf3rTf_M0w z@{;|RjL&CL;jq~hBlST|hP()ff@Hl`tA3SaJCd$grzxQFZgQ&H3p=TJ1R0$55x>r& zEK{r01mPcG_7QJhm1?sk&d1VKWx<22)xlm?8bj`P}Ra$6HKg z(i(rZ>k=TCHpt6O@zNSf4Y_JafXMj7lvFZ^^l}s<*x%Ludg_R3VHY$Tn)T1L{|S5X z^tC}P&JgVs6{C%!N7We5naZFRY7Mp0QNEx8pOaGCODW&KojR>HY4jM&lfk3j7~@L1 zSK?|x?E7z6(vu~FkRx{ZGP3s`qP#>fTOfZ2nmN46*26)m$MiF7(r*QS*ktm1-ec0Z z*nOo|S-=g<1xYCAuGWgJiHL~AAg1@o@wVmmf2B5#-U4G{=TS0$= z6lxVsw+gm{n<+|KQlr5dP2XuipO!FzglWZf`#5mx^plQ12Kl=D0CXTfIcCJ0QzUelGBXOl z$418=NK?96`pBsO%pHj7koZ=+4!D23-MWPT7im9fs)S0~@;5y%`O?(J8e_wNvg&(B ztPXH((*vA#`D$f+ZmTdKU-P^ilL9>6ihOL7w z-0P3RE?hd)e7ICd#p(QTcFer3ZW}!tj-76~g)=e*31(%jgQQe!lC|22pYw%H)wLfQ zJEtq5G_;-5l@o@tP>6sOokp)AOWSrh5@*q*DQu@+?HQR#e#<_Z1zMf)%O{Y7f?0Q-ZYhGJSRe#L|ByC!}eX&vcym zeX=x(%5;LFq8v;6@rK3vSl9us#t;dIAA!+uc*S>wcXV9=de_yPR;|?U0QyCh$!4sg z;?Sb6kg%jOrxrjFSZnLw`*W>#wtDY|Y;{2_;WQFj{Y~c@2O6tLggxbq+82=op{)FX!aBJ)g;c^8d}`J8HJtA`WdIN?yN& zrMLPkj^b>wCyyWfg9bmWWR1q`!s^4EA}*q+Wy8k|en;dp-Cd(&m1a`RqbEyI zYRoI%`|j!N3OERjp%p$=p61oy3BLLj+ue2q`fPKNCY2T8P4Rzav^4Cb(d;Ta-=~u{ zKZnbH9z5X!9q7Wg9J68eIyd&8Rj{M>0iBFr@1Ux(Par)l-xpomS{=>F=A;6k zjLb?ez!_qOBffv$mf7*4Q^%*B)Kgorn-wowE=d1NzJa-ng_n_`&EIWtGhc2nMhG$T zSTGnhS(`7cEA$3#=$LWDfjE3U?#ZbmwJp1px$90u?E&tq!Y4mr0-1$QWGY!oMv=*6 z6IqD@c?(@nT+AxEsI1Dw9t}{;<)%WckW4SChcw-5UgLkl$I_l_3F(IuaUnY65PTJ< z<109ebRnAYsS_9b!|@{Jff7EpLB3Ogx+s4(RS!|2LU{D@&0*0+_?BZ)LT*B= zIx!)sfCwg)K>FN^&(l-RJH@Kw64dD_B`HcAw3sLtMT{i8O@`?)bwAnG)(vn1F8P0xc_pKFYTV*&_yu+Ul zKj?q%9~}}JS`yM|Da_5JZH38bGy-RWcx^!Hyk*OkiHS5&IxaOsn~`_xQ|vC_+J67d zX&t4Nn45nd(`*OLGR!7szIoKoV;(h=SN0*bEN~^L+=Mm?)6u+p(Ebp zD_G3LK8?pKS~Od&LYx=41y;mai+APhJ->hD$aL}|89;avs#N?;EXd7&h_bK$LeEo7 z`i96B`mWy;Dc}p_6Mh*4o!1maABN8;!LQdnzE^w*mfM7#zObJ5w3}cabp32&Ivc5EUyU;^f37$$){zv9Ql(EDiIo3e` zfs>vBIvzO1Ez%wB<=@?Det%bEQiMhD)N6tvmfKd9P+DGIyzAVWmO10d3+suUK;-{0 z6#czB;I;M~l!+f)%cpzp@jxbqh);j{9LZaiaYQR8y+B`}E#<=G+lVLaI?Tm67Yg#T zGOtrd#i5s69s4G+Q*E0_25circ$JdN?a(1Om@6D-;k5a5_Nnyp!aE1v?=)G&r5%i4 zQzR}d=8Z-}{L^SS!xY%+7t*hd;epCdPkJf<2Yt zn%1#=eaOzx(2(eD!rrz`#yDe2J~-uqIm1}O?IjcV-)pR%B?Yw>b$d$uXhI%|3Yw5V zj+FR!)=y)vxT&S;sWk-@deVN28%*q+hbaHEIHRA9C);T19)5c0BA-cG40>H6Xr0tK$$7=*f;_Wu6W_JRmB0HHc^SXq+t;?T{c6v) zjKQ6|7JL2kw#oJ1nM8;>VlMmHSt@D$W#W=nS3ZMwO<>}r9mH#sl5_(3%irgwCD3}U zZ(l)SdTy?{Gsu6U@D%6JbFI=Xo%yPmYQM<%B#lNe=p{+x^iY^ym-Xih?9a`p6%}s#8+KM#Nh?rUTOHe<3TEGuiSBrnhtJYJ^Z$7BH#3SoU{F%q z!Y4VEP!E@)OGo57!z@@v`;CR_rEz0c2f2Y{Kd4qT*$z-;?EkS054XO^SAZ!(SiW>J z1V}F4LN9fqifb#P?k#bm5Fqs>UqUl|ec9fZ1h5lzc}<;<5mYvDfDMbKt?apg11j-+ zjjVMU_T+zcZ!X>D1}?Dfc)*@RC!0S!bYt(OvWB}-JK?K$F=(jLOzUVT4pl~lC8ebr zbjmfO+!ng8O(-IE_{tV!Po4kpQ%dzivA5*A_ZF6V{xNuWG zU-sSYbNlO?gv%?=#U6oA;ldfy9j?s>_wga0>CS(Gjr*dxuHifk(Jy{|N_eQ?{swP# zEehJdyfnCRU6b$9)yq?Zftw!j=+w>Kji*j@ZVH_wj!=S(m9@^p&-mw5X#3_@P>Wxa zwfuA5wEg8*Y)c`&hClxJJ$2ka;+Fd|>g?w7Ve+(~)GbMIsVR#=MeXDw`O_yj0fqCY z;IV%b$|rtCdJ+3M<0m;E19M43{=TZ{D*qHc7<5AU2dA3O0(XD^>oeZi@aCH3O0tG* zQ%gU+2zL@$c_%ENSt1#F{+E78GFH#P-EOQZ|4V#RWA)$CqUH*1c88W@_wV1Q%8FfI z`vKp0FzZQw1z~VM{>Xn`efA>?{?8}BJ9>ZEtQE7iS)*!g7HjP>SBMjAM=upL0=Mt9 zYGR^(Rp=IF(59`rFhhzVT%QUlhExM2af&vzItxmK1M<(C7LFt@FWA1teRjz?e`Q0O z%?f+C#t_T)@PPO&6CN%`JM4A;{turoyFR2$=$O4f(~Yw-{DP$Nl4!(~kiO^;fUAE1 z#{$mXgLAPr_ATh#qt>iRnz)cCRtoD$mqa3?o#V_r((^R2KTmq!S&|D}X1X~`n(SYj zep@mEc=`T^RtI=c_H;?*Bib(#Ohgk8=|mky%Gl`WXyt$6d8+ZW(7DmBK$BkpIXeZ#-D9gDBw#r z(Zk|^rPt

96>{250bCIz{?T(;Q)kG=d7^xy5ga*K~PP1xS#oDl-t7{aY1%zx&6(D&awny0?{ zDUbH-qt9DDI9d}0LaZ)Q8qI%djA7Nux&%muM2@iRuj7t(Q~jX6)4_H6>f>thum7>J z_SS9Grobkxli~};pr_V)z`ys^lUIAiMGFxP9+nNjjV0Zv$^H)m;P-Fs;o?qr`1s4c z=PDY~f~y5@eR4QNf+|0DXWDNjJ-@ZC?e6uv))D`yd%g8r_xd)tsC-(3cILLGGnYMI%&$T=5QC0|FI*cm4B9%RF~lPJUQ{q zXKmdtzaVt)I?d9fn>D9LkIR-GJsIZz0h0Zs_m|PO1QZN1ATS_rVrmLFI5sesP%H#7 z22xH|R!mKohb#o89du}NWo0jBZ*_7nV{dG4ZZBbUFGMd>FH|pKFJhN5RRtcGXe|V1 ze^zN&ROcDJmw~xA0b&w!Q1r?D2j27jj}|P07ej_sO-Zg3APB?2Y%e3r z0J6=-I)H+J3o2IBpwSSs7(;4|wVK$Nn$)IgzDqvZ^p0ZECH>Q<{W0@AGtalZ=bZPv zha{Yx2$Ce-!$LQ24i1^;9}>36$MJ^;fBy{0&vxQ}DoVkX-^wOSUHWFvARb2*kD(1S zkoTj6h$Pp(66v2I%g;(lN|t*(=kMjQXvKgliD!v$VjZ!GSWiR{LBtEh zW?~5uLiiD(gg@a)xDzvoXNX6M$B3E469hwWLfHgGG?BAO1$oVBo6}8^zi6NHOy^0L zHnEpDL;O0GM}0)Eqst$1d+6N5f4_2dbq#lwyY6?r?Uw3x)jh-g?04kaIN2lLIXRz= z!7&!o1Ycq&D?SkMUg!qXdGT0<8E88t)fK@`kb@4w4YZUxpsSTbK9uUz8s)RNY8Dou z_VPxkhKi>;`oO~4sZ3oYWPn825a!r021a#58uFTQnicH{I*qCzT_%YFe>zQJ0uK5r z``Q!@`31R3spLT7=$V5f7dklMN!;YCVCQFB$cb?jKQ7`oA`JtdL6^K&I=H<$1?GZe zxhjv=evztaKi{|| zl*PsWVdYlH0)03A$amz>fBaFU4cR|FWg}q%MO_o2zwu(GI1%EqTMF7*&5ibpFCSlt zA6oEp{5XE%4_?Rx&FV&OwY6oSE!As_wOmd>M0y0!p({tx^JwMugC_<~7bdg{)seT2 zGNq08u{cido)GcTD3w8s*H@UvZqIu<&ims$Bt{S4`2s!8;#3^Pe-H`$60!YdQQN3=!>e`wYNZ^J%9RgyxEStE&P0&gT&?u5z^rm z%zY~SC{xzKgg1dk)ZIIXK{Mxnfyu?&gEd<2B852zqwiLiMRQZBKg!c;zK#JiRMaxTni4#Y#aetwv5YV3x%WezsU!gJTB zJL1AOS46^bMa-R{TOS$?ps!?AnqB1}qou7S%@#{TXSb{?W~tO$QO@d-NQ|HUkq+rH zoQ7`bg!iCT(0v}|r>pOumL`t1qKMPKvm%3)-2V>pe}89iM1TgZXO5)}K|Ro)UVQt* zPSwE9UT$#c7*s)}K(gxB*AO++S_4h26Fv!^n>=Yvm1KYEgf5734}r!!y|QS z4$r3YL0wl>QDJRit7^c|)I6~L6tn>S^~td-r&4=MYq_KzS@rt8>D7LXaE|V=9{m)N z)eF)LY=x=@_5fWERi=M5LPrz-2QOR#@j*ptv>yFQe7|+>Q9Wh-ADW>cKEbe_wxi`1 zfAab`nr#!IRs0+VdD^ij3eFMh=O@iusHO9+;~ol&F3U$R>^pyneLZIr> z-c=7{u;1~rAWhXE$2(K^0m`*cF6tyIA$=zkBAwZ_siZUK&%) z8j3+vHw`O_q8wyvHL$ykO%2_4e*NBPcnXVF`aHX>CHg=-*O$;&`d)sY>U2?K`7wD< z1ccLTHU}(^3aLLF$!w1yo2EPJ9^KUyhP^dxrO|r8*wi0?A?0_1f4wJ#dIFy?0-5Q<*s{l0hQKx%1Jz?v26W1}qkErmTDd`^JYhr@Fz z2!W*T)V9on#lIG`)C>FV_SWVB5PFM3-1mNscn2(J=2`_`BKDK0=c;JZb8;m!bw`|! zvt4ZBM&wi5k9@!+aBb9Cv=zl5f2XJHR03eBh+sM0a00r%*WvUqw4efW z`^V=5i+&HqjZfG_{FBJS2s#{!9!&0yYK#VYMQ}ur)Lhis*3!~;FbN8|f7V0CO+!E* zJu6wn#Z!2PcJ(rNiC*>ltT)~o9y)GjE4TL~9R}Ju*7y;3CMTQ<%T^UhV6=%18ezQr zQez_H`j4Yo=%u~=20@%6?{C)pL*j7oG8y|XjkX+OH|$C%`Y^&4{C^7||3!EH)1aTY zfK0-ueeqvN_}oTS8oN$Zf7Y}n9+v#`+!bxwo)w$I86p@#5r+Eaw*Djb5um%jF2U$$bT#yRCxXw>WN{tcnqMbG7guj&Bldh#W_a4PTPSPr|`a&e*1c7>`%G0*Mt7c6=mW{?jGMB&I2%|Xl1 zQ)rC`*87w%SeK?g(9H!MWk3P?BDpj=Dl-mf-;JLj5|Lw{Tt09tXKN4Fm`P(94BLqkjmuCbkLjV&nx5lqOU~u(2*(c!!oH%J8 z>;J&;1&q-+247}&LXb&;$dYp~A&k|J;d1lYmW#jcIV_~oF}Zn3Ll~@rKv)N>OF|Xc zDOizwFTDs4e-K*x+uKM;N^l#cUK8=bXcdzq))uHXDR-5XhC#YOXNb77^^G?>+JwOD zapoj^Dd=?Jhe9f*1D{*6NDa;wAI?!ub^V_G6jst!DWPtb5NZ+tm1S7_| zF4;UuO_$vH$rtF^HspTmVjJ0c3vKyKKpbJFK(En5e<`i30uy^we0|{MdH5%R$&uSu zw7wso*b!^zqb($|z9m9`o#YrZ zR28YTT2QQF@u{gK7b$99NG0l&enM;%w;HYp9p42XO@}mpZQTLx)?ND?YCZ4HOu1tX z^+>LDa<^E-vJX2iv$#EEsdaN3Z+3Ghh`$3>7);rh(Y6E>7Be6) zAa7!73NtY@F$!gFWN%_>3NtpBLGc7920}qrR#-=utU3hdmlmW1E|2#6xHfCH0Ycc1QNo@7Q;1ff+1vBWWs zG4W|)jQ-@A7)_#yK8?|wBA5L9TcC+~FYo{L{_3T@=)Tmw_nf`=-TR_oI(K3e3Wc@v z3=fYLZlhf0IjZgB@`gf9ES1uvu{+*4jNmlj!HK%N_wHLr^79W5VVHzz?lXU4L)NaC=Nz}m zZ{>WKQ2zxp*DZ7n5117ZxY#W+XvyrTrSC-tFWbDq$762HM&IQV-s(1S^xKY;oW_oO zbNKiX)}1WO#zTtN7{-wq$gE-(Ff*A+%p1%g#*0VD360Jo#Cn^9rrDT7Wx(S&D=FH1LpBbUwXb6XJ z@G?akc`avZhIqryM1w&?IAS0wtgt#Qvg`F@4FNG@*=ZF8P{$vL*d4SfB*t%r=zHPjxl3pFs_FdO?SYn zWGgLqDHHrOM(cDm=%A(6Aj?7qwfRuL7}clr_0y8Y@-YX zXl+zVG1345Cu3M{fzeoJw%={efPKJMiL8%q6?lUmOoadn1g@BFqb|XqPfgM5h#hgU zBZF|I)oqdW)r|%(SPSDJkdAxAVK})!yhw3Uyj~xyv)`%{DIUIV$HNF(mCi1Ip!byYE3Jyugmwbi zA?-=1On@k`C*d+wFR&10Fl^FA==8MRe7KCQvvkHrI0+5(S>bfjIAg3S#B4A^IWLJu z4lCOpWpB<)%?0~X$l8^bjWrUnGq$6iwU~eJLj!$1XkRg5C`A~NgmF=j014qdt>w6G zrzkd>Em$PlP-fZUX&gv69A>MMuv&Uez#^Q(Jt>~NdaCEVks4&<1Y}A+yZ|@(@5X;l zCaBwHwNs2$J(F4H$KpF*-hK4Lge&B=Y|R96Ss?D%j2>($h*0Z&zz3E<0v`{gHyMAd z?f?taOPwtWkerp$GHHmAm1{CVHea?4V%2R*HlDaxiEPHxYRgmLzhX&E8`_6;!kC1$6qG)R!WC4M8Ljdo{)*;ZKol`p7gvs z4By4cUq8VfYLZ3V1)>6EzHWvSMYVsLl7o$9Ewtc`Tgn5=f?z3l^5cOpMD>D6DVB|* zq_p6oGdA)J>6GUTGPbHX>5(YR+X06)(ld^@{=tgnoT}yU%HG@DOXj?$?gN={<)vRgGd!HJpX|;PQVE{#EGX zW9+YNjgo#7vJ0}H++1WTHWmS2CbDY{tM!{GG?&0S8TJ*h7xpCTcLD`ISwQyLku`YS z>MI%cBims=_9g61Z3-*0nYNL$m>`YoM&my7ZnH_|aHYul>lV|k_`q`TrHibj zBrY-(>#KA|14Qv{GPRUbjot~O^ouO6j*_lL*_zopRw#k&*d)DvN3#08h4YTjE_R~~ zGZ9BJg7^?0r0;0L1!#pmkSpC`jN6_BaR$u}(wB6fKNP0G#NEp;YR`Yh-+*u6eKRs2 zeDvW*U+12rAc60vl@paY#;C6Vevi?#N7I1{;vwPyi=;TSww`J%Lm|OZX!N#K-M~=% zy8tCdV?jZE!^wCv0YFS;MVcRCo5{Jm20r35I?fxXo! z*H<3bth0C&&!SBmKYlRjMfyG-i4$;K)AOR@7)XuNr*28nM0+j{on|mL40qtN`Ku#;Yq)r&@;qFItDEZIJ2W?K zD!75`&T&4oyqsO5mVrE9*c0Y=3(#M(#bHVu)~XUZ4tN(1SK>(8(DfKfMxsDgY1*8% zEb7|s2~_rmavy)e?U)wVx)oV&@CFb?yhpH?r`wxb=F5*(tnm${GWb-)P>aotABP}w z4|~|E9%2_!n5AXwjLoK_aELBWmeKL}6giQjir4)Ki=95pu1rq{eWrSALUIhm@ZNPX zd-m6qH8ch^PZ>cNA7Z5*I$e81hN?~9Cv=vq25e~;+x~x~KeaM7=qS(Bh-UbocyI+bT>P_RwJlfvTSa*i~A;)`$M#NezJ0r<^qnz#iv9 z(w!IC4VZso^{YZ&#cjHZRvYSP6t@b~>C^LZ(9$z9*q@`dE%gGY`_Rg`aMvo)`mx$z zh}{Aqyl>6ss;Zi@`cuoQmbVtVzE3;ka9PQqB#hK}-Mb}&BukBC%V0Nu~$-V_J3c_GDq#D;`CLDrd z$Vq?Om663?BFhBq!d9ad%nR^aM*5I$tBxMM@BtLaUHN2}-2Ms?%U^V5jEJw(#@Mw^ z7TSJ%S!3GiCvXH>02OdVZgoGbIL`f${d=F1X`fbNIXcLFs+hWqbfJBsZ8=w%o??;u z)!0Cz&&L=~|C8GifTFN2b51UZ{H6O)a^rtc$kKGRajP-44EWuUUZMG%lf`nU9%B5| zVfld>Yk}WLC_`-5mWGzbY3c(HrQF=ctL|A+ZfsxJclsEJ8W489DPEmgkP6#?kARd& z4N-70kW`#$f?Z{5s_whYrlY|pp%nOPd;@T3)8@LseHy>2;EXBx{7Xmr;uL);m+gPH z^qEBZ{9!X!Eb@<18}L5+%6Y1K*mnFcjOqXGTq*aw5|{)_xQNvjtnOeRCgDg2bo}e)LOOj(7OLBN{!Yk_L$Z+)vcp?p zHK#gGn_obiR~=Ln2r=Lc@4>2TK}Ub0F72d({&W5}h2_-XMjH~h8#Jlfkf@EY0FpjV zZPe!`Up1s}ySB92yHH-MZupY~F`x|nM5(K2BdhC39Js2*R<*Ttz$u|R^g>uB@CA^+ zOM|OF0Cqr$zZbbc-FSLPE~2uwOinz5hjJ>B&K}|y8MZYzB^V~agsN4Syw7a^7`_F6 z>|A>8U`ze+n+Jb@pa1nZ!(i^!v(x#UOU`n7b{fbSGK{Pxo;ZYz!Q2B+O_z>SNGncG zyh@Lo-$a~Ns`xu?Vpma#8)ZX2R3t-jiIz1CTQz*Rjt}@d*~>Y69rf{N&1bKxPia?h zZov_o7Qy8T*#=GvJJlXg?xB-SH9C=huCk%JkCBpxK%C{ypZ{Gds*NqCM%WK0^cLFp zd7SD=j&wyh5>V^o9T@2CT^HEYXsJE&!mCkV@ZU`~aCG%Uy!vozv#sj7G*lWVkRjD; zvzOGuMf;|GmmYuqB#88{P^U$J{v{=FZhH}u4Ti)7wbzp_~1|9Y~vihi2BE#PvF*3wRLL)rTeXO3cAG|bZ^O2 z^deg)3cpTZqiJLk*=)4R`2q(6f3xitan!P>%~bEt(-(a^Ew9s2y7d`C5}S5tXOl`h!;hSWq2jjLvw%J=+bDtBq?mKUB6`CwlJIp&-)zGIRO zW3ikT_vzpcVEd!9P*stCl~Gzy>r?AsszkDySPV~RAk`+T!5E14`JBkZKruLh8|(3;%DJM^Wfb%YVs6+tB8WQ=+X9lwKV=O zVL6&3_7t}YT#JjpqW-3by2HA^=s;_kJa;!CJwGk$yxf6E{YFCs-JRAHCGRe~#gL%W zr5JRYfh3!-c);p?kqtI1*Kec?^D%9qW6pDBD`_$`z)pGGWU|z5Am+-$eD%HtU)TU^ zOhN6#(6Oy+W?Wi-VkOvDLRwB{(R0kRdrtEH^cnwBmZW=U6!eHvVr1(a;ZJ3yYE)x9 zW|G--RA2j|rk%!E9h4&?F4&Kb7OLG{reZG~FQ0AEQrDZp23Y-*`WRc92fHh_!*BSKC5hvk$x32^3$@f17AYh zYVg#D()_m^{N$XN{a+BjQ!P?~GYi)EpuEv#J-_FoU~3 z7=kI;*V92CbM%yQC$?l*TucDavw?b8(@DzON;s!4HOQAkG3gmbFlJ_H9-;y}kv>*_ zT6T}|qUiwCK(qb;9Wzs=;E81mU%i|2>G)@>YWcVKb6>Yysx99<^{?;e{?7q<+|v~e zgPoRtuUs9b-h6+I*&oKkVy|F#UiHOa+~&Qw@Fi zDJm{3;Z;q^SuM-%^}`WQ+heTb12V*UWyt0TO$MP!Cym=%cdY6Rb?eqZy1Qy&X_%iT z#CLT>BL>Mah)sgOn(92{+%P0znqqTh>%faG*z2RO=VCh%S5OlQ13;NHLn9% zm2eEI63FznC3eJB^0N9tMzCW$f+x2l_zu@Ffb=KN{@u5@<5xw-mfv+CqY#}X4?A>j z^Z3)Ja!5&Nx=20bV9PhylhVBJ+ox#q97qF-RDi1mtIAA$ZoH1lRDx!4lt+p;OaqUSu zsC&EzZ@#Nh{o)M6NVf?0^s_!{i>YciH1MaqcSUSno;3fhTW?`c9RKJWv{tt-51(3& zVb48>>FU%tAA31qe_K@>y5sjk2?xl3mNjMW+AW^8T%_@(R#y=jkQy5b8~LD$O@|Nf z-gD@Z&j)g;CQTseYSk|=Is4s)S>m+MBCgSWXny!R_C<%G*Gc!NB{0oL^Nf5TEQip; z$%R{L;5roZ*z2@-=6jevY$(ha`o|^oQ}I(&mC%e$rD87H4wBEqUk>*9Cmp4K0ed#L zI|BkW!Zqhg|CqehX=E~Foj;k@hnkWnb6f22Oj z!7=l(OfmaP+4;JL7bgkvD8m`(qyU_v#Py{@GEvO&h>lH3)#+$9P0UTq+V$)XYW@~< zcG2n$f!=HP`k$yNEi#)sdMSND+jwW$4J^8`?2a7kJf#R>OZKKBsO7JJeUn-L<#AuP zRbfGELexjXg=?1TBXExY(W#lRMB_Sn)S6=VTWi#+dlT2KSv;dJ>5j|_y6y2_+{I4F zOcYn`Q?6$-2!}Fra@mkD@1YNoV0LjP@JE)*DQ#I0Mo|OJoCW< zXy$7p_xbrng!#LjSWNSM9~}E7W>cJ90n8(bWZ>|3NMEA<$8_vbCuUwdq$WyVVKm%$ z{0Kh(`Fw>(VwxszJ&im;ynEP?iS0GANZ)o`dBw<=zI*T!;h_P4lSv9mF_5GY!;NGM zrr-_}#ywV(R3Zuiu%vwZ^`w*V6P$rh;KQtwdH1g6?4}N>A*N(a(K;9alVAxr?O49; z4fkyuLFPO?=2FBX6f`68H6{Mssuap0CoDk^JCf8>7Y~ML;5Tba*+MvDJYT}M6%dV< zJ7RuL!+Z-o?@0514sy|emgy`GI3!)$4~kcZcS5H?LL%i0shWWx9PL|-CSpC z$ZF!VJ)YX3&GxauC&=%MDynuF(--HVVss{eHdG7k{24XuXMdPd28&VC427Mw$ zv8pX0HV2B;M_5$Ah!t8GGAL|$+I~;Xf$YjkDpk$F)oXkLLsyJ_xPao%?fTuBc$`WiRR=u zpLKDuYT`u3L=tz}FVgD(=_J1W5#hd_T>^YojyX47mj*^nd+SgkO0K0g*nqvLgQREd z6KN4T2@l1Q(j<1TK7CWP!LT)6O@3^9&q|98)X{c-mhH#4?SI?*`o-V&RQKucItc_= z1pL72PYXxahf4ew%>r%jdhDdV{T^~oS7LxqPSho&g1%^r25m_1TH*?1ERdBe$XKdP z%B@?emZkCuIl8Q(#)C!0YIMRe73dDn`QHtKted@yJ9IPP747`>ue39OYTUo5=6|TE z|NVbtY3gj}#Gr+0uOo|P&=Zb~3?$t(F9lYzlLiQ6<0JN)n>C-8?bdDGt6sM~c>}~i zf;nV=9B-YF+v=Q4GP2RDj3uixIk79Uuc^Cso>$jmqGCaCk8@TP(oKow^~*NWdVP8TvXS# zKI6cg0|FYoMHUw-@W2j}eB*>`a9Zf)vUb{Z@r|P}Tq1vr=qHSnt|7T2EMj`nEDw(uGI9`}eg#znaQZ+-Dv`K( z`Yw#znh>oD4vBRbzi@)Xw7GL_-tPTzHU%D+kz{h6t_z8CXTA1)wNq>f!%#32zGw(32 z%oOG|#+zBhOl3wh%NaMunHj^lGt-!{%u2?C8ON+*7Be%L@yu#w2{V(Kz^q~ZgPF+q zFrJJTuJ_q{loho?*HF5^|nK8!)!ZjiQNV}9N;vdY2aG} zFTN7-%3lYC5Bh#EGgvwJqrYf`{&v6itNVcglW@-@d4$8HJsf}5^8T`Pw;g0U@c_<2 zxQF&8*?P@%SOZ&t$RI+`DIfLTb5shSuy(&nmunorgw7^mNwq}q>zT`^S8DQNAR088 z=?O&F`*>LT4$wqqM`ve29B>Ir*PWc&rnY%PGZR|VF!;KX|p7WGJ5dkoebGv6uvM?03}jkmoR|O-;-N- z7U-%fO%?>eR?xr-dR|u70ZG}}8QN?Gu_AfoFW6*x(j<$~xI-jFfHy?ZNoQG?lUf8L zf8mJ#r`JEae56`#*JDYMvo=b)P=bEq8TR36{=0w=NWX<%A#bbXTI?qy^LAM(+0P3g zP(d!ZDcM^6Mc7A2-}T*4#UgXH^Xx%G%zQa%czFVACuC=|2t!-wEp5;pt))T;TJfbR zkh(*wP0p03Z`=HvdueB4-8#5^V^B3G+}8csN=W3j&Xab8M(Y6aL=e?We5 zUI{k!^c$uVDI{yqKZFBxJcI`NV@KiMBNI`vYDj}LHAmT{_}D<%^`Q}KMS2dv|HKi} zLp?71QwFYOaqhJ{-+wo!i`W(^aCF1I>(Ie<&%R1#%E@YSj>lSD%sw#8Tem21A+b`B z3FK=YKSW;^tttrP=c#&~unJ10f9WX<#rRdD8RJs4kqQkM$>Z>;Kay!=_RQDF5HhrT zGET$Uw|>Mya-t{8c`^jh>Usx!SkHi&uEc2|qTjYEz>d4dAG;Gl&Cu?Z;VYf3l;>cu3*HqFcVDe~I-_cqiB=a+ ze-`y8f@oxgUA^CwB|rg*dKvmY6Fhf2AR6*kGchv zYP-l3GKOp+0XTt7Kn=Pfi*{&Tk)hj}nhGgeMH-nzc%Nyo1ZGsOJQLCydJ<3$Ka^eS zICb{Q{o-SA1<=;NiMZ<1ilCGp5cG8l8Vj<?!7iXbhF|FOBVd5;oia*CF&-$@duA}mLCG{i__j@7#Xv0?NX(( zrXx&bmSkCHMhmWN#JBp$mDVj4)?yT2n-BF(=~p&(DE!-3?p{tK<2-8&8AKc&IHMCf z9eq?$wi7aTXtR?te-u$m7OQ>fj4@gqeoE13p>NY2GPG1RzgJ^|$52FUbnC>hdv@m~ zxAqKdF$22<9i=_B_zjOCM2=%gG>IW2$v6^Bg3*CE;#N8w&=G^>q?erMmw@N~ppSho zWqwO9^;yo1wl9xdxLAK0uED3uM!$p0OTAzmj8B=f&MjKCe@ZzI#QpqSpV15l3nQp9 zTc0a)E{m&hJXP$ws3wze0P$83?_Y-Uw46+2Z@~rCL7&Ees`Ws4AXYnlLN)#EYWK<`SP8qY1=`~ZEjB3Thmf@ zq%FAJ)tN|xe+VZZvp{*7JTb@V3XM`Dy+s|R^-Ph2OnMhxy{r{G&F97riW4^CCp^9- z!#BRU`2d+oH_2Q@@1(w)$Qt#Jp@oje&?u%T7GD+a@i-Ocx-W*=WU7KFuv4r?x585B z!tEw3KPFaEoJ*O###~I*WWttt#6=7-wx5=LUmP%Bf6Z0T_W8c4a`R85rAI0wb6zYxFTx=vKC-bHr*~gz#-sxhxQ;Q8@~=yA2rl7|MV*2& zDhT<>f4^Ng9?_CqtY|E+%dOC7XVO}p#Hsge+q-v9m7y-7*H>?_(re0B zy|pN;IG|mn*uE_x1cE_XyT!00Cc`ThR&d^5c%Ub~e&eGnx0g3Ym&$$Xmck6`7dAnr zPFaxL3RO_3D=XQ}VgG!7CUm|3K6Kr>1#TNRe}dag#VO*;U%HUw6B4qVDs5Qssn)Y+ zpiC6nsYxRKjr8fme+I?hx@R8Wd#4Xd8c3AELFj}#@BzI(vB$=f?DvJ6T>66HvTKu* zd=;g_YciYx^)7peEe!@m|5ztOGq^*O1ir)_UrGgAVLo341v@h|khW8vm7S8FnH^ca ze=jeZ@D}4m_=vkd>IU(W_gem@poeA!{j*O&c#s`@6#L5#LvwOXRFjI@LJv9u zj;l_DT-VkB_jBppJr%ohlD28nleCJ=bz$mASPJRqcXelUre7wEk$RnKo>*ZEe_aJ< z=gjq9rJYIMpd^sSF6g2a#@8ea>MJkPMN6BC+xfqXZqETiVHqrjWwbz{;~18@n#j%3 z@kwE+{;&eZ@A0}6cr@lSnx)}E#f77t|92t52=?C>tn>dU>uggT2>m!F2e?uwE~kf+ zw3|%^Yr^@}l4~?hw(U|37Bkyue-jyvEB$5K@xJ57XLIjfBl}s$>#-LvA31ed-s$hd zE)I_fdk4`7Fd@Y$E~F!p|2sisD~JE<`e z)^bYqo5W%UQ8eM$U2<(DE3osqM~}Ysx=SSW zif3*HkD9R3+@j!BF{Uv+e?$34CRqfHX)qlQeQgP;Bv-NWk%@iby+}j$g+z`=@hUm` z@_V+=v2o9}gpY(}zuC35?0mmv^WM&?KPkuWS>pCQ!=|$1&PP11yA0P%a^34PT=3kw zS%}iH3qD9?di#U~4~jPkq`lHF<7Dw9)v{eygp$IWI2yQXy|;;ze^Pc;|A4yU&)~0c zRZLY*!tJXp{aiS^i1h2rO10Dgnu{-5(A97s#RDx&vS7_P@TX%O1dAlM=)FfQlx&Os zKD5(uA6mra#N&wFQ>H=SO%mET+3^KsxrJxM#wl2%`F-QmP?MRi1#M=k*fSP2NiA8XV!v!ITY%Ps=2-m`s%pvaWheGqLIfzKbIDl6m@~U ziH*|4(~dFuJ7vl`StV+g($Mw#0c@ z!7h4aEteV(iE<@dr$0w09)~^9F7}u^ARbb5i8)z0DSNnQe;N|*^_?rcX9@rER$rO7 z`s%mL*KgEKS_Uwn0cVOvPKp6ymQ~^jzT4$<;<%DnXU_I-PH1RqG_+QwS8gwn8;j~_ zE#tmy3!1Cg%+hvx#wH?lMlQbVZy&TDsa9+O)@SEtLY95XdWfS~HtWBkZFm!WYsO+LyBf0cQuq8m z!V%oG>13E!#y7xl;~>!)o)4 zuUK>@D`=ZFE;%theGb?w*-!O)*iYR`JM0rh^m?vU@e>0Y)JoWRFR?aTeaE?si% z#F>LNe{u8v*V_31PGEoE2zEWh60!9Ne1UpDwX+pf6;lW`j+}g# zjP%~HEi^!p=gYr$>_lZd{WcKD;KhEhB4&#s%y&a-D7eFxV~I61Fcw;C=QKl4f0N|N ze&JWXpi-ZIL)7*<8k7|@C@v6VR@`k!)Pg1}e@#K&>|H_Jg)qzSOtMhT6bOPam}s7K zgKZ-W8QIGaH~RToG2>34EDD85W~SX>G3^&Fe|t`P4cON}PCpZEk9vGw`d5CysN@>gLBYbW$a*KVrYPAPtYu6#G? zoXYl zlhK5AC!Rn&fOvKhcN|5yy>WUd1}?7@e@YeqvOclE;DsY*} zkemgYsssgE5DOD=1@T$8p3EW^#4^kCR4$I-}siJpKS+%vZ0FCSdO z0hLc-6_M>3_Xm-E!!s#twcP*6a!8=Y-I7eCFf0BI%z=Lj{$H%p`1|agD+jJtKs0L- z8sy<=JJnSB>cVYRDI5(%a%qoCDJdwzP1Q28v4AyMqolvw+G2LKjn#o78yl3=+SuxB z>=@>M0I)Fyr>4ZpmWrU;I6@xSrYLJiq3} zWAitj;k*g%*|Tz{p`%k#)I(^=!yF!$`|5@_0+PkqsR?oMY5wy9=KC*MxpIa7>ZF*| zgs2FS|Hg>4_?V=KH1bQL|JLNFgqXDKMgFT36My};c;DFPza?g0Oln3<^w_rsBqxc} z(_&KnHzr5Nq>4Bk#e&t@qNt5)lA|{Th+~3cQ{(ozsu;5|yRR3uY`HlCpJ`(WAMY@%~H-9~Kx?}nWGhUi;WTtfH6+wyMt8ck6rx*Kv zJMItLgTakpu=AZ*T(A=215=QD4j9SS=(raI>rsnx+b73MNr{X zg3`#Ujd3P$gTqqjD62kHd#L6Rg|hfg{QQK>ee!UH9J1tvU~ca;LkH6eZMqhqtbc`2 zUZey`h|XT8XTyj22A9Ds0f7XxDz$=2#5}qhU!Q0kgoVEXhn#iIjR~4Szm7!S4%^Dk>;=R%l+&finm0)()}uDoZg`Q2l$| z;fvz&JaujXSc;6M;(W&LuK)ZLP)?^VWnZpX8qKBzrmTh#YS}5#@jiD=Q4vF`xpc)v zh0C+h#YKZB%Fpmn4hof`2X#GN`bI zxFh#k(0ogQ5>ztK@7FR)v3UMwpfU_4#kB=>_8PWwunUccQ`F6EuH7r&2+EQ%s-p=_ z;SdLzX_BO@C|NM*sj&?kT^6SNQpHg>P<0?uNOW0R3Hvf0)T<2|&j_u5P{*}i7Z)y}h}%5RT7S>4=v``vBx^~WlIr>zSI5!t_Sf;ln8tJPlk-lm`yG1Z z<3E>Jluo7AV8~T6s~0ZS<^Z)lwfEFu{a1BI*tQG(t-aucUVTX<<@+s9;jRMrFxSn6 zZ(ihmGu7jv?ag-kIiRW>qhQEk@gw|n(19Ww-y1nQbF1f+-ld0qAb-FDzC=M#WQPiO zJ>=*>ua%OAM+&7|W8|TFfl^_}&a>)lO)X|{v(3<|bB{r+P-T>}TTJ>oC;>BA^GlJy z(=gM>KQr=IQx2#~Ku`o0o7L%=ILsw~#*dAhQzodDYY7m&-{&N#JxEZ?c0iY|9VnX@ zwJONm40eYRZ22WDX@B;>C%4JyyyHR#-P1gkzfb(#48MCG+A~5s+H7zDC^U(Gt6**7 z^4~sz`7EBvN5VWB`PP5%34BOh4nB{$3_kx;$D1|MIl=EQ2}-h^S)>1UKq-qp=A${t z2l;&Y@oRkn4i@|4YczhCp9p4~)m&h-vX@ZH1oSfhp7l2=Pk+DgI37o~$o+P|mlCYO_+8YcS}Tc}lrKVSp@wq5z7I zm{hqsoeT`jW`8W(?-tibknZyEB)kAWxx6p%N?T9W(N5O6yFH^7+M%kp#9iJ|c#5p& z9SFI>kgjH=TeCJK0F?su#WpCh*08}fv@&ti3)_I&qdeWz??w~L53#jp`ue-T4%LS8 z+#=~a3q9yjv(OdRAXQ)!+$SsF5N}86N!a59n0}^f18UK6oR;D?~#IB(5O|Q)UiA9Dm?Y|=YU%A>aM~Ou8QlPEPppz_)!%(&nt3S+!7DX@cRmVI!I@%knd7wBqs=>_C&#ckU=7d zot5^&Dk!6h@+wlY6Q$8n?b)}!x_|o4)d~i2J?ryJzy$e%svJwMJWVOmGJc;oO2rM~ zv+#KAgXiJLmLFbw7p<9Q=@40=Nz=miSL{)(!iGN+lzFKI^8Z4F~S z#?fXpl{Z&5cb~iTpYSoS#ec^qC3>CHN8<2w7m?FJ7aAaP`aI&c+@0ZavR>}p&~NDxA|pGLY8?TVPD|4qj~wo z1dEnYET-mWkm5z-XD2M@=R9x$*ZBds)1cK#Kq}aEAZp+*$L^O}4u)(cll?~2%UggF zLv5)IN^K477=er-LU3bR?}@{2Mcka>=Rvp7d zQ_x6IQ$f8IQyaT50ngWbXNDaI>h6u2VNKdTg-DgfDiReUWtwcSoP4A)TEZ+;bWP;I zX9v*J`HbIJ8c!Nsn`xJ3h%=K@E0x8S4Hb>|{W4Lu#SL6EbqIwG@rEb;P~9{J15vlo zth=)kk{_QC*N#(S)~a)dj6DOhyv{zB3Qha=rJcAvi{_GUy1Ms4ZHn&1fpHGtR=g=7OU3?dSIo5Z5*h@zA4a zTBE8frI}52%gqZKvMh-XjVYldry07an;-uE_Gf<$YgeZjRN8dLAf51iwH!C|e!01q zNmAi?3OuuDlhsI~2lf5v(W}V@eV$B^l`KjM1M1(+AA>DTO*KsU_HK2>&oWP=(C})c zccbs0DL#QF{+{Q_^-Q5#3`U&UQ6h=dYN)r#tQ8j;aHI#SMWw(Ux2#<(LV79E2NaAz6Hmyi} zzoH+UDLQfc3<@AMeHgt+tC9^FAf*(E&+Q0=4~mZ0ec-;y*eWbPw}!j$Y)AnyB-j(` z_BAK>>dJul$fBlWC9$32)9^MN>S}tgY3LwY1cTI1H4vhNb8;fnLxhoU0<}xhb;y5V zta0|RhtP{wS3xJyJ})#yDlvhk@3)+9O^X$-VVW5Gw|`+{rj8J&t;vM_f*ozKM>;C& zYm1n&*5dQ`>#k9QM#rd9a{{v>l0opDkN-hXA!#DhGnpP^Ldwg8LREssz+`m`ONBuF zJDI@?``{{CDctz{Ph|$Gr#2))Z_t0})nrFJjyK(nWrYr&N9XwsjW(c#)fGc0-?0kp z#sVWT6gI6zm6580G$tNm%;bC2W0Aqa78?pRAcgFl{Sq1e3ir*thAxkVUV%6CI#niB zOr#E?*(iuKM~}Vu&(*5S3ePhAA64|eVs zt3>)d;!%r!beqtLmW{n5_|Z%Mx=pyXxpGh7uCTBqMtL!$A{2sP_uhmz|3gIgY zB!2gop?%&6YtZFJLX2R=p|yYSqw#1WdKx|D%{4Iz8NvicH{wgD?yb7g<7jO}eAZS2 zrjp9W&W@IjpUN&{Baq&Js87%q7hNTYvc_x>8o07NQOouIXO)33`NR z;w-e_TG-WPZ${>bV%Y~f_RMj8e!Y_fpbN-M_Uo|H!Sb_>*ZNQv5)`{&Um5F=J2Ht4 ze={D>&Wujk6A``@sC|Fv6T13t%{zUk-3JGcoB_e{5sW z$|YN#2w<1vDe3rG2qeY^FZ60N@3l=8kO$7 zJwW88kytIX=X>7C%TMi9weAw;pEJf)baM3a&?IoGAcw(9zP*3bRAle0{G#X_@+DE{ zu&y>WEDxf=@OOE*f+s;LrdCJe$HYwb!U^lYvv6nmuj1j{-HP4v-2zpLY)2e;Z@OgV z{}8tJ^klW(?LkkXCmOuIKIZgd6m)_M$jU<}Q4n20nq)3CS*wO{|j<(XT{J#!i5U*LH*pwo29W2r%5TQgGL2-yh9kYJNF9?3U% z63Q)BmZv0Si{f_liO+s<>&Cl>nLne)icui+Q1yVG!PD^!?1$&zd7-sufY4o9ZhIfLqA*S>K=LzsAHvXga?F^6#VP^P85H>CP(1%Q0h6_C8N?X$Fs{?Uc_yRV4&#s*z52h8|o@6)TR&qU|!}J5* zu&eXcYJ*|FocZnCK$S?R@p4BFB`<{hlB3qv!wjA@B2o&KxvM~+97BZ@^1FM@(9QNh zpRR{6``G=7gjMookYkh?)6Hrl6ob{|Fy=pCic5bs7b|>kcxt4|tS5PqW?K&)e4nMJM#k^o9R2;D{A|!ByB9Oq_%dmwe6Ul`3hVnKdCeV;s zn^S+6?N09`l;qQg);RAEl0?f&Bcoq?jX*2fF3FFxM>`Th0eO18ff@_Q*j)9^)=Dn) z^H2>|(S+Pgs)Fq|mABy%pxLKAK1hYai;D^InTgJt)e7wMJf5?R!Q=3{M7$0BA=t5@ zd{^yj-J6SnvgYSo*$0oxk}ddtl@uomY@)NG~%17x_w4nk~$?v%jj}r@Y4qM znz}BTs36vv1L+_q!y_}GYGgizu7YvYd5F|$VimI&PYuIUUcuCh_>rZ7TAfNK%mE3d zwaM((l0v(aao8QU(@+kT(5fiX)a1I9v3UMWtyhG#R7RPmprXiGZDrcglU9QrtRR1A zxKLDTQ5TYGfHs%SR;7;GRV`?YKP(PAZ8<{i*MUpOO- zS6WB6*M9`P0e^Q~RA<({<1llt*rMhtB=HVdv15s764!!a1A`sKG9U;@?;^c3b7tth z4pqt+L}0KaO4OKQq9&GXqDDWXYZ8s_>Y8)OOE%woL6dB<`+fV{-yQzo-gn+|&U2pg zJa=S_*#Jf+lMP?zv~J6`6;thvv8UHrfAcmRFjAgblZ!*i68O%7wm2qa4Gp{i-neogz z#(}YACNL|QS@FjW)riTnSaYnW;QdgGEj3eX1I5A5ZJ7yZQ zm08Q!GxM2I%xK1+v0yBjq0CFnFvg4-&WvD2GA}X%87qco%<1xrX_)DQrOZ3BC9(qp z1`jaEIr(<^QL`y#rHa{#PUS>p4l83_SQ9sl+snN-Fl*p9<~sAIgYpN@8XP(J)DZ6> z*MElE4viana+uYy<1g%ZA!qoo;Xxx5BT7fUIZiRAtkvRs?0?Xor&MUNLm>n- zX(>@e*ZYG-N;GH!GeR=bAso0UwX$CSJ~ToDT!tDAXJW&_69Nk}^FgoA>c&wPXi$Dc zY!%bh$`<_tXoD8`8`RN((^zs_jOLLe9SRbwq#Iw?&5-Rz@ne$=P$n0X#bJC-Nq<(} zIiR!pXwtzQf3&(=F^J2^NY!Sj$Uu@!Uc@HFDU&i(vjPGk0GuJ14m!u8Q}2Yd z_}GB7c*}^Lz7ESF9pWJ&N3Uxtf;P?=YVh|9jqust<@WxKcdv9+2}64nG;-!f*+rD$ zPH7JZ@GSqG``cuIy_5H1A3=))lz(JlvO>*%mgfsXEkYBtyZH|Wn{#~KnUk{aDSblt@zjt!scuu4$BEgSn|quGjS5mYJWy9R~Y)U z*;MPr&v0-|d?GE=gd=&9BEFSmNP-BkBtA6n=amqy)dr_WX(F{zz=f%mHTp05w)y}WGCb#mV;$E

BVVpGom3!MZZWrO|+9HiG1XrN!V z79Tt{5g#@Jk{~I9qv%qdF@I2Wy<@~037*67fAAIg;hv@ZGX%P@xZwJo``^vKNQUIA zaD2mo8*q%fXLpUv704#?36C|nihXQYxOKUQJsGGXlgU>+zJsnT4lF0kPDh{D2&??ABJ2~$Ka>e%F|Eg(@2a~{4%}TOX@BlzlM?7TQ!FF% zp-K=3Da&!2!cCcM9ln8#0M1r|=j;TA=Ite8U*3vvuv~1wKptP7`H;*ac5}y(QDpSJ z={O7RZa>5k0@0IoJQ)Qz@WwHCr?OR5-F~FP1ZSW%s64RB3$}nOHy>!?cnNo@MmjTY zI?*?I4uu{*lEU%~XMa1{@XB3{4ipq)C(a>OWZc7fXnE>brSY(83yTgp3KQ#;0*6(i z$P!uaUEXc2OPm)S{Q}^~Pw48^ZK~$eXLD+x1G=J&ySV3dE};Xz$C2_LuO1nnU!0Tw zIdGLGWuRsw_|sCdhcKzy>YyI#5>nzV$VSpeJn#d>O_S1BGk<|rx(`f*AUftgi~3%L zf<#-Z*+%`}p_NwpBWR%@u)=7GR|2blMPuqQIhuOr@ri|6T_oLR@P7eBBP%BNep48) z(-wneE#%aw#Oo|n>vZ*575XY&1#mScWte6mJw+hA(RYp-wt>Q+Hls0Jr-g8?cb>Gb zX$efc3Aa??YJUT|OUz>}>N@2;i9K`q8psS67Ta$)zOr@+Eth06gG?ZMh&xUulTm{X z$l_2mFHhCQBqlZ5|=a20TfTN7EP zPs)cPxv^HIFR-i8THaHG z-|*;71e{1hNGKUYCJ`^mD_;uKnBKa@!syeW98mi(zLQI-L$9Tk0uN? z%C0=QgPa`w#R)trO=Qqx<&#g!jD>owCP#=#Oxh0--0qgB`s&uwt`4uxWwu1_NjPD` z5`Xm-@?&3~uF@yG);(I*)Nr|t2bL%lO({7Ok zs@`e+Cs8))f1nlCN(0>}(JYHEi4S<32@6)N0y{EOMO4@=QPyq01Uhl23CoU4Y5*5d zWN+>h1QBHNo`qzolw#~WtGr*}zDU)HO@D66#fffH1!pWnTP02h2*Tt|aq+-#&jI4vA>VjuxDK?`jLi9hAWh41Jn&Lyn_xHGe$#G?dbU5KjI1(|;2I zt?>n_#c=RY-ynP!ScI*I$xqqtD#FfANY1|fX?{&1&EWA#)o%;w%r9wMBO^Sab z{q)Cw4voKg&qBWUPJbwAB2fv4pd0SM+w}Ov5*tsk_w#lw?N7$iz)$i*SzBEAxGV^TGc6eFZ(B&4Ke1eWc|p_l)Q1Unyi zzY7&$c?yRYq2=*lV`PQO{h&|Irh+wvZx+IF?&FtPj07Q7z4Es#_TGP`rhb;M5Dvu~ zBTRV6h^?j(QUSH0_2`i?V!cE)FSi;m!Mog}u{Vj6(5v{Rf}ZqM(BJzj2oJF%kKiC> zJG8`C2RHdpX}gkM?k9XsdY8|P1RDb9lb7s_1TX?$NS7Xs1R*8~{eZGGJTCwANcX>Q zBpAT{-wo^hm!;hus)N2~LNkFYf`T%-IhSRP1TBBQB6PcLVORMF_`M0|YpB$e%}Kx3`ng1|c&7w3W|rhR&>n`;-iAVv?ZV z7Gi(cdUy&w`nW~2h-_u+_L5lD$t?#`pM*UMFVa*;6vs6Nf(xgPc!QYDA*v>vm@H^3 zAT#ng_MQ8&uhZoh2!)0D#dUS>?YI#qbzs|1o<9B7=`NAgsh+DDJYvF%KAVNtq@0HK zjOL%3lmRrSUi7l+w^pQrT*Hc|CiZvtB^ZCQzaw%yg4f8AKi+5i6(aX*E#Xsf?Jx4s zg-tVzrM!O$9Z=7WI&e> zj|46gwj(*fG=s>SWYqi(<#S83@;;K6P>%#7e-VqzdPn5%)2G#dWf|n@^Q*Z21^WBA z>xn*~-a;dfBmP!YP?&!aEKO{%CX%}1VA#+ve2Z!`lG9VuH5wIJO(rTtHTy@tk}%u= z7oYLfOKe$DX>oN04k5M{xyf|PS}rjXVg)r@tN(-!JOL%pDf#4Rh=c@PY-W09LJ8L| ze?Z$lhCdwQa3EGZ@|wkgg?EaFU$?m`#a zO2?dKGn2F9vXU}W3qm0cG#M${j74Of1!1rNfIxr0QW_mbU2+g*9ar%08;#R@hv!CR zrBs7uA!U=is;5|C@syP1hfDujRzqe^ZUy(e%74WN{gLzUS4#v4>>p3zqe#xtg}%0|{xd7R0UBoA`-| zif<%;GnM)qU$B7?I_55mjXw>_kIdJWNq8!Ne1nv(pxN6FDv0YfdgH@PFoiND6z|$6uo-Y0+n7r9rx7!Zrw}aB9(i zLp@d#eA^f7Aa)a^XD62Y7UVL#i@+m?mW9Rnd0$Bz+CVqtLyJTWfzpO54QVMF`q8N7 zPPV}ziq7Zg@P|!(BR*r%maM1Fc2az7O3Hk&RI~5v_0UWOTPGZlV7xCPJ68v~+-`$*?&h}D87JxN90=v_}%h<=Li zBsk8XaP)&IeS>bY9fTocdKuzCAAc(~oyinMzA&v1X*XF+`iaZgpD7hJEq~zLoHAT0 zx>=xouUk%Z-`z^c&dROi`sH?f`)4>DryKu@ilQpn$)gx3@%Id|j6ay%K=pPloPqNl z&6OvQ&{E5WqIj(a(h`Lo(c2O>(5<@`ZZA*KXXrD4i-*MhD$+&UXhKziURRJO6qU4g z-2(0&On<{3#*txr981plsDHYP+pAlH8}|6`joLoiO1?7~e(n1CoX0(F;e)aVh?Tr-tyu1MgOMo;dt5<%`yg+7Qq5=s*bKyc)t<>W$@H z@9+L#EE!G~E+i!@fs|q*T73TnwU<^?u8={IYhd1P0cGTUehq}Yn}41cYlLf%&*8A{ zlV=~o>yvEY^>O|01M$a`mvOK`@_pz*iSLoPkxwV%AF&kf<^}DAtq|EH_$9`LLNK?d zA@rc}Kuz1Jo$pN~N;1ud3=t;&YW)6*9q~t8&er8WOQl|VMPuTiRzy?=Vl<$yp|KIS6}18e9m zul=B}xpjQ!D)%V$`n>`f_$uEV^=EZclyRRaluEJJUk|aj+0gyvh%c^ukn(fpJV{~_UEBzohEa&a`i#V-fqNNoMQ^2#EF#vFqITDaDr z8sFf(`*$rr<$v;+4xRB87M=$zCecKg{5ly!RQDI-;LdkSKWh<)ax-rO*T26Hw^4Sk zW_?1Is=#0G1beyV0XBBer7cyp^iPiaF7>HekG+2G?nb}EeX6#f+Q?=D9zKP3r?8_+ z20h(!@k>ic)=%g&IhXV~k5PwI@Tloc+W|z`z>Me^COQIsv zW8%_Frm z#{^8!VSmg+f!;j9`$A}Oq#>j(x(qNLK8166Crch)%B_YL_%No#j+*e-sL>$_F|q#s zk&!`(q3{fEv@K+sx+uUWp+b%idsx0v1HQtNHAF7`!mv+WseB8%bJ~l!-fE&!vz_|C z!!de2?bA_Y%rk%hn&UaNJRzAZOLUg-p+{fdO@EmYk>VVan4Gc@Vt^wvm2EA5`Mk6c z9x8YMNUOM?3utepy2M(e5k*<*ly8_6s-LyQ@{ipF}1m z(cnc{?ic6(0?WfF;E1+k zP2$1rxk6{h1;_#J4mkMxr|+OWC)g)gD>Mts1o{J9mz8MxRGM< zo?J91$vk9%eqRMKLo+ol1L?E%ZJbASx__dmNT-7=t|%VTk~9zzERgYpT|pdyP}+37 zNLJuj!qtcCspjFbi=as2<&le}qPT3pdK`FILW%kD&M&0SS%cL)e0}EJ)gy-DBMoql z!%<`zc#%_WeqQMfbQ7SYeW`8DnFzK^(8<|JUh$22-tEDN3FM{lRJs9c*9FOb; zbOc<C*%zm%xAo440Fd1bBbO-=m@XiHJdcqm25xi4qYN#SMvZ6j~`! zQ6i(DxO9UpvNTJBAe$_LEQc1^SD|ST5L()WZbS{BX52`*%Ov6$%dxa7D5ji==TX;+ z^Dr?rHBjdRQ6if5+7Kv@icZvohU|-zImu_sT;1K>WFBgj zCNx+XDf3ar?Nh0hal%K0%r7c9R27%#BJ+rdkZm445i8rQidAXiReOG`ERRx0?~hYy zWIj=QRGLVNqU_|+D$Tw)<&vdt%iMn#xGr3@n4)Gw z3EHA{ZFWIQMh2wkOEbw_!uq?yI#_hf@8-VK;gz+F3mMyaQeF^_yuw<&&gEZ zfQ0a1X|IHM9I{eKZWO~F>HB{YFNH*}y$>zIdI0)7#*6P{PhIG%IRnghSAEG8;wTST zuTV6ckC57au%I{gWgF4275`!o1lwTdOA#M{F|57_noeX5>^v`3n*1ui28JwH>PRLK z+1mv;2j`sorM5Z+vXk?34`xea)_KPV3K5R^IQ5FO)l%D8a7JgWYwv$(FvB}2B{l`y z7~2nYe`++Cd20iG=U;D;5#b)(&l-wx5su+f)3cHwkqI&+H8mM(JA3?F0>29NQl@hG zC=!!pf2bpOKdKuLw6(%xXv|~GizNcKk9l!R&qr#zkQVVRc$NJr=pwQBV*6_KXr9;N z|EBb}|D|O1!cYlPgMEMfr*yF^Inw<90TMxjDV@qT@)9$ytfwCfwZ@r57{WWUIMYmK zqMuTn?-c0dl*@!YCT$Xjf5hE?*mdP0*QfNCc&j5LHo+}DCqV!FDV1%&pk`b=3SERj zqa7=-mwoAZgE;sR>%(r!_Qd8Bt-8~7S;vyfIYVh9)B$t5Q{{gy4VI9FWYKOST7XQ# zo$oK2y6UBSLGd%!Bi5BbgDw+Nr5g&M2J{S}udwsn62rF#8MQmMQK(4E&x6Am+|K0f>3*;o z0?T*QW@&S^xxjyss*j&xwB>S+Rmttp!qz893$j4=6*K z^FuN=VLdDj=8z`W*!7^flv9#wfI%o_aC~3y)nQmZ%L$gx_ykACSE04QMJR7A;tl)| zTUrKMFfb%UoCRd|(KM~5Ft0qXj8Tfi2w0iKg6_Mu<)uYW1ndlYiwQ#<4kkzV`VuD7 z6}B^Ld!T=$sj9NLn5(Q2#=Q%0UKLv29AG|a=AR342l3jVh#$vWvfmuPateN6-p=nL zG_ha3(s@hsriXhtVzupn7x*(o^2QIRpwqKKWRPBRKA?poYu~a7%%QbQ*zrKG*56*R8X#V3pG@|uo1O7S+eIo9| zNg{qScCc%JY#<9FLP~1lxz-|`4%!)Gv_3p0ENSkNP?slIehaXYBol7-ax$Gr zhgPAD>6_|%?HmzrWu4&h>mhiCbiaOcdZDyTt@VL0W=*7%+o#e7e)u=*Nfq2qAb+17 z0?dCV=_CV4mh&7SX_$`b1(-6-37b7^IK);a=rm2qHGpYw7y3(jtA_6vH$XewNU3rw z4S+9UBarlzRJA%GAvz-#ey1#$#1V6saILe@N`%8B61FuD!a0xiL6QB+zCXO-gI_$=R)j6+!~ zAVo04`Qp>@4wfAhZ8z}#7QP2-G&zEgAO9B!XH_*gc*Umz=3~I z@!m&H21?DP)opNs>5Oa*QbtB9=fBy44;|V4j1QTAi~qJV+W78k48WOUqBl&&kWqg)GQnl8T_7 z`$QGRW`3Q3wR_aX)}Sl<%IwU0h?`dO3pI&(kdnrcSMN7jDex2#6Ivl@)eeIZPQoxW z3s{{cgyy4Ia*u$-HmzdBvw{?t;_iAe*;y#QVRzKK|u!fsGvBl9arx4t~7w2=X%e1{BfT=`H`Ky_IkhX{l52m*OpLy z`%n^z#A|Wrs?bHNp7Re{5jfe`eZ^aUd{QEg>LdP58icLCBBxg781>jchokmkD0B## zJd~13Bntyy^G{07PL10btM(q}Ki+%tj2Y9s{Su>7K)VP#bzBFz6#2J&G_MQB~lyOtXQ`AK2DQX5aiF%rvN%>IE zP_rmsY78}*dX^eXO`*n7Q>pRPi_`?_C2AV=JT;wqjC!1sQwqw9dV(54^`(YU!>JL} zNUA@@QUj=QBqvlqDqYe~a=XuecIiCnr+qVIBV?Op7wDz*)qZJAALir!!hi(>M-6No zq@UX$xz4i=QGvv8&j=00-uvC2miVoU;=Ge&jKqM$O zz+Bj9HS4%MvzBS3&zI{n^t{%rQ%!N%jhlGQOi-lLe4)93FJ#0z+RLd02U_P4mo!Mg zxlk%rIG3lrmdrf8fgvI~g1x z7PBYu6&X(VAnJ|ZSuGV~#K%}P2fbF?&~^AbP>?Xq5qvx-qF_BlSxqT&-~@9izfW&X z1s!ON25ljJ3eS;0kCy8z!2%WqRJYac7iZtaCO{hw3QwfFgngDB&;^H~izAVy3vrdO9jromRSjB*V&teF&M(#g4`u}v zq-KSgJx}elULt{RgEQv6yro>Iu#_`7bTH(WO=ck( z7(9#q6WXS^I8&N`E^N$0P@TeC1e6`l@D6jaL!Pz}-Y&6}38kbOI%EQk{`OxItHx4T z0g7@cF0+-QpPXKDfu7*{$0PQQ3A?Nx!d_79h4*1M_kfHHIxxT3ZWW5jvu=y+wvM8T zPe5TOl_kTo=`=7wK_))y>Xv)`*5~i5LP*t|x1+rdiFojTo)k@R&Si}W)g(PNW`&)r z;UOJ*@sp~Po6{cX+58)q!=#r;)y9KOZ=Uj2tqiwp(P_iJB>@|o|0`>Os>I7w3H z8u2ssQ1^*{;=OL_6Zj}|G9ONu}cbk^i%Rzr2#U5N(5kdK zVmUvE21Nn{2{9IO{}re(ZH+_Ew2PGXUh=sByEw92 z5^0@GOS(l<1dUMBj%L{i@xO!HBSm+eKCEu5Sx^&y)@MFseH(oUYE2cKuWO&&l&T9K z1OI{Xn_{(1Z!5GK73hTPdP$zZmxH1b1e>+)EAfQ9sI~Oa4?yt5nnOv;q`^{4f?!CH zH}$}3BkANM%kdPjBVTID?um~y>fr^JGn4yOLSZQslg2HDA}eW^K2f8R zVW;@tZaMr(>U`SyBwJDC{*$RNK&H~QoDRi*>9Q8ufu6l^1U*3>=0m$Qu3vS9CL?GR z1vY3@isAHos6pnI(Whf3<3Iv^8cjN}|EZzrtCY54Jf z5Fb^*gjtab!3`hZD)8{`9R9TwjsGicLeXdi(U}0W8BH0BhG1V64qC)|I)nL^{`Q-d z*eAz?7ta~3id^Zx`dMHm{9!ndy|-I^Ntfb-0ppjprKA-ws z#ZRj6kAJ2*e;gLZgih;6MA3*`TqFg5{wH#AQ{43s*XQ)rQ^|AkxVXX%s*LH2V|_`o zN70YKoN}NYJ4p{rmpTJ_C);Z57rF{hCU-sd2k-|`z3e9ae!FIMCYQ_Qs9NX)sE!br z_gqrORA8piUC3zbuoWLB5;2TM%Iy(Yk`LKt4Y{)nrORBW2x^&~K3l2J;DG0UwW=3f z+yB?}yX3|toEl1S9d@8YZd?BVpILIlD0`Io(bGy=_Ow9mB<_ zZ{YjKN2o;&`ii}4|M@(8&D~TbLIwZ|b?(a=*%ED$y01^%_o@za}m&4w!K6&5xUfCTLcXf!Lhdnbi{8 zkXFi!t75T)Bxq|W=OfJRzVYS3&q&)d?>$3igu0(lPy!_n^y3g}miKCz*{ms02F_3D3O(ct3cLZo zf!E%T(M^pt_23Bj0yK|qj`Vv+2ZIj&SK_xv>@x}vTG?@7U ztukzRM#t-WNV4%@@2Bv_U43BvFQlp-zmJB0q5%#3vFJmp#66oz zgSSSP%QJ29WqM0|b;3?K#$4{Xd=p9EnmanjTnSs0g`lgn+60SL>9KRC9cZU#(m2D# zpIOf+XWXMamYe6EY#YG;&rM=9&X(chq`kDnSyo>2%>Vzi=&y;z0aPnP$LMfe_ZJp< zrW80tyqm=3D;0}>NL-$pE3>pg9VvkRyK=@R^J!cPX~cSWBO-cv?`YVMe9HHtsjwBA zpxE5V+c+|xbsp7ilp8m3`J;h}CLmfY2cQKM-w21`KD@~hvnh+FU)oY?7of;eK`=<- z$S``~&8JDxRq-d1TTA72V48ak_#EOdNt)(B?87uQ(H~TQ{GO&JW4xho7AVqs8}y2& zL9ak3CzO(i%NRB7uP<%%40pmLDZj@ZlI@>MouT4o_R%2Q&Ad$P9AHxNOLW0tFsW&CDLI8augg{8t*#7jk(hk56^axcr=g|S zUM+A#SO=>uYWM9Q5NgUI5$pOzUX*F&wn7b9iptzg=pNAzZPR|K7%xs|Q8b!+vHM-2 zNg(_ra|y)ID>lL^l5#_$T-a;goSmo98B{I`A3uSAF8#k%aXWeiDNrABaHz3qi}Q%p zhzo-(r7@w-vJ2`#(Id3M0e+uZQS4X`DMIQIh1YL=rKcJnWboH4>90ER8e7@ixc`da zIVD7MtBJvifj~>P;6B)x1X8Zm=6Cg^sm-}xvd;oMVtJp3#?fJamotMMaE0y(%Vp-8H*h!MqM4H_GNPZUrGypGRXhmXp81<}M1g{>$NETtvN z&V9$WodD*rBkGk*9qtzsph|f?G-eenhv1zBpV;^^vkjOxYdRYnH1Ie zCCQc;CKW#>I#yCzTmlUY*3)>nP*tygN~IU!NFrSAUz7=zmL}^SXeXHrr{7rTH#27a zGQUkr)5F7_&zk~;Om4dy%sC?snvV?JEx{&LJe!qn*c4>j5b;q1$Xs4j%m~ z;1P`Pjb-1G>B8JY1Fo&xol>tXELPWQOZLcT$^`f8kUat9UEN}_GY4g5_xZB zlNvX)WmU(vq}D+fbNb@D*Lx0!EnBiO#DAl5#&WhPr#qrKr!AvH4WZ2JDN82JUUB@x zk4|5?)ur_6eVu`VPf7r_Nl_2tSzJdKE|Z};x)2ES>@2P2pj1!dZb zs-n^=o09nZZuimn&;O)<&^;Chc~CCxCBp8M+a+)by>n42Hj8W7o5^Sd*?&|p9vqda zjCe_nXTYmWU^O0(CSJX95cNNN-AF?Y(ohYCAC7 zE@-f9ekA5nURFh6*(;i)-r6SKzOc}k4|xi)pQoTdMpE=l z6B_XS=@!XXKcbQ3$aMhSVH=nn3ZhmAxU0ic+YP}M9?SAV%oM6tpdU7lt=J#TMNLFRqj;{J0E&HP&UwP!@ zCq*^D9Oz72kyf}kYPBkQZ7d(oWswLCyur+wz`zuiK)t&U^|uPJwei;#B=PSMOjysl zUyT)3q_xk#185bzQzpugfMP2v1mbm=5|h3<0Z zHIZn(7KgHM&~zp7)9Cw)&J+M+Fmie#4fRz#W0wHW+e!kfZ9HTGd zimT6^wA+P^<&R35v3J2oOdXVJ0W+4S|FuODWc^IH?-c);L>R z?NF?CYFqn0u@C*e?@0nAee3&upC&)O_dfR-=luWY{LhIMW!;Oiva%YmeB0I)YgbQM z?(E_+W4htaX#Gel{it60Hw0-|sz3N@txdzI3EvFS&mW9`6a&$WL6pGCYSr2u%Y#Fr zM84iW;?a|qzcqTs{Q2*WUK;2r^4+^9XteVlv5#lq9x=HH7`-WYudk;#YTD?f0Rf{o z8r}#Sz0otwQxxI3&$R0D;J}b@v8QOXbMQV-Q4mE@u4|V@1?}DHyev9+-?nwjLp-;C zup-oJ{YsI4_l8wrJ{wnyeK)-y?&snd;lJ4_GGNb^HIhIN*Ey4S%$>6H-KlTxn)mjY z`P0U_JG}GW^zktZW=vQ(bE0(7tVy%qqNum2G1PYI18M~|pPELErFKy3sg;xi^$s`eQZ0KKX^00ox4iA50_yxO#b~o(%*yq|m z9Knw8A5lBv&yjORHjcb8YRssnQPAL6TskHU0s?EG zlyB*jdYP~E{pbU^`AvL>Pz@SiABc?LR^b$(alYTRNcX@B^nL=Q(?4Kkhos5?2!a@Y zka^<%ofsJLJ0@@leVBzW^xzuTa>bk$fJ??|##HI(ze(yCf$ zC{8Vi&*oDy!yy(Jyj&l~eu6)>!FDuR5=*rDgIX)qBY}RIo@N{9(i$>b7{u_nHyta2 zz<_Ef+SUZy5Ks z<+xb-#nxjB-gonrNDS+yXwm0dE6|~^4uReaS+R9NkP?$9k4)xL;v_ql0yB5{&F@av zAt4&6`3PjZ(x*aN4NSF0RextJxZx!q;8C-1zwgJRA&5Wtvx@J5MxowKfR3XtSY(65 zHkEW~Z5KMmnrvGIRs0G(VG){tV56>r#s-n;Q7Cy-OYB%hqkcFX+hdhYxY@eDo2Cf^ zG5-{8`2}yW5r_Z%kzoZfZ8GUt9cs{8oo_=mZ31*mZ^OoW%YssZ7zLepY8EPz=Ok8( zKnlzz(~dOI#CJ-C{t;a>J~Vka0{nS>s8U$C>l${+ipvuhduAu+Bo!rp7eO(UxcIuxthLHw>qvk8;XVEUU% zXFm^r$I1LS8f^|{uT>sD2kp$Abq}$C!x6O9V5J%Y&i$QI+V*9L1u7IYvboZ6U$^7B zLj~`Mi&$)nA`nM^)3D5cZTr6Uv-xhcS(WL~5uHH48NFgPYGo#!;fePhxgz)>{91@&%V2Ve*M<%YfjUrIWJkt z8>ev5q8nOdqa8x#$sx9hMSq@Qy+L}IyF-`N5Oaotly}qT(2XetzJI65Oxm`!-p`|K z_eg9tWh%DCgPu(OqwVPa`Z^x@Tdxpqa+|kk#Rs=Ke!O}8=C#&ME?f_2ktf;ldg23( zncZD@t%PcR3{H@Lo^?R;5;gYKm1fL#hYAgiCgICAc#TNda}V`3&m=-?=$@snx1k6E z%Z>WmZ2W=P%n)E!n`f%&l#0w(e^^YR4_4A>ZD)G1Pnn_?>>G+Q5Aph(8ez|fH_dFR z=?qpF7EI9U^NjwuaYdk)=mP42aFw^J!fhME39{tgA<>D@f5(#UK~_KgfNasgnLod| z!!0Vnm$&_Ysa{^<`8Th2*8Qj8N1Grw>Ixc4PI((u+!E*)piQi%0$LEg=4U(%_nk5k z55xmrOh7EMJN2Z-5ayzi(k01!_}0y`U|0f6&cuAnD6g<3cP?MN350E;{BcZ=vx;=+ zLxK!1{V}$n6mp=Tiz|;zTv=x3%6U{M#1A{85@R8M1rkkMK`%{N@2Qz7%W<91(lh(X z>^|rci;hOrVQ1_d5rU85qnZ%pjMi4}M@KpAf%Di|AkxI2i9ZXE;3Blcjlz?~mm7;7 z!aZn~mAVw|B zIcWBO95fl*^H|tLuw#BSU^fBsUZn@^tJ)O~sH#3IL@#E1qH zW{%PQ^hkhmNTNmqEK=`)Q}q2$p@B=w-`A{vt}3g$@*c#zw`kXFZp%bd4m1$q1#X{U zPA#a~oGK=CrHZv$l&-b9r9*NeXB?2+5QGtP=gG5YOP^pNkHzNK8#<+d7ItIJlLgXx zsr4W9kH=PR*|K}p6hcMQ7QzDc*P&I9hTEP%BD9YE z{_>BgKc@^+Mb-dQsV>{Ejz2nY>zb&wF1)SoplK@H%N&3n;C2V|6)G_w84HX`D(VVa z`tijpXxEh?a7khiF&|ypaC^AzzY>st6s=%4?>Tk;Mn<+me zZUyG)o!cD^vij&cUQ<+^RjkYjsY)&YMpac*UnObWoUmQtyNi!0^r_ed%-buL%-yZ> zE0yrJm`aF|g$IrRpAu1i{8Beq4GGMgm+R0_H1uWrH!V?Tw(jTRa`#lu0A?kBodj`^ zlwn|Gd`UuyLJb*^l~Iyaz@WbPDm!t>vE$|WO-*XPrYs-s0MmhNV2=Be-4l&i=QaPb zWa)dDXG>L3krVl0LM5M69Ca|c_;`7FbN+*z3-BqNWd2Fv;wDfQayfD5CuXGO#TP;u zA;(a(f%T_nKxAFw1=(4+0T-Zu4L&b8U3{@p{S-Q&F1pYue=9lGX2712((u?FkL+Zn z3S}fP3A8i{B&o{u%+#)I?q~Q|-PNH{1YiQR7}c?86#ZJ@j6!}W^EJR3Y=+~3PN|;- zz^9qn=1O;G_aS7}cx`}oxa|vc7Ui+xtjJ7Jc2L&pBKU}@ZEF1CtCGNf&`eGloe|yG zl^b+IL)r;TlP1eKca1wph!x%w&-Z@kW%N@iZ~Lq@>C3n+BfPx)rtjQTcwfY&mZuel z0%M>9KUo+9qK5o3WlIs)>U~~bM{>r@rms%_j#-U=c9#{5a>2?dp#}QI=p<{Fx@ev7 zA2Oj+`oE~@|A&?~W!7zfUDh9RU56ZXdvt0-?-(?lNQm3?)8p%RY%Zy6kHhr;jjmsAh5z;6<8N@5SXjg zpB!o;89Gr6feJoJ?iC#jC(mDnJXsYNUoX~33mM}!(JU=GZp3hZtx@xNvei{a4Miy2 z*G%oBbUe1+zHEa%g(w{#D2 zX1{TGBzDAWf5-Ny@5e_Qs?>ZqM4BLI!p#lsZ)z(vREK5~l!^?Ye4a%ppZAdNiGTBF zo1^z*oK8=<;eF?S?t^0;<)HELQ$$2_3g?aF%*-MqoGr zI5x&2^4s8c+}{G*r_GUU3~l>DFSo7>uM7?j4-XEm46m!JtgPd@v-A+Sj>@ikUN=nM ziuSX0DPKjxY{qr>`USz;v-a=h_UunPswh{e6y^S1sKs`FM%Y&7lr-gYhXb`S*9dHx z+mAc0c^{20<~3scnH*0wWICp9`S ziSuaQT;xWqEm*Q(?)xVlzY62C6hDbe(k&|rD*{Fz;%7$!L(4kV!qYX_4f`Oszd!wd zAu92uuU@WCOdiWaY?n~;}84mIO3*bN#hpPU` zTAWW$(S_YPa-^WHh3hHeiRYoC%l9w!);+$TN%x=#4eNZHhG_5%^$GC|0HSCiJ|i}R z6h0Y{%hZWg5#sRZpv6DK5j6fo)bAQ+tJnYbS~!@06cwS8y$;zCAfGYRY<91SsUu&b z4(&Uot`;I_>AwZnt}^7U?rABDRC~w*$W*5kQx?~UEXGlWiPFxYdt{UPkpH8(fvxa8 zY=!RG)V;o+(Lf_1epckG1`XI(Kot}oV0v^}U#(RKsbLP21b_x2p-r>JE~Z)ZfM`4y zPqjgRFHLrFGOyp-Dcx>?B#TtD{Q>>uU6P*PF?Do|9_(YDKA@|vF^RSWLrf#)YUqX+ zS)a8~Lil@nw4Ln;?VaELNd+kM*TwLfsfvK{`}EXG?43=p8#tWnSaW^&F^S_ z^I_*SdhYyGNzx9e4dSx0v$CO#sg|fk;_z61|Fxg&eBSZk!gq!V(==$Q4hal?Nf79F z8T?{s41_@xQQLG>n6WKV!MD=e@L3xLomLxnGX6-^)$~FiNF@0(Av`^KFXqxB83pZ% z&f2t^`d?y@^t`Tt2L1}}$P#D99tQivkeOeut$D00$*g3Qbhc{??wyrX6kQHQ&;pr% zWm%Qx3IQ!LV(!zwGsl=4hY_%`7S|6gpfaq7@iVl~4aNHI4&+Q&7@_ag#8w8JRvZGR zuB%qwlbD^E#G?S=t<7KKal6OEvOrBtb!lCGi;{yprBaTg8`?I;(yQlx>N(vr zCLGz*&rokP8fV({GlRYjXdjFW3Od_@o^jK zYxo$deJlNVR^AW^QNZ|{t%=)zh29ZeOFT9mDFVECv|4D}+HvI6k*bntCk{)6l5Vwi z?{9^hih~Oy7xjraBX*L$;zK`GTu{v}MbAfyrHUkk2dW z+nwrcpK8Ks`+QJCfjTqy0*cEzOcoGi975NQEjpwi z*7ylE=LqJG(db7I5jgLP zK)+m1u|>JXxlqAmLH%A14_cm4tNaA&$vF=A`GKD-Na>gn%3D+&<5eDQW9^{atMcAAA zYOE;(p_XuAHzW?OUOBQTD>n! z#v{nz{@9JPeTfs1^|D`()z4p}eu$pcfqS{SMtit%BnBK|onT*Uq*k7z$RXb>J7vBi zSFVCw`}QkmK6`Nf{iSmpH!e3A^??R0yonYOyKcBiqByF5X3-eBs2Q4@eITC4W6)T- z2%3F-z$c!=WAPYaJo&FrGZgV?3?56zgHJOVTx6JPp5~QUO~5-QYsCURptVjv?|UX!I=xD}GGu*q@*tFU4zpaR}gE zj1>HuRjR^&dM+EaptsR7?PYa&Mh28H23vCYD>|ht$`HzZAzZ@m=~7D-My*AvZ`213 zw)*v&05xZ_vCcbV;?ok-qf#M~i7ky*HT`-4_0sP9$bGLk(BHFObRZ{JnUQN$Y0tmb z=-(tKc`iWL_3i9=k1UzYBW;UsHhw3=jZ=ESz6=k4WoRuF!-tTWmvK1bg7UiZg7RF} zML5rN7QI&bnV@1QFwwQXVsk38(N`@BgGNecsL(|N~$huP0 z$u4s~(RQxw^cVL(-r>5@*?k%RMF9Kd{u8b6G4pWlecTuKdv}4u#*^E=2<2>lTN1Hm z{gM%Xlb_8(gVB(ukAJ%7ba|VJ^gs?x>b&w<{1`6)i;SNrwjD+ z2_(#TxJCE)-!O=vCx;m7hlf81P>}u_n|aDNFOKMqpoC2KV(f0GjLnRwgBr*#SE>xb zVfX(&!gSdA?Wo0YSl12|cb^hXlx1aS=YWc-j#7t;BBKNS z%U7VG$c_lf!Du@n21>yK-Bc`?Fpn^WemoQPI(JTWhe} zzSgg3E2My2A%|2*&58jT53%$#JW~PoKU5+N$oHpO^q)U)6yCtk37VHBcEl3d`i~HM+d+pst zW;1_EN8t%J+s!vVqGRwtNCO2ERT8af%&afU;L6Ydo8Mk@9}goTSa)aVdnYf2~T6Q2->_ zN0mmaD|1VWb1aBzTvYuZ7hT_J&Bkr^l*A^bq)U?_#>nByA1@&5PXe1fy+eb2gH=AQ zJvFzX$oh!HlORK9eBF379QVT36OBJntos!YN4=2sb2I`GP2hv`*o97H2b0i$1l=!p z@7#O~PsEd)aG!++Ys_m$W7<)AI~v<=1#RtZe~>RpKd%O}Sp^x{r2I3SFDzLSpUUCd zzgDIt%2OfPUQ!lQQJq^}n8l%QerNA`UEa3MYyHxtE$h#mX}Nrto4taKm+U`&ykdV* zQALQmyCj5oVYB`|dw*Zsj_sa*8PCANy270oMBU>gK8Glbv`vEDJ>vD*}4 zU{WGe!UC%m1$?anS*2%eX0U@00>SNE&{6Tl-xD#k`hm>>p9moK_ZV) zM99feMCGZa6-ROo9p^fK9i|J--G(f4o}J#6WbbIvFasKL+P-c>cEoq@lG>@!Jno(D zkgMWDR`|^c*%GJmxEguk#Y?yhRg5;`vlZJmyG`7kyGgT_OG?_XMy`;A#rVK3X7Q=z zpPf6>bf}RllN{Sh6wN2~H%=c21$n4EG?h3Bc#q=hI`lWk2U zX{k=|=_OW{l#&X6QpQjwaOkNi*VJ}(dnLgfmeH5b{&?@$;j3*YufdlL>NnvY9)SBS zm_OI6Eiu7Rz$E(vzneF9P%M^Ifx6Zr|YOV%+OR4O;))>bX{czSpO)pL?}< z_(g?=g{Z|1x!Fp{;IcrLB1vDqU>Bd1nwUz+9Ho+$RR5uWLqoXNp!+flb#TJ9en;)v zEFWN^iQEpYNF&t-Cnt#ZV=%$x-ctW#;!XbYosh=hRYC{?Z#-UZ1UWgP>d_DC2c^6+ z2hKnp^F&DCT>4?zhoz^L)h4zygeepGFeUDlA#eLPTyG@FCqKu4YbZ`COw7gKB2PPM ze!5ZyOpGLdUMwMZiKsk`9WnVPBpbmlu81$o&s64@a9#QPis9FK==h)mh3NJg^0!`q z96u((<1Ir?d*h6^TVSkDNI35wDw2E4 zH>Sk`1TnV18H56NlK$oF`y1A6T04F3qQX<5L`dg<<`5y>-9(uA(*}|khkx_**{z+I z9UBb$nXh>jrZ%cp$IUF1CTB$z;Xz;TLiT{H;rSuNqY>Yg73O9^DU+9~4h_P)u^rCG zeNWD4-o~9@c5f3gT5YyEud91XY4yDcWlyvT4xw~b76)>ou>A6q8#$DXDQAmj;QMCU zIV0+SzWHjQ;djpDJYO!D4ue!hTqJ|v>tt9YLciMJUxht;My>=9FA)I*>bvWS&zUWE zmb8TdBT9)(iY-jePUq1)Y*mWqfD=sg!aN>1JvK2Z6=IpBoXDDbw3}#zd~QHOp&k|D zP5CsA$`xw+T%A*RX3?T$E4FRhwr#tTRBW4nY&#X(HY>Jm+crAq-qZci&-;DtZ>>4z zm?v+JK9vOl?~hAQ=OyRMIr(1@prMZn2&wV9V5q5h^PrIM9L(&@|1YZiFE=l$BBQM) znHo$Fc8tjU|D~C!K%ZckskwBZcmQ^$|NZ9V>}X?F8IN8x=$J(~#Jw31 z@1v#JY{0zPZLR;i-q^w0UVp-COlMVo-d<`e^T1>3HRt#l@WqgScMqTpQZ#U}k^3ww zFo8C?Odnfrz{7fG-jlv>A*VQ=8OiJDEN&}Qk}SQ51g&3ZBOZLqj{g_UXpxm9qbbU}R91a(w> zVr4v=bFEz4D70?ImNmc-j=88hoXs4rytq=aA3NH*L#xO_6$hKGQqO2AOjb^b422DCtAg0 zp<+SzOu<+bVb)SlWD7*7YR7dK5T-@lXO>OmPTu3PGA)afs12x^EnOs!o}V8*Xe^9# zLIDI=$vd8L_SNtr?s(XS`%5sU;QsS`)V}*^LUJJb331QCJ$2b-sz1m`MnjJ6j=N?} z7BA=6&+_r%mpCEz;h*9?@58UiBzhuwgPsi@@z@Bs0l*#(2}S$5b{?b=;8+3kY}YY< z2(~jXY)BJ5pMbBMqQk%8#gORJy&`G(PBXjSNsW6@v5}17o-+=b-5sKcHySi$z8iwANmr|-&}g8H!cRwsC&2awNj%lyd+UV0nbKF zQX{zOXsg`4hFHO+sM85h%rqONZOK*K23OB7!q7mWV5dGWzzw(D_m9O<-_>Uep;j(! zXvHYN)qsOnXptEEqUt~2e-M&dU+J7(#YrO@qm-zFde*>fm> z$w+o!Uk)wZ#Q=hYP)19k@sgw>=(hG7ts@5YS^dPR>2?Ea6Nq-&Ff~$upyhW+k|G?*qjOV( z&G7obnt#=p5znE2ZV0`d7)g>PFErZLz`!Je-+mU@bmVF?%-Ni-e(O{O1L@^;jByBJ|F;SN(d43Yi>#{)L}k9tCk|{g0!k0q3@xiZ|*KOSLrDU-OXAxN|Qz6 zN;J#~`x%`u#KAlPt(>&bcfV~gE*`h`E@NbbyDs~^m+0Z1U9_8>Ht!(+J;s08;;3Ii z+q?NXEm*H}&5KWa8{JoevBR=NtPXSz)0!SJ&!^2sku(JT*f0&27@sC!O=%mF(nq6= zGSf^Z+)eQsGSdfT|17c4{OB)<8~i;I(+4O>m6O4(&!N z4mT@V*2frC=ME5TNV0rE$_Gz~7=s%)&D?$M5AE8JTbZ^=NTFzR<`iTi0y6#ZWrMxHkdpT9Dv}ByZdJa3+4%LKNj-&& zRK%FtgGamKefP}Opx-fjCgj2N1)?iNnzx(;BzKX_E+Mev?NPFS8LOu#5j3U?fbJo1 zAkhl6AqfPHaIqwQ(~gKfB>7k*c~z9mwZ8X(LKdUz(uO458^g>}3>B5U7wUv4{|f;4 z!KjZ`xU`&LW$X|XAJpIO0Q(1<$A+V~Mj4MBg`EPdrN2=U2aR2KrcD#8wl7_7SCMwh zFvG=hhZ2ot`P3bgx|?i3F@qOzCv*445L z`8@JOUZ)iIc))^R;lTASDgf9=R^XY_kRnfD@c2N~)w<9TPphi%-X^Y0$o~XHyNC4c zs0BiS2e0T;FBl=l*2sNlPmngV7mV67@6D=ahBrTV59dMWlUTVkF9!)YE) z=#e9va&1ywDV*1D7USwvZmYBAXHD2(s1_1NSea9-DXuu<1N7zc#`gqS8DwU~DM$r7 z#nUB=5w|?ZEB&+%<&V9e-m^eed)&x0Vlue_mkwV_t>BzJRq?b-WJf|oE{M)-(tly< zd&7+240|IR6XaN;uM+{IoqW}a%U2hWd@#5%-d|)fB7=<(2W%3lk^%^a4nNoYU{g;= zz%=obFwVATW5dHQ`J!W*R|}+K<&*#+m74gw(sV*S`P0W5G`rI9l%vZn~N`KvHYU``;wGUBqXEm zdvcw#5t>GfU6nJ~U1)`&zjrix%E@cyt2LDW6^FiY?#r(q# zM1?}#IXzEuNMCLtXDRYmIe!G=QB%#Uq+TbWFmIN-_WqIH0fjG*F*;wBH=mLPS` z1ShU|*^jm?w)J)yq9Ec+ZkwCsO!DibT&7Xc(>Poin@@hPhZ%s6E|ws~B^vrMrbx8K zKX?%X-n7c{1WT06X!22z-9$i-XK~du7M15_k2bsA!Q%m*Nb*dsd1utGEmR82<|#ki zq9tXejVLVhD8}g-*?Zmm0SA7bLm&7@*s$9H=XFJgLR`9I>V(>p>?vP(r_eL5_Q@kI zwrGUmty*5>@F}C)sbekKe6nbGmSKPAF@XYxEr;Q$QhP1fRME(m-(qJ5Z-DFue-16O zO4Oyb!FTbnwJ8il3YL#deGj%HUl1vb@;djd(x6|%ITa+ z*+$qQafI9ABAUjDRsP>i)hi?=BxerbJ4H3S9yad$ewsSw73d7D$2cDeRew#3KLJ>*Q(XJf!NOAbpq_iC{2{Mk(irQtR6`Ti7z+=64r0`Ut z;{`+^BaTJy{M#3guQV`QG=2peB?yACa~EWJ+`;VZ8ij0p#;P>>)MRyoA4;^*>x}?T z!JvM(yY2cFiSK01H?4NnS!}Z~M#BmqohXq(;I-H#k`OT%7vjavCBs%&iq_$RD?|vf z*o#zXPs{RLz@s{1bA3O&fxxSfc}xYg#Y54U3s%=g>?{6rTU8nG)o@?vpotV#T?gxE z9k$7t_;(ngCe$cK0)CM*xjtEx{}`Z7I{RS|y&ZbZbi(C#NgdHWC1l|)48t7!z9nkN zQ*$cEOu!Sy#-u(5SQ*+&ucan@g+-w7c^$19n-G3peBBq6Z7n)ED$nm*UeqTh6AO1` z*Hgt~fGsKJ$bbBqebEV1?1%jS<_)lV(1d-dT;%6$k+CX~FjS>&XL;ewQvvxcBi2Sy z#<1LNqiiU@DP$#&T{np3DjzRz#x;24b=92Pxf;enfIqhbVHQ=Tq>lz7A1HC(frb_N z;|w)hlI+%J4^FSH&kq+5)?IsM7K#ZYM;*%9^2MtxV!4 z^@w!dDMoPhQTqz3y_rxR#Q?CToLx58WyMd>u#j@g-2GXcjm0)7O01BP(aPoW-l8GM zXA5HW7!xH^nyl$#lRZhs>t4eJ*d}BrTH}7Gd$34clf_R{$J?nISH*J2_Z~ z{;VZi5A^|pf9K5#GdBkA%*20On_`&%quLDO7|r`pZF-^M{71FPV(`e|I2o*4>+<;F zHgBmweWR1I@;z1yb@2k@KW$arM^_;Ho`Q?y z7*8s+L_aMeb){>K3$js_{cc<@?W^(}RK6FxYiF-gSU%eKnL+E5X_X=I_E4|PhUQm% z6lvnt2k#xl?oomMu>z)hEbb zLdx=-$+_-PvG_0R@~lERRp{hrIF)rh%gDiDdZtsieZjJpHu$%$9@%n-kR5>=pDFN} zF6#~F!*Jh6KxgD13uBRm_*y*So>5ZF)xN(Eg^fw9P1;iGaSqHvgJ1DAqOi;TgBaeA z)H>Rl%BpHHAS1AmnWSg+Au?e>n86WMvp(W*u|iCZksvepVL|RTvf|p}-hjH&->R=M z4&p+LyHc1gY2+d&N8gFLS>GiAu8=a~u{t6X;kww}Z}Gxu_Y|cWqsWnFg$TAnp**TR z@M;g1J6pB$d=NKWCRkhq;RXn*!*dv$L`z8=?AIV+MFt8oiZR4uL4%+5^ThsKbEO?K zPPT>YW-C#Jl`9hiQAr<+k^nFl&w6qnAT1*y%u2+n{?iXUS*U3=VA&{-#@hb0-!-bBy&aAzh6t%ecES0G)Qp~&x4hx`7niqkiT^JSo?w2CE2P~J=CrRfT z2^^(E=~-QCA!^=#|IuxRd>HX(x`Hl|iVXr^L_}6;*+hX+!wNkUwp)FEwGyYJBIW}C;aF=rQ zEf@cRXgDXLqse<|c_ix%h2(WK*HTPMeJ?tRLva~NT`GYN0EmWCKa`DHz7?pi$!7Y2 z7+*5XBKF_Q)W1Q<~$?XWXN-YMq{oasvd*h$kjGBOesR; zA$L@quzW&4lQJhsmTcZ2O4=rl;;!f2w7T?8bJ;C3I6^YLKVZFaROIW0>UBj=rv;VR zyGqoT{2rO(03dCN$+4Fk-%Kk$sPx##~n229UQU6YEpRO^|}pU#|EE0Oo>ODW#-#&y{2{V1QK)V%!oX z&bNNj#96%NXhvgW1d)r={hC2vj`;i$gyOU~*U-U%oYsp?EJLMv;HgpiL9u`gu(iil zlWV5UD!ug&O~P`@E{My%!>F zOD#oAK#7uwWq{#$w%o1!g3EHiq{(Qzvo5#2LtL$n6t_7EbcbvEj9v>6WjCLQOX&i4w5T1FMlNQJ)Pd|5NLhte8!}%}aqN)~NtdW6APF?fj zcEPOawoy04Tx5UnS7j|By{FV9NUq=X6slmuSGR7?q`&uMR|e>Kz}uPz#kja4@|C4e z@cdLFXD>FI^c@*^bBDXa&FmsbqOiUV0Gnm%ty6sITSBA*j<*3)=jYoUXJv%-(H$4P z=_D6M6x7Y+8y!;VVs}SKsa??Z7f=LRh^lg3ov*(&e4bC14zHBTn|M$QuQR+=7Pi%* zl|pof7^&ZmCSjT~b{0JL$MX6m&h;bIRa}Q99hOZJ^&U5Nudi%x1pdrbbWI4c15R#x zq#F6cZIY2su9BcR6o-sbI>UZeK#35mNbBwpX4FIA?-ICIbO>PU8a)q|>qskt#1+i6 zk`!^#($VoUiqqs^nfLB;2uwze0*N?FW8h;kX|_eJO$LPU@qmST9~BD+S`Jx<%Vryw z%jt~njmBtLWFnZ+-0HMK=mBqG0NGxz&e4|W;ziE_`8LM>6`^@vd=ur5?uX5^c~;@z0DK$Ew;+W07;*fP!o8ifJy zpY9wUo}%?e&ce!f-eJW~&(5!3M}V)Y!e2%DzP_;Chcg>zFx+J0Ah*3!GwzrTrtZraa7 z6y)*7#uqJ#62~LQ6~eKsWN1@ye!9Y?9JuCCHmkUpXjw_5O9%RFKH<|Kr9FAq+r1iV zI;3(d5O@O&EQ9W$XWE#TfOfP>D3m&0qnwJlG>tjX=-)bj0y}j694vq+>3*_Ustq9L9Z*gEwcTDc9jk8s7j){o=hHb80-ASKs@ zwfF`&L@$eC=0z>%7N}0+WT}kZ*i|E9;Jh>jF46dw47Ne?8<_;w0KU2xc#E2Y{h#y4 zHF$Fvc;%t@xbPH_y&16jr?nGZ4jLj(K5AB4^}Tc&vrC@Z5}|7~EWGU1k&)4BRhe9H zLjf4a!)M6Qgc_Mu^$%l4#z26Xn$`aP>FNH0)$5(!qocrxR7~NvQvpGDO;t4+d-83Q zOj6pUWlLs}f(1l8#S%hYzUxud73l*}V(7^0vdR^R?F{~M1;cPr$h}bv&=r4&;LS*A zDS3R`iljt3uF6?lvQN|_)8^#Q_p9;qZ342zPYCmO1mm=Cu$!&xx&O_8|avu^8|Am%@J%nW8LhN8=nujADYgzfPI4o=|7(5I!0;xUv;g zL{6gy(Z^Uhpju_Ye6<3IF<{f=QV+iDJy?;pW(xr|tOV^)RaIrBf0KN$yM5X#P;gl7 z^{L3-Q`o{iLYp|~x5K=00sr?cvcrQU;bd6Hu>&KFIEW|JwRphFP1ZQ9cRe@$x~5zL zO*tmyg-W3QE1@?lFY>m{qB-q^01Cbb@h=a*QbU{nwz*S~r-%~3j`1oLmO*wh8zKp8 zU#emF;Dprjl}#NCSE%!Z$ivl^I8|Dza`8YT`tB(tB*rK=1SLMPWae-tSaOIt_u85b zpO1Im`PdHqJ4=^ay3&(+?RlC<(LD;op1!Ax(zKrAs6m#r?|^uA-L1Iz3c_fs6eD3| z8;4w%4z-mOUK;{{&gegDg`D5})BLRu7)3Ae5f$JQ_XnS7m;Zaza?2yLZDh5HbmQ-a z2b$17??Z`r4CAa< zD#ks7n_FU`xLAVMGdp`yn>DLcAXwW6U;K^*0VtWlH6$s32u#G;l1Vwx4;V^v&{{9T z-gDh2F3^}(4|Do3&6^%0G8WCSZb6ZLo4|mnyM*-*2BW#XPWzc>{JMAs9+3jTa{$7E z7|!CFF$%`V__RW`Ouv=Q7G#~@jr9`IG;A7hLjox6vGsVmyJ-khvDX>+0^02)7`)&g ztG2dam!t)ltqoNG-AbN__1PUp`f_`_z5O=bqcx~%rfGlHt~lMAwlHq+4+nN6bm~H2 z9>_OOh?y@r!OZ>h8?iaC4PDrP0rV59Zz^EL26WBPy1Zf;7edvjo0X4aEXCL?yvA-a zGYi<6qpo0BuFZU!_%z3gskiU~KSXDGXW19Y0o@i5$Y~LsF`>)eq?4axJ-GlAM)SJ( zA+Fc{XnNQcsWP#`X~6eqb)U6uw77n`=U0`Ujd>}65u~5e2>)cR>F=3U_3BmK-p^`6 zq3H0~AU=wmR@CAEwO+v?Qy|io~R)N-eAtm`WI!3h1CnM5C_nt8V z(x6koXD>Z3vIA+0ly_&Sb+D~5E+b3H-D)`2tK=odWN5oJ^8NXL%lUgBY3^)hU2|CsVB0guzPV`}9JAyg8B|-~?6$8->eiBesTGs?!dc^y zGci(_IO#V=pduwLl8%oUZ@JOhnzMGYrKk>N6k|bx+S|l_78XB2w0O=w+H68!eefZ2 zg2|xCDVj|BP6Qg}6Tz8{7ykc7bu9lks$=G2O!U|LpC&Xun6RXRghFbzDp)r%*ZS~*47HK@9_+TPZ`Lp%eP*Da^D8ca(uNCyiCB`gvbzt*B!(@1T= zKNCy!(vi^!664=vJcSJNJ%cYr+dai(J!Q4kWgi-<^{AxUC!*2-tW5xEXIX9Le#ROG znHcGC_?bcXlELC(lL518=>>A8C$TwB!jx@-(f!O2dz|#R=!3 z9IX*hM&eKAkdl_z221wv&nfz8_%_L_pijtm9r!YMfMT>tQK_dp0e>uj_`-7x+a>B= zr9&nMBS7u6seS~Ii?jU9j*l#&D#nj9>Sas?X<3A^U0c3%9u86oLWjr`#sY(F{N@E! zpycVHZ6G1brg^K6{)ElF2kv~3B(p-d_ot@a!nkyZ1rTZMT}ccRfy?SWO@T<4XsZtg z=>H9mZXT#>ufm||qcmRd`T3M>q^5OGR{x!fu!0Tu>Q4pWFXPNM2GX@hiaAIUMjhyS zRZN2$+90OlVdXX9f;6Vxd5OVCf$vu`IgZwe2Jf1s1pIELLx2u?j6R)=o?OI32*b{o zszq=hr^RxZhBIr?c3a4bYu6r|_SeeY1V#{>vz1RV+Z>w>R-yk>A68KOku^cKHE%sU zQtNfaN#Fyp6Bz16UKL3RGbZKznzwmD62pbMV%Z915>0|&rEZ=v#9Vo-+_KG(ee!`B z#Q0meNAh<`EoiPKhsgsNDSSNe=RN$M<>yiQP8fVm#~Q!H&RC zPB?EaJ6m!NmkUCqR?u!}>z6nK|7f3Fo;`Nn^Xv2owP6;NEkJpSX8j%T@4Y~|6f{+& zwnJRK`d-n9nJvv~lI$T)(M;|2RD}?k*u0l4DT%uqUpiNPJC_5CNaX}@&c$Thgk};s zDT@PO>nQ7Vk7y0=Zk2VR`T)lL1;qFLW>&s%;szj0G=&((I2bAM*t04qg?{s$ddvyEiXBiI!G~lOes%bzjT8kKWh-6 zsS6Ls7Q*9ue0a0elZ8z^+lduKByYSx;+6@BY>@vjvQuM6J;siJi8zd618O&6pM#~; zJ}h`5%dwRJ`tgKQl1-5*vA;$yPK@^^B;Rs|_lNuR5Bm2)?J%M8IY5#d;5tZX)C*lb zFP9>|d5Lj5Ccf&}lT`7w`k171$Rd#gLy;4537GtIyDVyWs*Nlknr*LfC@oOzTYdyk z^0H!}+ipU72#d)!7VE2HFY<3QsV zZx^}l>)9ogxq<&Z462>D9QRG8#PZ);Bm|tP_k$unjD%&|w{?NgZ+Ae*kn|apm3W7X zhDTEh{^<+(vnMTXHH~}S4eM1pcwxuGb6VTwniP!FdI(+;rF0bbZs7KG)R_;MY*Q9C zaXt+tBuyw26ptNLN~asVYXQ@MF$mr{1WG6JMSD&xs(Ozy-+{}-kOO&0^YvK$h-!PxPm{z(T>&XS}ZDh&A4PWjFBj` zMoE8TbXt2`sYNI#Xqv>~j?se8NeL6EJJfVrg=y@jEMv_2MWc$zfDH<;^4lBwCn-oO z@cuv~-8258(+j9Iz1(P9x8x@C?m_v^(VX0ede?pGAF{gXXqfZH_t6(8`pQ^3lx17Y zs2uC}|16Si9eBh_9^R|SJE&0zVGIip)%>8zI~Yjh*bFpRre)6^_mH|39U2=x9q#pf z!+AH{mpd3WZzRDTG8zHsa$k|?Nf$o2!kr{8A5(OnZL?X%(kY)u9m7pytahfam!bbP zb#AFe#|>w(aXi@3x{X=JILJafaOqFFIjS5w8d_@>!FfKNoU2Y)n^Q-uZW)}4M{#G) zmLa|3T*PI)zY)fXI+3ExD5bsra;!xiFy_8k9^tL zPs+bdZB)%>3D8}v_(ys%FNp6EUcZ&?3#X7BNv1y+r-=XBWWb)Ld+qyf?rnR=;~Oq- zIR2zg{eA@6@=)>E?sHUbMjKaBzyEP&Mkdz(%K>uzmjhJLk`-5#Y_Yus%>#n?F9?__i133B z!hV9m{TBlK?{EJ9L4Z{rP?{>sOHbicToOgvO(kGD3ijD(P4JvLXT0cUN{I1NeY}xz zjKQQdP(Z*2JDS>aAJHyhq<&|t> znU|CC`XApNLR0}nIp1L9NYQb18#j397^uhlTR1n&W8N);zlrnKp=3W)j&C-;KfD!R zpHCMsZ{H{bb7-_swy)kUlL~Iih%r2UAD#g`y`F(yUc8=HFiTb-Z~#dkpi3BU3HZvvql%8Q8V-4`r{*z@l`zo>4#baMu?{L-b<3k$Fx)`l!yt z#knWDiiIM|K8tPE^{G(TiF{Z-{fyJ*Z3=6D3;Ra_l2xkDhbH(V>PK3Dx8!?-KNOYA z6IZTY0Jo%KOZ_VyoxfECNKuMeFdqxnmX|9SQp71kThO#bX-fDj6kWisQc>Dcdi&!! zVPi}DD`-=+q_|$%w6MNlZHe5Jr7gjw;#9g^`lX7>mgAXKPd2=&#GnF0aR<9L= z0JbvwL50Sre%JV!{`$w;&T_A9^d^hf;f${c1+0y)$es9W#^=`Wr{d>~=@6+9hyE1U zNSr4GTQWE0x0nYOKxhkY&+e@K`9D#edN`1;MGA*>pvo-biqd`mv~PHm1|j6ZG)`Vj z28biNQF#~fs-&7ioH<#9HtdQ4jYG)nT9~DPjO_U2ISv3MhWo)1dHM3;xV-s zc0kHB)CZ9|Bgs4(TO^Dj|* zscxlak#vAlYXTHkath{5ENNKsQmA655D=on;asgA_&wTAKUqw0!!78y;MBj^B2SLs z4tzu=u0^nDH-gJ^+i#?6GA|jyTp1!^3|SS(+#CDE0pj{>IoEfi)a?> zxp0oGB|*kjs)CWIRr%jvr=yVs2N#;tyDI{1jyU0RMke4NGR|Kg2och%-?in+pwDsd zBuomo{VO92rJRt)!Vv{y}>QdTqL;)%ej(2CazyM3uP zu&dw`0Lzj@b6m&Hc~AP|M(#$Tx6V7@v=^6u;dPPx|yKBt|egDhP8;dBQnM`)?bbQJ3taM*A0Y^NP4Twnp_x*6&={TZ?e=+G+4Wrpd5}tY%m3Xu0KN zz_E9H=Da>pd~rWqt7JZ82}XGXPN6r{X6|_RXtMULw-hO+o0egW>#TiLW4tJt8CAn+o?Ch5Z>p)`L)j89{gnz^=`O z>rHJC0ldWm*ymg#4fo=rCxKOx9%((>dJ+gbL4etx$_c zOkr6kNQt#l=5{F0fu|VLG3q`7!mn}v>d!pN6laQpKfT6jksj)tLYtox64|N~%(V8w zhh2N*!`s89xY7}uJ$tlXR6trC8xxP>b=C`Sw6!|n>--Y;sFzMo>$B0huygUSgI(FD zbBE6k-@L(R#ZZvQnAsoz%rY);z(hIR#$}eqlkZBcxQ19*HJbe^WpWwo2DVA-?L)zD|-Y@9ZIY*^K~Y`d+}VFmrBx z^YU-kH={-3;x<9A@Rn03sHUjoBE|LfE3c9MfM(_A6%UmI*y(%&z}iPJdWYq-**SLJ zS9m)ZL@X9?q?hI%VP0*ArM(jEw5Y};06kbs2G021ddmasxIRj9OY`!WGn@}(F8Iz+ zgf;ds0IKF#E`G-0+5YycwJ$s3X3gjFuhYzk`M4&@-#fy8$WuLB2z0(`J*mzdXiA%0 zRmzgq?xC$L;6CH|fK7L5r0ySL4{dtrY6Xug!Md7+K!O#o&FO{bgNz4U=AZbgWU%;_ z?;C1#W~>?~j*M9p(t>x~KpqD5^K1O{fW()k1tyfXaFQ?Xn&0nQRJs0Z$=ewK=K~~^ z{x%8AKgsOAHXAhl;jKxh5Qka_ack{%mo}$^zqSF;U2kIX0LchxNxO%itR)Y*28+k8 z1JehJ{LNri^n)9JjtTzJhBw}=SSn)swPNT6ehjtruO}g=b4%zq`k$1_SL{{7qqWV9 z7VRTzWL6v7Z30Q2<~rgmG3WQS0=ofoIDrVUD70q@_Jq*ONjWX8vjtjuA~tpSJXuMl zsG|JZ(vP@hK(8E3CVSK&BcHx24&aG5LZuz|5{eVpE2rNNLZx zH_?F1U(XIsBmy@Z+weSQVh~or{TnocS@Z33x|G@2fW0UTq!gZqR&LdYu&*uB45}*8 zV4;L`$5nS*Xz7Fp=iof#1IXlz`#KO6DkxzjcHL$D0gZ?J2Yo5<8>1jp_6S?O_d_ct zZE<@aR-9-tWO;c&$ENCl$~G0v#=XYHdmF5iYP?MSTyzM z$Sgf_uQJ=;7MehxzSY={{uDYfGj)1f{W1|CSgsE7ip=*o{#+Keihh0y$CK`s-Il8{ z+moZP$&2kX(Gj(-`AjbxKzS2Ns{7+v0GoXSc#C8+g`P^9l=MH7p|!6CFk9$3i0P3r zBK#3{=afw&x9Nph#b#AxSvJXAKe(0Ao<1=1aaVB9%s+=K6s=NUnA6S2OE&zHI`(cp z|NLg@2L-~A{EY1pDJ6ltDZx{bgHtZ_6%?3!%2`xt(}Mnn+F&(4soMAh^%piJ`ZbLN zkW4~2eaD=5bgW4nfI|5dgvob!>}pl540q=)UnMUqt28EUeCi8|<@&z0b(Djnj7?OP zj3><>?@pX2s8%mPGl~qSHxb2z$iaP3G4Cj!TqKnWf&wAMr2IkMMSv`Ks%@i0l$w&A zWyHvOWuc@MRtRt1?pwrFPMoiL<~BnCFp{zj+r7l)9A8Lc=NDBS%2dQFNfv>gJ^MXE znea7*599NufO`kMvP-i*Vm^Z+70c}=QcCmvog;R2?-WIpAB1`m1eR3`f7Keh#?xKn z?jyOvgc8N@DlK}WjjaA$5)89DqSrSt)Xq%#DVJva2x4w zZSiRG%n7vq(>>9lp8`)lw}YI>s(gs8l@_%lrXBGyoW|xZB$DcI|w_L zAlNpgnPj@K=!cc&We&M>%d)w=!vVI7FM{72u~+p`dZpg+0c6o+4&g;QX&?M>tTr%Y zMP_P3uki3F3%>mX1PT} z8YbY}r@?O&+^9RZ*#Zvr)>EX?T)yt)3y!r>IZ7SUk!LMJqJT{ZdD41Y2}M=*#OJrz zekwnLfJ@QU9NU%kjHze%#IPBdx2~i(|eKU6@fL0J49~)B> z+p>zDrsC*EvoqzTLuLpypW*13%x)>YX_zplwZT;x%TujAl5o^OO?Xds?7N9N>S zW+2p+yKc~UMRLjfVDz`Qtol@U)q7+Mehw|>@@h;0Mq@j6(wynDFxeTwgGZy1&x}Gv z*<%RY#2sEF9)=+^BNv$i0DJFZzrzEWY%t@LQj*!kyr~$LzJ!tJYiAVZ+>W9VB^&nT z!|q>ZG%vb3-KNhFotN4cY{O>fUYv}5RGZ`5Txu8}mxC;QN$e7}+@>niKg`A%Fq-nq zD=G}B;P+dB+AgEO0lB7l^ELXFmv<(-;oV5en6GiGua2WY$62vV!29xYr~O6^UkOwD z6wklfb(z!Cbq$_rCHAbNnN-$n%Gww5(&8UWD7L!4M5LYC!t4QwJ@T4N#T3&T7c%Qr zFoZUyXizX1Xi~7+^G;744n&SiWKa^kEMCWNG~i;!YH}EA zqAc0d!CrqRrCyzF00Oty``)1)7ynNO6gh4e9LW;3RHWwyK^r-kWF#&zGBcuL29z>@ zdPEtc*b*g-g;4805QL<)i&?4*|IwfPj_7+KG4rBGLQt=YaZadhNi#F0sKQT}P+t)@ zEi%iKlp8g}%X^6dVZdB~%BX9~IkZ8O%u97Ve03Xc+yH?J5FgxKkoXQscBeFc?2yMi zs`R;d)ll81xU>g zQ>ubSQr8PFqu55Rn+1>cboi(!nq=6*{d-^DG*R#d=?TB;pzOYL7BlK%&WJ@#oKd)# zz94tGH$F-VP_86t#6g3j#P$BEK^Izc)**q*hBXRIDB7XL$)R8*9ikZ)6RjZI*Y5z} z;Sc%}VG<~AFvr=Y)MTAx82EsAn>!8cu-dTNxV$G}K13WQEj_5WbxgHDNX%alOcuQI zK`ef>F!GF8O^linI^oxG{4)QmB^g2iWl7*JgzF9sm|iLzg(Iiq7s|?)&W?C=HBtma z;^RBH9ItA3Oo-Gi=OZ=88V&wu?*oTwRlgqBLzMpHB;$pv6kD+Klle zaGqR;pSUQ(uP{0KJVX;4Je0cvk8aHGoYVxH2yf71DSRJcY|(7%+g{}`q;Y4KR|u@x z;Bzi!PGxadePsnQYD;sIc+;C9*9Kbm@y?|KpC2h{D?%Jr6%A3S8=b167T8 zZZB&_8ocuZS#t~G;rG8-_^n@fan>j!@G~w?u~x0Xap0;T>g3z9TXzPypW{HN;N5<@4Tx_j&lHOpG*V9$(FUY^78&;Qa;t z-qVFhBKS8g(3FxQ<|@ckeyvAPgaX>+qSm>U|gUr(F#*+tx{&+mC7wjg4pe5^@?<|K!@Wy zP^l|Al9G&+x4zs_N+L7^?{0O4m?6UGd)Q|+mNE6Q*IYqM-xG)p9CBc z^ulQ1u_QUNBx>)A4i6K%D>Z_rL{;dcGqHz(BTukf)2c$I+4`>7Rzp-jG2aLS$TSF* zm_dJq$bM`vz`t0*Zi}4t{ua=7Cq7%cbuxo~rvG%}c@}7W;5dGM=bN3h8gYz;W&IXv zmq>Q*_o#Tk&7J@A?QO18^I1>FxtLl7j#PfP57YAzGP$sEiw{}&nQ!1DRx?nwlSgbe+9ciCBUkLb4&#H zau>Z0hO5mdx(Gp^Tg2)CplTd0=#W4Mk^~-P$K=R~89v;_ZWn0GjI-nz#Gl7#5^U?S zi7rdwP@?Cx@FNx|^CyZ079W!$4*B^Qxcb`WZN&YF+uKc@xf$02PXvO#bV7S&k|rY^ zJ)x<=};L$6)1eZyM`vVa-WPHXCEjIqeE;bGioB0u{ zS?k}rn@=2SSAbm|eQk}J9@=JQ8_eqj8clxoK}-J{cJ&Ahz}1iD^&;#krLC0$Lgc#I zsvIlJQn*Bl&W<(Qg95cbUnJo-OPWkRk$MC|UVnl&Wkgue2q!$jQ0OV=-F6u9NGkDN zMv!|fvZKS5U5&AIrTNUhr2$OPQ@pxYtp3oDyhZsg~m5>-fEdf9)~X_q>m$ zUwwGORIDfQX|czEQ?2d{tjffl-rO-IG$x@0pOwh8`Np}4XGdAA(-xvs#3>zQq*fCt zV?uU6_DvY0`Oc&Bn?Wuf`# zzK-M_JaivJq`fP;fb7M z?(eD=hK(-YkB#9+;mn^WTk}gWq+Dnw?x3Z54Ew>gEzknk084(E3A1>4lhZNiBCo1c zMjb-wsOBuwiauK7dPq2LCas6+qK6}W4)nwhfJDS=RaSN7R;diiR^$i^vXKhfohrQB zhf^N4QWkXC6NK#l;pv>BGmEx$8{4*1v2EM7S#c`nAKSKV+qP}HV)NEM``q)io>pt? zX|}n>_l@4iM?RZuRJ3opkyB>+w_*3Uyo~vQd3m9L*zbBKN zjF77q%JyGAU$1!nKB|YaE)f$hz>|RN@vqp>-J1^hr9Mp48`D zMUZIy9-MkJ&hbVHJp5J;s%Y}%x2NTJ za^_+f)^gqTW*N3p|MRlUCY#3rt{Rgl+)2HoiELo1ntXlb^vqgrfFi!M_HPt2s|40O!vmIlze}w~!|XQ=%!HIk<3}ut21CVj z6=ufB_rGE^KwO|1+R^NJ`<9m48S?H;aAw*K-WeNoZRGdVn5U-EcjK{)KtXUny@p`t7ZAnFr0W8qwXp!wu=|=_M zCJTn}4&5JL=3w2Ln&&&0bulHWwd1wl)_Ng#g- zWfv)5sA7*VytEeZzsmK60>#4h*SNF#id0L>k;};y%S|tG4F;}zW;Wb-`!LBuzRgRBUGSYIMAv?PK!_5 z;S_!cP~3lfXJUfBQog5)`J546<9FCp{6h>ng;&&p4RnL~s8Xf>CXRQ;l3fHPk>Mu98r?Z~+ zADZ6*ddZ3jlayh8@EsK(dG6J?n3#4*<=9C)Y{?no-C|5jWT7_Fl3HhM&aktw z8j~N9gtLH)rf+gvD<(OQahXR&bNs_N@Xl=>%c9x!`g112+M^CEYk#?2n9zJk`ZX(> z*;apOHEWrtV6nVei$qqY42LzCOq!NetI0=lPeGiqS>*V|0lqj54JBt8>X|t|q(jb@(lUVZ>ZqN^}a-;h>M&$>EoHE{22ph_74Z*U&0T z(ByMblF3BCOT!Bb)x{peA2@UJLMTd{018SrwVcXwZbe^6D?Hr>u(yn9vL96<=K8#%}dzBr(*3` zOBqrz>%Twh`)~*bQQf)^3#@(YG>)LRRB~G{>$Tbo1{Kd|5sy>Doh;tw}~N#aP-CS54yW4wJp?(97aDX9qG_DDD-?IABLyvge$ zRxXc!E%Pc62MQx2;%_=8z7sG3GR%qC@|sZi~THpcc{~S%(l1bbkahO3fnng zOcuo2igjf?FdAZzu4hr26!6m$**tI_i>6kdInUjF6XxrYv?n5qL6Q@IFbYw59WuSJ z0gIEdY)t4l*Oyk z(GbY4Fkj4PD7lUHU$NePnuVQxd0m_NGRf>Jyv9orxXeiqzm5uEyZ^zhH)Mqk3{Y%7<{U0*0doyWIL zhpHiMkHH4QUx(f~&7iAuVF0HkIy^KeCqqaV+4KOFR>_^(uLaFO^kfi{a+D1Ucm;C` zt~XpgJ=zaFy-;fyz1_UBA0V9@Kd}EEq3r+HsO0=VA`=rM=YNk-84(3}HOot^CA+W4PUx?`lS)T%8wjxNs^C1itT-u2~`Fe`(@vn9%i9a`T ze`?qM1&2XE2*9XF_@GpA0$`FvpHf6LT*mmPJ6>eiGVR3n-K{$fT`8kZ8#^DHyWh{q zp>;UI4xCxYI;-uRonBM=r%fiKe+C7v9uv9V-2fqHyT>I3?qBn(GhHQaB{g`JxqJ{M zQ2~TezuNF-MykD5pv9Q>{l9^YJFzd#H|R8bywkTg6nAe0Z$v@tnSgSOdsp>}U24G0fQE`#z(!q+&qW~9yzap{Smj5`lEu>4y? z69GO|a~7=+-0?RAsZYK&xC39LAT72ikaoMY&>QvS%xiqqM{_gP^ZEKR=706LH=SmZ zdzUK!3!?pUXCesJ$U`(m*v1=l2NSEQqL%at*#ti$? zHbm-3gh(pT9LA*e326$lr0mGBVdq1x#sHT3z%^l75_6>MAkg}>G^s1H78IE zcui?{B>5n|`lvLKt6y2+E<<3(ob?fDlA5T5$fRM!LskPRSW*t*QbUvj5wB@!vQfWQ zP;QV+pb~D$cF0FiyaR|wkkRUM4a4t-6bEAR!i|Oy@X&dUARUuY``>)WE{IRt^Z{F! z>Q2?7>IM&4?yF;FrllW7qfaKg^xPiL6BCbq7Z)8HvR zjn>^`Rn!A>_K5ONUC5s{HyWJzr1xlH`Ww{pH@ZJ31|3B)2@;+v}T%1yCB4XY_^6 z&UBJY6iQn?`XMCUX0u9DKs=)bO8^5$Gw(>_)Ac!6ko=7LVlztpsO*Il}h&hbRB$$Ykn4*U@ds=-d zkU4G-_ZaV#ST_MJ4MU7-9FR0p)@Z~r+)Y)CtRXE#H>QMXaf%V3Tp&$`Jqqv@6!TUWTR>E(o1;pr-6Uq!Wi$GgjTC)D(<41SE}xN_TI^@BVB)i@D3z zApX)9$vxxdGl!nLNZ`6CaC5GI-Oj*1mik*U#f!;$%-ws0DDW?ZB48Hy0aaHzCGCL3 z46(2I2yoq;&98^DKam$^=*!Emp%`eiL>s9@w!-*NHB-0Yq^(aVbO-6OfcGEG_pdxn7N| zC=M!Gf}A%T8wrq>0u71sygPSC_2+0fj1dP%2>PQFI|Jp(*f0mSG&8l2Cke?C29FetO9Z)#sx(H%dc9;*S8!!y#2$C&Uy;5X7)uQ=7a8;ci>kT*il=6CnySJgh@1&O zf`|XKo*S%@UjR&QVG-o4DZpIacb|T*?Ic9qa^YdpQ@?pswa=|WM-kRhpm2ok!9y8tP{!F0C2c;Wo4g%FM9(#E7YKeC(8 zTKgaZ0fDKefO*dVkZhNH3i*xx00`-sCONO{qJspX(4Nc(@=ywTMuN2KT^^+4j!H2r2?b8 za}F{J1)x{j=nzUnI7tc#x+$D>w^RWWpud7=h-Q6I2HP@)I9%4pis^5Y0VKuH~Ju`w~m0FX7VYu$zsvi;i5@SCu0Lqz5}=OFG0 zem>rekR|0|!HrJJnQ!%KBR4s8|i7{Q5s3em!Nr;_}A%SU^b zJ$KIX529vOBoMS|C#py61u5K3kC~R|S7lMYZc9IiM+g5lj1q9qv##0kG>0 zV->xTD>6Cv#2y%O18sR*an0LA(Sp`ld@7DM4~}%fBGXi%Avt6>y2@-!=_IyU7>da* zx&q|*un4L1nUZXn7RkH6;I?5Al~?QC8fVaetrY^tRr4yPr~d4hd+g2LJDtV zjL#&0Jpb}YGN${&Qw{r7tfX+L{&EGhO*0MnFl^dvfN7_bCa=h1tnLCMENv(#(O>9N@g`E+8~rDcfCU9&bF2O$={?wsfKtau#e*2= zBd%7gUUQ}#1ePop>+SqEPII^-?A|pIb_N46M?6|2fb8`2?C6-uI_EyS_Px!6tQ5XH zr-%dPf823!c$fV!(Zi=3oiVLHfhh309X0gA6w1`n;kaWvtA49xN;1)!oEw;eO#hi?O7 zO>0Kfu z{IgZwX$oJa#Qskq2*3hm*niMA``5YELtLd>rDKzwbRGKnr_o%@^@f^Z7ee>C(LT{&5FPPkVCe$E7L zHlMb?HE=lj(s=Qdzt+m1moO^Fs6JYeN0BI4o# z8mK!5#!@Uy0Jsn$r3=_KnVEap^I3pGXZgDuRL#-u*~$^DnSzut(B{@*9%9nTWvx!< zX#YqfX&Q@fDcz2%6X!@ukE$D9@d)I(l>gjQs8lL6@e?FR&Ji%Q2%Mj=xj6I-- zy0?ugl?%H{hC5J5Vf*`ADzb{@i1N~DqH#`ufqAos7eH(c$OrIn3T5-VTyP(y&cMzZ zHwaHAn*sWJq_T|R-uGU)jq_DaM$p+^6mOP@5RX9lzTcmJU@}S00!5LJHj`1`evJg4 zm$v#ul01^8R?EZb!sBFOYd*b1iE15fSsT4x>I8vjD%^D+iYqvqmBH_mBm(bIfytp`VfDXY&w>_X z`ixe!y7_+Kp=5)xEoQI=L;rp6=>U^`IWy`m3G>LK3@`1ONjJ6yfq6N!MXy#$T^X7l z23zV`s$sXK?{x!~1eQ;2aP2Me6N$>~mgT?V4I;~IC21+iwrbhovep!#xe}ffEd?RE z5mOO(OLCh%y;UiM3z)&EM+EqtW17t1{#?YWIdJ~l37fVQD`fXUYbX`&Wj}~#kazmkRv1iw9Uz)rE4Nzl2 z{z1BVAN^r^(5@R+Yx02ed-8@&4t#IgvWRjj>zTKp-(yvM-Q-Wp<3tu1)v83e3XF-` zPJ`!S^L!3Xq2E0@rH=OZaQ4tjNa+Qy zU#Y8m@ebYqNB>v|R-jGptBg-q*y^bHH86uk2Mp&!7fZ;4=Ds=^MF&($!+GGO*}yk# z7O;}|AEHWwjD9re(L@Cz#GXK9fQM9o|I3S94|<@Y6Cg%~I4eX`_ko*^SKw2w&w73O zf&F`|5*uv6VUjy?o*%uH8`gaXBZ~WTnjYktMv_kuje+(6(9LqSFNct`|DZ34!>{`V z{EDpyp0_-3)NR;`SvVHKe;yNvMur(w%pvZNB?zAWTnl1Ld$EtWGsVaBk0#&$^l2ZP zeYJ!(%ELsN!hi~g^icg%N}Tcn3hHxQ(YlTJ2+BM$l!S9a_#w+Wb7AX4rp~$y;q0XS zk%woJIV{K$2_5Yp?xR(8R4AyaBj)NVM6kHDqxT2r@N+1nx{{-V{$)pPh1^K3Vhbc$ zThFvo8JKOX;G%%lXnsHxu#1kkVgeTRb_{*gqx%E`4}UM6h-aEtn9t%~u&gj3Y(6hX z&kO!jwA@UMUsifAs3Qmj6&IWjtPNpPSmZb#z8;P~es!~1YJ*B)Y@20{ ztA|rMK07ltWlrQMhFs$eM54n5WoZp+>+vL=U64{P%S}}gTOD5kfG;nnqN`jQIxRMD zNH|y?O=txCY?X9CCHdo3C~ISo%S?_*va}tEY+sIt=$>9=8z2_T$gMix(f%O{G`$ym zo~8TD<6Sp`;Ep?SYt&a@cciiDf=S(5-^HO1b^yznFP?k88>Ddm(N@Gr%}9s`GfisK z-O{Wrx8cV2cEm{mcqPtLHer$rU61w(%`hPDLyhUYf@%G|4SRkuj+m3hIV!aXfVp^> zo!$C*uNv$))@iNwQUDpPgd6?RhSk^!uB@ZbyZN)vRaQ(afA0(&sL|b3b{t&>#p_#?sILJqU%cOQ!2rp zQSEA`>PSrpKq`e%8+Hzm&!g7BSI^bZQ_a@Mp1uIKDE}6&?3GIChZ?}=1i>`eglFst z43^D)IyGgTJXr5v>dqiZs|oCM&Pw3dj5-wvL_CK*UhU|IzvyqMjbm%jZ?SqCvHqYR zVnUd=cJo7Dnj*y5=ZyW@zl#jD_Qaz}Q=@x?NUfO#@c-pJ@8+ zjxag=GV@|dH$Eyym{q8PXu(lbEvm@hV?TQVc-k{NjH|6#cC>z`R00sy7ojb;DuQ7h zXK57yV#(%a7G{BeD!5y;i6SBpwpR~eq&Tr-2BNR&(}Kb}7m@8Zn6IFB4#DRtK6LNy z7G;@r1!+`NsV+FRgrDiN{$LtQo?&+b*tX>`-26!Kdx*lHC}j5Ht_t^q>-*TD ziXdqci!95guUfy|wsA2r8dJwKS%cmDWN$%xd?f^lH^oN^jRb+wR86&P)MV84yf6~C zQ?zoI<-ZSYFR`)b8jqneTM>1z26c=#e z%~=p!5r>@y-P@B^MSdJ9wmiyyCTgNQSq1D?A7{IA@pP9H^H zLO|qO8xo#B>auFQRLD?}y?PMfulcrcKfx7G(5{3Z=$N_?d1MlC|I>swhWrFjs9@Wj zUYh6b@tobbnizZ@^@X5yqhc^3rxg5#&X z@7T_WZ)6jR%7RIBVbt-*#r>m{Yri;15nCNpgG-vU6XSBTCTA|Q7kOR)2Y#YtE)0$? z9+;U2dHoBsXy7$^}6As;WlDa;HkwB^l>GhWW#*AnWGs%?^2@7tRh< zF;1l~LJWA(q%CM}&~hgy&gn{eVo60wG;3jW`7*(shm~Ld2tV8HtIiO*1vMet>qjkK zr(5{LF~yMSubcuuL7Yke#Rf#EJawOj@9Vdj=M>MAx|{hqJ3+nL-en(6C^X?<%49XL zQ3E1b&BKJ8*6dgoSLQX!FZ<9Uin)_^ib z|2aa%9;w`B*Aq3DTt?;ln9dh??B2vmw;+bI0oSa1ehBQ_fT$NhKkZ_S7DSJ*(^*1c zTIVN|8!=z{QSA60<@K1X{4gJuU6<2)+iFkVF%=b+pfolZGiWcza>0my=8`0GAlXrS z;@pL!t&7CRU+X;!7=+wAa-8Up8r}A#PV#nD6^)&uVMNoM`9X2(^S}Qx`a#O5;^gYfpwu4T2$A$XefMtwkAznkG zAXdr;#xV4@VN`4(Jox7<#BBn&X9OUAyw`$o80z_=3mPjxZTTg?83U{TBB#-J#BUBw z5zJ%slY1W5Bdf$5Vuj((APw>) zbBoGlt|+r;`%mN&!@!8W(#J|vTwc7^c6w-?#3v~rSXC=@#p5H;<_<%_`4#csgCs)> zePXjM{Y(ykfx^;RLeA`$C1$so6aC?GH^8*okVs+6)jFCsx{6Na^3t&dTFEhU^%M70 z)6%q^0E1CLssbl225#Zw)UA>zcEU&=KP@Lg;z3F_E2Yd#{4q(Ugnk@wufLbJo|@Zf z_u{BL+o|~}R!=vrSR z9)qH8%nn@>uB!|P$>|DfPMrzda&WgcBC5`}cu^&dro*#cf+)`nx-CUqIiTv56i!vn zrCt%Bn>h`Ab6+w0S%=X>hB)~EiUo{~pqvaHkEXq(u)v7Lf0%FKomiX2kT$e^(-z=o zeK*_6yX*8(xWgz2y-0T77LfF*im^e+;B9ciy6Z|d{Z zib;@dF~dg-fU{E~O@w)>L$aMERdPl!;Hbi|=VY0p7PsV6wXof`;0qx7hV;*T0r@W+ zgyVmsEOrhyw$vXvaApV@StU_b%~okva46u^V|j4R)Cx9mc!0PJ>QV(%fRK=wgdRF_ zI1!Y;LnsfioA9;#LU!fN^@V5UJAa})cQ#LUVvyib9Hl=I%%3s$=$MGZyqWsILtlKF z&g<3i)fkqCsjKTng`aroRgIe$-`-2Q`m+!!l6pryLagNSK7Zo_B-$G)(zC z!}*;hLDwlqP=FHqj*%r5p6d*`Z;<$zw7VGO02#C>R3^EJr^RF=3=FdhdYBq< z>S=Wal!crs8EOfQ0v^${Zo4g|xt`|Z3z;{WOvM^gPvKhemNAy0mfdF_^N9tJVoqW_ zV$cQX1)-uZ5$s{=5$q8dktdPt;p*Y+k?N5xVftvc=+)@MktvZF5iOA`;Rm8WzdE#> zBP~nL0Cvc9=EFoMqOcCFq8t$!LtZ7K3iDDn97l59E*F`|FJiiFN;0yf^73Am8|ml2 zIjXzP7orBRSMBX0v+&nFCU??h%-N^4pCWBrcbqq)Hmgjj*Tr%=`3|0kHaBn50Hc*k zDfYv6Iw&NgOGu)ff%)jZOrF5ok|kBr)foBy#7?r;7&oYBRi9c3RT4tXHdXx95jORv_s185!kl= z8)YFE-n9*E&+RqULc*zIBt2k=YI!lJhP!35jTrtbH2y4{x9ZnOOq`&jzP;ssK}#h; zz~|0ojgr(qNmL}Omp>$~lE!hFs@fU#a*|T*x_z8AY%_RA0N+3brHI)=#Ihh6HR4P6 zkyrHxwVv196^H;+(qgNRQ3s@UuM*4pamik*_R_=aXi8ajIp)qVmMfCqriz3X=4qAlla+>Iqyyt_$Zh(X+E`QeBtL3 ze8D8^?C9y3UlM*bgao20hC!UUtVpfyqd2K@T;No|ZmDkn9st)TK87tSQCO#7FN|F6 zd-RNt%-U`BY`Ibn95!w%sVX7}a3pKkm}r8>pPmmkZqECQe2siu1XVBCurYgb8B; zym{w*l`*6VXMktQ@_C_~&9++nn5u$s8hCPP;Ut()1>$@9juaTTT2{Qe(}#y;;6{da z>*=f{+VcD|pf3M>7hEn$YrNhNEV_z!InQ*NHVG95Gi{STBz+FfVnDE^J%6Vf1im|h zC1V0oxwcvuQAT37>lM>k#X`qx(Z56~G1Lht1QK%Q0Dji34d&BEOds$)~tqzf7XoxLNyv1!7tz4XR$~%noZlzw+!u&i#fa*NI zJvZqL3^2OeJ5J6k=J+Emz#0(Un5KJHGiQi~d3Ohha0d^S!utzSIcW?#9J3w80P8f$ zP@x>1L5`$H;9G|)Yiob7GY7ekmJp-;Nz<=4e zN_LidlaLsRbZk`YAc!A5LNZ5c$(`{XI*BX44Y(=jt@xQle+_7Bcy}>^Aos>0&ipju zGe8t4)U$A|Q{-!x8=$y7vJP{4ye$zyiXIEAgopMb^s&iDl7h_)sx(FC|F@ZSfQ4{n z2!rVY>>{2Ik8H3akc##(_BHUxc+W87uIaHuAb9Qf)rBPnknH(W(cR7gwPiin-EE)? z3%~I z&hVGUY!Vb-Ky_@0`0J&~&h|H0EghFBc|f=6p=(l_?b*4>^?=l&BJ;t!*aiKs;O8A$ zNAt3Ao#m2vc1nIRLruJy2=-WYaSN?NF`ymorUGOM4kGq-k@&c1&v3@ImmJzGALG6f z-JTZ1{BRb}NdD>#eN~aQ169eApZql#hxxbt?Y0S>% zF>a^9ld5gM)ofwaU$Rw^3y{MOQYiOPd@>WXrPx663P&D0T8Isk^U zBOi}yFGj{vXqMoQptneUy|0>|wzmaJTZQX!ei**FHOq#G&U3jgMHj0v#NKg22+ycL+cC!H*(&i=}!` zZ})`uh5)JOD5iXa_!<9>y^mi52Y{1{!DVv`<~TVEp%SVO$hW#h(yB@{X+I|QhA4-@ z*AU8lM%CJK6E3Qne}QbeCyISaV_r${`r&q>Xv7MYR{DzZD_4A$mAsVw9vkp2K%%Hj z(J4s_Qalpo?vPMoeL_wgvJFT!rNhB#7J)noY!m~0c*`Pz$<7A;H}l349AJ_gL)28bw#CUXcV1CV3!H^L)s1p28lni&fU(qwfVf4XP9-O4F82TsoV=$M-lSIddh& z9@O}bk790+6#nc^ApiGcx=b$N4_cT&u0Ayq6zBVpy|FZa|_km7RjiT8Y-`p32?Y!9dS#qyCKad%cVi30cU2B#X&1wTklnM0tXSvbB>RQVDD;RQ*5~c>X8an5BxG$C z7BAMwhl=*LIdLx2T=HAyip>BRekcCqg+GQf#-V^j0g%|m^{tQE~LMJc??YD5>njicPMSmi{CJJ=TMQ8B~F=BR~vfES6Psl-m=upukjT%JiYXVAHvc4%bd%0m(%pM}-32(oDG1G3pJ zwyXi}7`)-qWc_(e>*vztt-!gWtthEORy8|qCxuC368zazDM8lbjKN1HS1gBHVds>~ zb4^F&ih5(|UrCidJ8OHcpszgfexaJ4A}pA2m{d5@UO;^-MJegsa5vArS&}(rq0_2> zP&Q$}W~~x%%;a?}KSIz6*ib3Gj4)SzrW67pCc-3taHFnT-ZZ1)ea}=1+SUye?JUzk zcfAD)eJ=l>q2nU1mPh1aenxTJC9V1wKe&c=Z;8;sV}>?GKrjq+S)4_*30|O zLbfD0TL7s`@InEKR=IaCFCwh-aX2vC+Icm@V)ZBjJRFGQ%tw-bEcgZz{Y|ye)XIJ( z<#RPD@LjFMTmZ7v+02|Xb1of?KMF|bn_%Afsz8$Strju0&(4lTjcUtf8EOTp^qMT1 zbS{#)DqXM?B`bt8qXMz3Eu%nVb2FiXDq& zBXdUAmcK@>8rtICtlmdJ6B{PPgbU|&X1ZvSZAAFWTpHs@z=g$V=T#>JT2ox+%TvO( zdeb`pVmAlw?|fo;cI!qbXXQ9D@A@`Q8T^U~Ki(fRGaD(?q2Wu*Xw}%iC-!D96V+U^ z_JHr-uC;uuL3RNuL%39dlPlL-y*zwXGg@xwdj*Aolrs$c?&<;0!Pn#hv9~-FWFqnc zIP;MwnxBT*oQA)0r&U$T2MSd%gZpV!*7_9;qQg+%;f~!+bP$TV?@!|$kZ~Bxw8YCx z6He^tWv3l{f z)B35edKy(bBP{#3ZKB*&pN?Rns|pDoUy!{J|DL%#a|1l( z*k(XaaAXP}fUecuU6(K$v~Z+bylat4*Cue3bMz60*q0S|$6H>s>F2Iv2-%-BNKGCn zAm0&y_RGwiB9c8iq`CQ8SP5K_U>VT5|J1lq?!g8|-)h%!M1QaFL30ehsjPmRwRu?K z+0mFe!sWYLJ8?V+fmcD$VPPdJ83EuBgP=jFD7dw)KR{F;j8-du3L(uVi^Da8&6aEQ zbKB>2WiovXAt<`)TfQ7M>S`Jr>(9?_WkO^8(K+|DT9IXHVl4cRqj|7hs40Jel^65P z?GpdpNbJ>laK=kcPRU46$5!wDNWArriVrj-UQdVYB?>j1r00igewLTe`f$zR+Y(xQFZcgj6)pak4*{?3>D!>on!^I?j; z_qS%S$vV!B8{t)-V|6uZZNqQ0o_{LmU?Kqp0yp8qU?Lm$pqJ37I$tw^4SQf^c-ceG z6)p5S>itu=w|&qQQK7*lC>>D$TRH-ZvV@t4jTg=eeHSqhxKJck!p5UUwUjWI4o;#w zwkAlTua&3+8@E+t@bdl;YpnEP&jS@h$M)%`uyC^qSOxws-#+$pmLMz=@^ZsByphm@ zr<)K~q^KQAr8+gm?kOBxhM^x!AC2r@=(&>I&0z(8GT*-BM-xG0)hR$F39m);6`%Wu z2l^eXTUuKO2jGTGI|l~8{Px~JLYX6|nb&ByCmO(EEpnn>9zf0AIvoDO?p7#>AqOY^ zYo~v4+aT9^ghY9_aHp=#OdK zSY`O1(wCAL5Jw-d_-TLM?My0^HRi&UDXa2T>P$VI+)hk`_I0dTs*r$ zq6`hnli37cg|m9;40}>}V~-BGrR{Z-%1)x@5B}G$S;h?ip~PSHOj==-o6?n$@DqRq zvI_+`66h$|w4sKfZk~@J{1)&lh%NraRZR`}XnL$K%7P zyrH;=4XA6-S~4NNzuTIUACxaU_T+G-itAw9YFhL zE_CM7@aCX$qlFq7=oDg5lm^c(=g1E#rixLd5S5B00nP}(#i~-+8D!6nDy^0QzjXK3 z9)q*9^v;ZQ?O-fHH-y`5h@A<7Lw%O`BHOfzb-M7*A;6Ky%35?M#!;EPC=-$pZYk?= z%wafwvI~3mTmJ1B{C;5V>y+y}>Kng2{1wjE;GF%!c0D%E8vG z5>G77$mZQR&Tt~^CMj$^;u@cpX1)iNx{<$Rg^e!)4S270?}7%co0ksVIA&V+R_|&s z-8h?C3Q=q|fFmZu_97{w*jCR3*F|k*7N1jBIb;C9>Tl`rQ5Fapt#&>VdlOF-9@ozx z(}xZoFKDBwd-D3Vl?xakk4vTw+x1VoSkp>RzD|zes@V?mfC-nY(=20TYsiFxfN;e0 zs%dv4ETN)jxYv0Mh;u)UNeIh}oK2ZAz56sC5jE_;U5S&O=(=xt_mL0LX_Ydprp%L1 zI)MW~PA!YYtY6kZA$3&`?XyTvh;H`z%oR=v4J2S8b{gBa{cm~jcv)Gv=a`pTf~j7L zrz`@mHp_b%_!Ixwkh7<1(F6s5s3ACn(2Y3*0^?TwRZ9*DHut)BuBWw9~w8Ml)XF^Y9r;V(WRE?i-DUN17deFm1> z4Jv8Wal%EnhHWjQIJbK{egv?2_MkgJ4TjJrv(g(u7LqH5OZyiCMXk44OM+{Q1@HrtDkKgYS@2L1MMWm7{3n!09T`U&gXYpF8bdVn z=#rLTtTLEt)8)TbHq#tsQ-6S%YOYv0jR8_TL*YhgtZ*RLX8~abc1&?NlfX1X{io-S z&fHs#sVJe2tUXn^p8a_X&Br1o|7`9MnG*sI;|QRpNbgfZP#J?IM0>ueo4dt+E!n@^ zdgDKRFYHI^#>xFV}GGiG54o+u>oG` zS)RnL&?gCiXgKc_GZjjb&d8+)$`)BKh707Zoj-qF7!@wS9nacAe4=v_@~*qt-NKyX zy1wQ?=2qftHrok2waF3y>GU1kZiJmdE*_%#y|g8J`)ik_CVG`GS7=j0Vqf9f<5^`d zj2eN6cP0ehlbD&AQMHzLM|gqL|vk)zm!0HzL-EdTVl@L>t4=yw`nqC z$z|5fy2_JkYUjb6({cCk(iz0C(5$QzlEwT+1p$?`F5Oa%;120{qJR0J63XrAMFhlY zn?4U^1b8}EWD3;c6@0-t?f?e1Z(L7M^%@4H<&qzvgf^?l_Ch zvc<$-;)dD5(=7)Z1YWu)e2orSmI}$#B(_c2(&@4>9M(F=A}MqHFH*jYSlv$FT?F#f z<5_#G84N3E&eqT&-tR)IG-=m9E)9ab=yS0pv-q6OIA0xd@!+fqr2vH#855#^y%hyJ zi#_suMbA)xz7J|nGnNSoCoP&i{+h1#FRs{~1*Xv(@)kP?p=q}(pNCXuI<@nLb28+r zAXw?{Lw1f@x$uO&=I8ey-wLI2&EQ%gG$Vq3r@~q;hbjD?r;_z7_D@PWd3f;y`bTDK zoGJvS+IHkQn_{hy=>h!Y-_tYffwBSu)1~wDF^ugzKYm;BC5y!`q3(Vk%Y^yoh$`f> zolyngl+so$EbPBfc>UOW=VbX>6T4#FCQ4Yf-l1Pk0)!hL9&luceH{ApZ?glHmhnJq zSX6r3y8X@SH$GX#@I&N--4jQKNLf!1Si){&fL>1oE9Wzue*xH(1f@jB-`DiVih6|j zgsY2l-e=yfGAT|&MkvO1y1>=o#EEgB5yVEm9t=ls{>=6*qeOHkd`kD}G{?KwHZPt~ zv_91}(FxZp7Obdpr~~PH5xJg612+}f2k`#+>#hNE>*m=?4gafpJuPS7x_7kfK&k2b zI_I{Ag+ZnA926jnlQDOXfaH@ed<2EZOa^@OxZw$kpNI6P|I}gF(&}{wD(g}HZAgU8 z0!X5A-sJI#Rr_wB{%Y%B0)w6^li`s=1pZcMv+dx$g?DaS<~w-jUsPl8J0a8M$c)Q+ zf1;k=v*3_4OQRxa*J?-V{`qQM2jmsu96fgXqG4?@7!@G%pa!j)DLA{})a5T;k}l~- zRt45&&$s@ePs<1y_*!0I%HEvtzR$9>;&PfJLNj;rB7nfTtRFpNx?mYLJ*!A#X}ssL zjJgVnbe~PK4ZTA4j$!<6nPxr`bakVcnNRZ7`tfD|iCXe#nOz=D8@YV|26@fewp=ms zF3yw>!v??`2mahao|%n#7ME;{R~HMcDjc(!VLSZov%qX_D`g={X#nYIS!%Sh^mqEV<8aVSd;*BJjh=Qtt_A3W^PL% z9`>ypmr;?$J^wN;GJ91TZNUgwuZ@rQgl-jzhyeh3=S!sYB=q_EDxY^5curomnBrpn z!=$uJi`z3zQbqjxNQPHXGtCnAA5`^Hw-IbP`{5t7nE77^pSR*9!_tiM`X(h1%Gk7C zn4D+bVUm2dAmO6MM5cG|{oAbWh)TOf1jRYt7ul=!c$NbC)n1LO6peaSMT>5 zFna(Y>@izqucgzAP@o-#yGR{Q5Z4{Khu@D^!PXDJ0fEo;aDNRG!Y`>`S{i^E_7!r| z!V8P*vHx6Tug^*1w5O{6V#H4VeMBIGJ3J+EHf~)AJpy?;r|#LesY0Vw-NBChcPJok zq*VotU$i>P8wz;dEeF~8>EREB$tqcl)yQ3~hHI{TGtsm`xSp8>NagIvz*WY+b zvfHvHiUS9*V-Ne)9pT#OywFhrZOkeckh>7`{Efd*%cuoAtT}4L)m+e zY@t#{$tcNwtTZG=dQwMST?+$1W?`BL$i2{n@Skg;>QwZs#Ltj9-u)HskD@-8C-DR@JIz;pUWIvGXRk z%!4?QuaO_<=G78X_Hzpq=S}V`CVjbgGcH)FtNk#c(c)BR&p?!J?c-PY&j9jDY6Rd3tn zINocExj$w5B-p9PZo~0|$p>=A!H=Iq-F~XAXf>BDA2uvr``WwCkKr6m_OH^&*m0v$ zf)*myW>!_Z=6D7xJ|=A)KYBuxw7dDq(S>JQ>s6|nn|zMaxR%$9vUI-{Z>|*a3oH;^ zeki3;@gYfDGh>!;I>C6BwJK)vsL7*G*i$c2DTkuXPh!<))vd`l$EV_L^cKJ7Nw@dD zX*jnE-gQI24J_0e+;f%4^eB+;OFpBF%Qzw*;$KW5WI5MODqoqkbWW(mUB+9^Tvw9q z=Df;0b6r089Io4k!!i-|@_5m5Fb{a;p4IdXL#RV@(&N!{jgE#r*T)DIW;?CV%NLJW zb$ma1Vt?}oY0(iZQ2cY2T4p6lD+7u4R{nB$5yI3@HkGiLW2Qu!NaMQI(pyWdj8h4SqB-nSCs z(y|^bYqHYFK0~YQ)d<^tN5dVrA;i{7jpevBPS}QWv)7a^7QdUg*&LE3(QO}~qa%K( z_~!vXiFwiiW;)51j<>d3eM%&PB>FZg>5s>xLQ>ZNOUIkh6~T@!ZAPM#3RHFx4jg+-2p+3Oy4jAEkyoXj!znmg>lS)Zp} zTKanKF72UvhqY8yeXbeZZjbm`oO^9!gDtp=?QjVlT2VZoBk5w=&lfuFc^ACMwPF$n zTpmN!1kMlk1g`bS-k>k6t(caB%r08DgYw+;c2}=WNQ~ya@3qM}dSLf#v|x#opR@u? zxCgl-bGrv?t@u<*-SC$3YPRr&-~j`THf@38U=vB4b5>a7tJ7Ca`mWW7HjHy9)gNCf z)Baw(W83j_QkN(DZk9kY;j$AngF~(exqb0vjLU8dQ|EWJPC?xLR`U6AwU4Lk+ zo2#lAmj#?gaMLh;^iS?~1rbL*G?iRQihpSyXk=wUmMEi7B6pY3 zw~+68AgrKVD@Ie(*A)uSClWYu%zlRS4jm~d<10hX2h=|AtfUndn5-fkn`moOWTkug zwkv{W_coT$qt73sy7~28yC1%;zw;1fT*NW(@zWQK<-&~qOr?8n8Ghn!!|?d$wY8Cr zwUHW4wQrbIHR0}*2AjUeZ;x+0OMAud$doL-Ql|b>3*uZCDBv*P@XHY|fm*d%MD9 zWt;O8RDDmU6xuE3Q)sPHD_h;wt*vZ!+wI4z{-?_|LNL@cer*J)y}N2vy5KYF#<~wl zy(dnwmLys0v}fKonlb*5BXuHRL*GG4kR{f*|6 zQto|jlRd_q52btgPHo3U`bAz%jX12_d+!zkcZWGu!$|dEndIS?YkWFv=|3OV7#|p@ z7Y@a!$DRq0X5KM`u{vR&h5Q?vQblYv?ED(X5)Tg^d`VLic_=5FVZ+Vj zmVQXcM!S&TS^Kt)>sJSqu6!Q);z_CZ15v1B{3^ zQ_T9S#aEwCxVyL`zT|2pHL9)A?FE z3SXb7a!A_2_XW?-3;8`*l`yR}a1IYU`$DNQyRNuvi|>tG$tg9*v4;j{cSrX$39)c- zD=%%UTj?o#1r2zxUXMK~-W=oehTCM}1FU%wM_+xAQV zRl_}WeA=Lxo7eQCboE(8d93CeWh9AyC`Cd$SgXnCzEjHq&-)}tBNso(6ROwM&%|cm z#dOJ>C0q`5?q{Z{3l%X+lUP>inadlKNe{h!fJW?4>edX%cK~;>t9Bw?H~qM9EUoRb z|Amq1)l8vFB9&G}PvcTtvw3WvgoZx8yyD}Pu=eJW|00pBz8!6_5=LJ`9vn%o&KDUn zzS`={vnxkfb12X4l3%DM|7V^qt9@bYlGe(Km7a5L@g@Wt_Qti!cwj`^#PbI;nZB&w zFVqH~Q=g@SP$SWM8X__r)kCi_f!7AI?F_d{-M%0mgJ zkCX8&TqLrfz;Su*JFj{wx`^1Z$eGp^&ApG+SJ5wNeSP@X-4CohIyWwEVTL=pH~49M zaK$c@V^P6Ym1#(>9edT2ZYN#UFDM}iUc|SaD?F?0U<{dB6_8U7MTVc0&j}H=G&H}} z^B@&lf@UQht0LJ&6eXBj#cs3w-XlH5X@t0x!rQUcY3OcZA3Y)^A~X$+-R^r=qB5-LuB@QGv6AXmG;?LYkF@OpUsv*#AMMBHnh4Oc zmM-PpUPM8MqS(W7XE{?2_9mu?q;txJlWRC^G5M%xFYA|`|iBgiaauTNnD{csVJb?U-mMc{-Jap z8bzHp!*S_>r$0Zt_CLGTEEMv5MEit~+lH9-OwSZ|F9)ya&39{6Vv||Shz#p`9u?B1 zB%S?TW9uPM3|Cvd+~{8Vjt~_)_Irkz*!lED+Pw#7uK1D`9BvNqsvSG$s=#o#pY`4v zT5yf6pmWb&414RGm^Y?;I?cLnxtSwo+e}1{{*Uw0XWkePX@5LF9WXs)cJCQy!p?gt zgR1hjAC81fww80r%f1rH^L}sEPHvdEzhyXb_t(_G3kM;WFU^nJ^81;Ke43(XQ&S(X zPuZ}V*zoB~Ot`0zGd~I3T2So9S0xvyRTY*thWp5A5<@UPeHz6PGtGyzoITKxy}s_5 z)0ftfUdk3~>GEG2pDK+Eb1r-QWGgMMC|D~MQcyn2c=@8zR$9%yvfh%qqs`+Pi?^{KPLvOnaYScMhq#Bl8k%M&Vf_<$YguAo=sow{On+^3?w{JK`1%rUR42!t|PoFSlRPxo#+Y#ae#{j!idR?8CQkF5U3`3XN~0>Rkh3w-x0) z_>gqSD_Ok*@{zl%&UKO{>8g{1_~!_Py2D)zCoUOoA~pb=m#r zH3{shNKAvTPupU*O8a-E)t4TFqYvb_@A-aC9TS)GX+r+QMf3Fb?}6A|vauh!Ydizb zHp~X3Iu?KAOW<%GS-8Sx87e}o^?8e^7JO8ykI@M}N@E9Y53a3=}^gyR>UU+>zO z=ySBGBVt^IPt*)_I&|OAWn9Ad>CAtCEKGUQRJeBtIr!gM=BxY?RNGckrFmUq<-?dpv$c9w1JG#T^o%!;4CQ6Fyh zVroii|M?$75dY^f!?&)@?}Lig+&{F+UMSEEWIgqsOZ)TJ6FjIz74`QrA;ZbzoV&X_ zG`uu|ci8&w7Yj~y>egZ63uUl_mYjR#4{5xS3Nm}XfBlkqf|v-uTg_wDv!->zXZGY9 z?rUPmZ)(_?&s6HWR?5lHTOLVN|2QN%W95d8Jl4P8PtXoBu*6h%N~aZGS{#i@;mFk2 z;+I%KqMUa-U5wcmNW(9!d@kkG8HC_7tahle-o|ic-jc=Y{_locH`L#UV)!SciUU))da_D&d*P?5MNs^bs=?zl#^y9)}cnhv2gx9@O z;i=o+s&p^c#yafP*~#IQyE&aF60=qPMcpo1H%|9Ll%8d%LPYh=msVnvi`|w#Ra4Nq*`9 z$gAyHFBd-g*50am%%H(2^F0JYzwb#TFw}eMEGoSe|Dmz4$h`qQ@tD7Nk|+J!Btvhe zW@1FDs72?YwF1xY`JxKEfsJ-O>mIZ-$msd}yg46s`;AC1d6yHjdtUCOkOdSzmJ`Uv~O`{%FGc{*FJUbz+7 zpArAeYZppE!h%-L>{zaxeFLNK!7Tp)cFx0znD3hUc@3|L*M)iGx9?MIE% z^z!`fwWBxBq^OY^9O^_#oC|Dy-QT0!Kd=XsE-#V?=WE*+UqVXmd7nHUT*E4*6*%Zc z4P0Z`i)wa86^{E4L^SzryvuLeG7{lzt7{f^{kgdhTY+=(N2eQ~rJ=;C#?)K=Ydu}U zwH0XHBF&b=UiL=XQH7_to{<(O5_tD5WIQFy2}EGpoWwha)LBl=>B+K@6LWNAgOm}+ zuh3t;FZr=~GGP{aA>C*m=O%pq=)1+N*@4d&@~*|rETA&>?*D0^mo@m#=Ejk6#_Me+ zl@~d$?9jO`?85Lsv{O4k+t^=3{lddSmWA?!!GwUow@;$%MH9uia6eY(WiJp0{qxLM zTcX%~wdK9Y_TO8s%49h8zwJoAS+cS15-8(Bm7YlnC5ttfFG9k1!W9DYr%kFO4!7S- zna^{T^joU4*lr39NU3PfMEdXcb1bOwjNx@?mQ~*Kx;OQT5tDwts&Ra#PKd|-vV^6J z^%qF8koF@! zjhQ#@4CTs{cf5l5M9*DOw^fOt9osQ(p=)pPz=w%-DdvIYx$WyQ{Nc|aaS+jNSg3dP zErbretY%I$Y2Xm=J1M<-HCKN4$lz+B^0H83Iww7|Mxpx6J&5@mX-#c9``AKX?B-A^ z+0}4^Wq|v9rB>dtl%dPtt_2RICe!F^WbG-ei*El~I=;RoL&v3;Q1&+e-XS9c zlku&eedCtF>ybmJx>jyCSl`khH{5EtRd0InnYWmNxeP`}ozbfB-U0O4Hv%8d2FP6m z?`a3@$W;v0`!4YTx_xCWQQ0p;@~5Gz=Jo&;_9-Ebz3stL{lSbRXUv+Cw21Y4CBxyT z4IS-PZ@HQ$&7wX&)6;#37kwk!edgJx^BgmZq$s^|h3dukLm2j<MS1y+^7`#gj!#dK=n+;I_d3%DIVM%wCR%F6nB0)YRo`FkS?}Kb^C086eTY;P@}X_zI|;*F=ZpIyElE#?|GmAYJ^}s7uTA> z*P(K0K$DYQKfXlhD5P#=mSA9?m76zYCz$!(db%Q{H*&PGto=5_%jr+8pL9bX_&4M+ zLXIzD^CQUzm%ikVVeRDdypJ-wjR#1{bC+LP>QCDCg^iJ!bnki2tItS7|JS!48+O_$ z9mXE9AKhvD>iPC^MIq^Ya5-*LPo#OPn^Qh>k5Is+xKp_dvg0) zP5Ic5b97h6US3w;aUvQjL1;h85-Qp{zfWIlBx-1{32*eW=MdvhA)ndlBV0G}E37)l zze%&TM=_}CM$RNC=^U$+$*J^ecsudV}WUbX_1X%ektGhhGI$fSFJ1DkD=q<%s;eS3_3)F z%(>zo;?75Xi>iq5g94SRYVa`$iUKcRa*BjYiSBifYJU2>OCrabP4aHO7|pkbDJyw1 zOQ9F{cpBn7x$ReyYSWrKN}n+u8O&sR6L%ERp&P3bzcGDs)05FhPH9vWxCoXDw#Aq9g@4^Bdj=(QtB*6%O<;{j^=4?l`I5ZSBXzU?p4e> zE`Yk%lEY>6VZJJ|y}5#Zw8Ay=e)@~^nDz0B*pKuLc1@MbJm>U}vu{t|(bV24sS&v% zFy`#(Zf9`zdQO{!<_h25Dth%RZUIZY(yv68ylRTT&*($wq*wwRd_!d5O!hS{5 z;nd(Z)5+2=9fj@TQ0?{15OqmD#DHKdeY2-YK(N??b*XA%k?QlEaWe`5;Imp) z=Ym|H7?xsO>D)h!ZF}7>)TwmPlIhWsdXk0IIi~Py)fH)3xN@SHj8MawsS?S{8jhWN zgb&vTEMf%n8zi4~PG6jx=T3A!fU=HWbdI;XcHsM^1J{;4z0ZrYMec^U^iBmu-2b?A z9{bL;URiwO;ao~ecK+?vpLK&r*nO+NB^v}XF}bI1Os(4`ZWT;RU_4%*nrBrWcft2{ z{0r4f%ZVZ_0ZMkG(`ii$VJE~MidC1UrFty8ki!laa7EXR5x2cgOKsibEg(5O^6bk{ z&mhBvUD$xZzyo$4$3F8m?}fOb<~JeGw0Gc%OCM;n&O}$%l>0qIwUxy@S`g!VuM~0m zn&F+I+3CufYW9FR)x@r_bfk%5&_{A%vre7VzFkVJyMtJ+h(_0(mVeuSN6@BGvNY3| zequ+q?%l7;0wuF|NrE+>B#y+~{dt(Mp4Y%&tMPTR^iX^ym&JOe@6*dOkkqOE$IQ|~ z?^lxQ9nVPW-U=*jKmH`43-kQ)h56jm&Rqp}L~Pd5>p~GvAL(B0owD#*W)-qbRubp9 z(tT!;-~Z`)-QMyS0q(ElU3#xw4N9%_-lm%o5JA+Pg|r@(cN}qq2`!{kA=M= zH2JsV2~N|WUGPqBLB2nG8xlj)m-Dk#9(8a=zZBL;bl&MNSeBFVqx3SiuEDeFPM#*8 z`H0OPm6}1np6B=cf8w$Qg}4Qb`0SMMy(4Ah+pmwMuQpO`5mxmQ=L^&@gU z?@4^1{i%IBGq}i~xOTeOX;_S4YJDs$RRipWE9&cHo5$A_J=Yo&ru2g^g?_EC-9#RZn-v8_IPy6xe-bE#qw`4tAYtm9-<1JtIu8*PB=A-zoXec9yzxR)j60c z+DbhPb1di0OEf8F8jJPz6wr%1b4{=c+r7tbf?xYyVuW|@R_(mVZYOz1*D95rExtZ) z)b+MiKYk=0pkURx$lW!3c7VR)wSA#sAfsGUIm?f&oq>}~3u%2k!fJyvBUl`LoGw*0)$#nIs29G>S@C+(A!K_flAN8)B<#+jQ9ju`_=w9TI~W5_L~Ue&qq>J_iI zMjw56M7_VkcNg5eCilqD#(dvZsaZ4KylF$*VE(qKEb-xzgreaWl`_h&GjiRW*(9!* zc%Er|oGlgHZL7^+B-$^JQs(30&9a1IcRtcPtg<8aj^Sz&8KwH1?I{bB^;`1sq-o!K zuj;N(h-RWu7oU^;Sel+xQ(@9Ie zuZEPbgR3E9^TXD9%4Ol#5f~ciq_wZwt}Y`fUUH+>xzsSC-kjV{IUE^ z@G8Ck2R!&_y_?|Ju#PEfQE7^$(*>WzF_T!EAAv(0#mjk?^C|d|Q(kx3-ky0=_r)!? zyJ9Gp_tTqp@34W1C7JFqGWj$?f6&8)u*+7%DYHOym#I^k+#$F0!#2*cD7iD?H{L#F zsC+(&e$sxsaN&#jTFjoY9VU8^d8}~ZO;<6SCWjMJR))+?3?^EF`=U7o;x)%&ZM3he zTybtPb`&g%+tq4$%TwoD@Ko?r_M4n_Cr7(6?Ip>j^Gh*fZ|_FgJAFK)GA342tP}G? z^gbpv=5-6}o)DUT{!?!`-7dXSApA+v;jaa^Q0_*E(MMrR+f_V}(~gZb~@WCC02tO~)8TE7*kkzZb___UlW zWf@yD`cm>3T0)DsA9W{AX^3ZkPCcz)d?b%7OKOazs<_8mmF=Y;RgHT(hE_9rBwyfU z`%0|oTk=cH5eL~B8|VdW;|lYmphSc3Zr%~Z9i`g)eWP+d9Tal(Bz$poGYFO%~T(xn%b;8YlV(7Duw@!vZA+U+v&vakn&3 zjTUZbQMIq;I>U<>|aFd^KMf z`o)XyW{MtDSblMR@mQHNPrhT`&T#`-e&iWs7!(;@nP&c| z^<;^L?Ys|`kH>j$`}^3Y=1`Q^t&Zb|mrj3vRvvSG=cxw7cSgLV`f9#m@N?qW{)+bX znz^@*wNCc-wJL19QaVy?=5tDPKF7?$2$3%K!DPGP0`=aP z4-&lW*8LIofdTu6{ggg~-&go4=Rv1v=xvZ&P<_%cv3zPbN8CG^EWEESts>&F7W6UG z{+Pz@CrADKkq!25`P3T=HbG&jBR zEnQ^l-eCK5)!59j6VFQqepYt~)dtC^SigFI9{=4N$Fvx|5wz%pqX~|1f8zJkcI}7A z8QHDprt8oVllRvS89Pr?Pl!%#i}SHCr7Psx5_$QxBZvzzcUNXZ3MVDvN&vE zbhu3YHiCwRk&T^$onvcXnLZhzNkgC3c5(mjnK^er4pP81$g4GE z_UXtcbLeNslXD`Y6|=4*;(_BQ)`Mn$1a^;$hhj|wRigNU&Rv*|zA=LKT+NCRT3 z9DCE6LxE|7rHO{C++OF73?yre3EnxC(z`!-kIL%bHnte1tHAiGjJfo_-mB0YZ?5frJvml2Bx& zV#H3eX(7U#237W`5J6ANU|?XPtZY_R0{%cli${{XN)UYH;SvO6*_RT84K0g_hPAep z{%;jb$`J--QrSQ{4T&703sw<5h+sxpt7sW&8iFY*mLyqIUyqZr8t!ghvIfV_oRl>o z5q|xb+R1YcXI(tJ+|LS;@Z^FTgm_tdE@B^r(cW>Otf7^jhN%|Wpd7)?MZ!{%V94Ds z07*(YLYR(*_@8VRRVzz1Jxw6n)by8yxQJBph`;2Ck%6%z%AP+(#M6@N>VWP3@#oKV zh!_e_iW)3xhjp#Zv;e!qR{yZ0(uIgA1L|+5BiFS9Cck~4>~lLJosL1-+{j8rzbvjB zkxcgo&dI$(RM0UP>l<5GYnH9{Q~vS~m`ff+#L+RR=o_f$Sd_`Vqx|Kc!#FaEI6=pv zWo>4yX-3gS@3&7J8wWn|=f#AHDMS*WRyH@c)GWI;gD|0?!IX{6BD854{(0g^W&u$K zW>^}jSZI|^e?uhDvHX6*2(UCEl4Dm8`sC#oh-eyI*`-EAEG>ECCqk6v_fNb~rr^oQ zH83T%1u;R3M3)7&BGhT)(ilWo^o>lEO@G<^w^x>oGUU^lVMzo$z`B%wLT*CLl>fz$ zP$U9)IfL@=&lnm@LLyOAV?-2qh-%Y33=U1gk|*dH#348f9D#s^i9+KDSR(l0g}+%~ z2q+u@E{cG{6G)rqp$RAq0etCZGc6L2{bwHZm+nL=Vl0V-gfqmWu}HYmcoY!>Qw9T6 zK~t|Ai^FbG2BIj2MZq)#Rz#y<4AFRCbnpv4f3F0MBN1>gA>fBJka)P#L;_ecjFyNe zpwQ6fL9nYx99#&n0uH_0+ED+3&tU-k0J&S-bUN(TtI0& zJXQc#Aiy0HSQY)R_qz!}zk(?+4Hh0uDa7zSMxux~>gb5Xz%2;);W4mdN1?^ToE3?J zNGN!C1R7$gju;4Ma3K`uC&Bg@*b0k+Sq6gw#}mFyC@lV$WhnOl&-@^$!?eaA326A1 zV32q`Tp0`jhbF*;P!{r^r~h_zU>VZiTlf3?0j)7qE5V`BaIZ$=2}HPap@F4gg28@Z zurNQuph1*}1v3m918vfV;*20{Vd04b15`o76a-^vfcz*Ve_0TuVE7nF%2Y~YiNF~s zv|#=JnjcRh5a4?U7DA;A7K0?gSBxiu7za}ZgGW;-jR8LRw-qS%2hK_&!36`kSon%D z7!o`#U`Qb9!D(?=s*H*OFMm=gO(dZp;@{c;Wq{M*sM03}1T)w?FcA%pgh(_IGy*qU z0q`SGMNtd^jrkq)pnuIzA;wV&0cM4b0ft1lWzfKB;Cl@Cfvmq-8IadVm`&CK_NOp} zI}Kon+dPr7PbjMBh{OQzg82gANBTc2#=~V$XweWn_G5@32X59H>>ZXWE&v#SggYFO zKy?&BhCq^F^T6VWf41&l{0H(R$Q_#nBe6gi*cc_{z@r%&P{MI9pvA*21HusjcA6ky zeiY^(XZY6_07KO8^ZDQLq!7bnKN2`Ae09L80JUyj2pFSEL>Q1tut+%m!()L%z=#2o zf+r_ntj*{6*U3R)sc<5g2nVu2Y5c!{_h0-64h}qh0?PpSvRN5m87$mCkboAB4Uiyt zQk5Mz6afW0O#uH9@o)@BA;!S00J1vGB=00&bkNOj&Rv~bG+8vw8Y$A5q!Ji-A5 zNhp{H17eW3Hw#AMDNEiw1{5U0!!jC#%>UxTAN&W1;cyv=ClcUJ2!bAxNVO#(y;CVj zr1BXc6-T8EghQj?2o-1u0_5hEP>AvH6@xSjkNrSF5aKq|0)AB46A5T3a)0IjKN%22 zYH&_q!~h1slM`Twr$VxTmIM!G;J8yEDIBOc{@bQM_>V+{14SethR1%8g+QXEQV^^U zHU^R%kxCg70e&KoMBx8a$plA<;4p?*Bx+OM2In0~q=2c-^FV3>UbA@&YzdA8n+IxW z&;bDR_5nWsnjhpfxL_pkBLbcr%*G%BVUbuWgMdH(g{FUjX(YfqfGI`8e^~<^2!BHU zA8|kjJQ8jsKnp+7NJ@DF^xxzvfFW2uOb8YfGyiSvKgxg_3Z@Ja)KKtzM&SqdZ%U)# zuf-w%VTi@TeH00R8y2<_z>w^@i-8jY#S~0W%5?lD6acapr~uJ0768A26T5khpoSyB z&lgBm1gfBb1F4uImtwX5ERF)3gFVEE3UKr)7-1vCy^tiqH5kQ$^RI6u(C_-pLf zu7TPN$k{v*Fho<8K3Eipz?P7ofkJ^$`%4B`|G(zPVQ^H39g8Bt_l`nLr8J6wr*2^Y524x; zSUjiL9|efvXcCwJ`+rspT2h-WgT{jR3$qNM#Zj#o1T7p@4A25Ri$%lRL4YCH zGPt!sz=3Tx3WQ{8kcEXn$8a+-UkI*>1B3#T6npM0#zhD=K+48UHg{|iv0mYP#OI-NI6%47!G_< zpwOjidH{y-oB=2S=7949xB>2jI4lXm!UlncpuxA97@R7qZY>BTBzWH$g#(2aEUba7 zf`(^FF!rZs{a=xc0ofj2+)$K(uLLNAh65lV7z;n1C_EYuR}hT@ExJvX0rm$Bfx$Mf zm_iKi)}sDTu>=^Rs46_*gK)SAXsLh;rFDs+z9a#l^lu0GJ1g(E#(n{Ro8z7e?@O21;a@vr>v= z5LI9k0Yi|xU|Rx+smuzl2jIQ{_yH9+(*k~=)3A9A1zNC3JQsWrz$Yx(gBN55;44%r zfcg)%IiSZ1>$?Dt!ht>$j25VXhle@}Ej+QIh#*~2>`RFZ|D|{8n+(8^>h=u~6X97F zMZ|)}CLz z^xq%=C^rkC5W{yH1sY-SQ}ZbA|f+%jyQ2Ud)QSE!%~3~H0j^T4U6&J1Ye|LHyfhHwuC z3_%pz%#cD$Ra=1e2OLcR1#z3P(yz=w0If(kLr?|7Rt%yVDCc1FKu-g1YM>z46xcip zu!PG1_>Ks{Cjy34g0bKdu;W(Eu>58#0pn2YKz z4y+FRgRKq-hNEvZX#G(qdeCC|+xsc;4=^Obdv$;q1&?rGjOtDXJXnB)*PduBCAPv9 z1mz3W7!hD!So@U1kV@5g&%cR z1h*h?1u5-+61;s1Ks*dOfHVs%4Yv%)B~)kv^kb<`1bBFa%31(T{CAoBPx}-N9(|y? z@*sk1E%=!wQ67%B?3nAYmYIkNTfB|2&xkjt(4vP%aDM9t>_D zN${`?uC=LwIOuC^j(Q;FgL^zm1Nv9~{{uiUplpQaXmI9;aO_LDjesX7fV{vnG@C6$ zxwC_pGL)*|ukEz?)f1yMrQrJx8begwYf9vTgLn#}fwu!FkI-O=Nwr$(C{l&J8i8--t8xv2=iOuuxs&mfGuD*Gzue+YEUbWuv zL7c2*oJ1*LN@0izrTd-sNsFxU@y%W#atsj`6ziG8A4M$tcp#{6Y={Y`T;O=Rl|9%ASm4D(p&x znEJCuom|PBgvOFyO~TZOdhEukc`}(C$}@VMc?0+TubNq7gLbFjKgF4G<624FypUub z9E$R~pXK_>TbwzJ4#|k6dI&(nj+6aO1-zcQt9PY&hv=_U%SX1n>(z?_iyZrlM$*f0 zQ)NgNHR1Cuu0jnu|JrhgsV?&7$t8DnzCekS50=2_HUubyR6z@?i0h2;Rt0IL^8oDgtJ zEot9`=HicW79A;Jq_Q41i#mi;iCN-R!xY?HbZ$^X=IpGir=jhBa$FcmjZcv4?-oLB zMLdYGX8uSMC`Hw<^xju1Lnc(XDl9Y%2X}g3^!H1RRJSF05B8g&48K46+#q&5hFytgG z_kV(N@zbYmSj*z4wx5hdFk4eg)EKcGS?#1D8fB(~R%%Xd*4R`CIe*n>ybwQoDW?6Q zt74`H2k>@8f9P8Fw~cTW(Bs=P$5#yalzW~R4!6=eE0V2(X&NtrGZ;c&`CbEIdvqXz zw#llQ>Qv~fb)OqrEygPsCd|F`*i(~x1ZaB1nOh+}f>gIZXFEj;eia}`x?{vstY5}d zV>w0FuSRLPM|d0+4r@>^l*>TTVOAy^(dt&W1I$ocu+nF!g_^dUi{|{F(VOFx)lA{k zxE6f*bB;02ST=TOBr4m<_Ub!o>ux&J4!J&w9fP3O1Qc*y-tKvE{z^r5(?76YKlWcf z*H1DW_=3Db!y#dA`z%|cp}DcI)Nie-qEFc8r9^ppbi~YHWEUkC8Y0Ju7ASU;68+hM#>!iP!lQY%se?F=gDkP)8i?KF9P^$V>O5mxVo!{0|DR`7Z&<$uKTUz#vM z%~^^>Anmwa&CVAPYG$m2?svuct;-Ts!cy)c?rBjPRMFUGsz|!JALD~b#7*bFI1093 zxciH((Rk&tr+j+dQ2EDT;G4?h(%xSx0QPD&{%VTkintn`h)GVd!R*jS3-5pxG4zsu zFcv$+tfD6RkDn3uhFc|zZ~i^d8XJQm%7ipE<{%7I%BF1XsjDf1Bu?^nM~Fm91V@!Wcg{)Dzot(UGCU6*@^#0e;^* zap#ukgx6(D-F49oLlF|0qpM>R_UnIiQBXBp4!A0$e*Jhc5r-10@bY?W&Q!d!*)y)V zG!H4PxQV7Ys>Kg-sgve%Ft2}Vslj7i(#C3WT1kuT6zPN{^^<6gE)_T74F4euSN(lI z(oS>iepZQos-^O!Hr?_bz5z$hfw0J@Q-S(~XON(yRpsqxu$nK~@9J9j0t8&$3P(x0 zq&Rd`W(YK@z5PM{Bnl|M&9}Nk3W2r|{7CqUJmaV+keqRv7yRAmAXLU4P{oV#9vnI| zDT*Pvqb&1~l(?UlGF=oX1cKVLkdZSffi-J}qfC#K@dMBz??sluyIG7-*^fRtE1?@L zqM~ZhE{;|>%|6bOfEGP11~%S&?MCfAl~O(Ghc)VlR~y_o@^+6^0mjg!ou0&+&wLOO zt2aUknJ&kYS|yXF{w$BTA0khQ$rTR0S#ke3e;^4ZvKeF2t}}yLa zGG`ZnK+fSNN#D#yNjonS%7I-@iKKHgFBaVat;2#kbonQoAk~Y^wnL52e?)dP9Ko@0 z$$DIG`mR_J$p_3Y1t!o#p5rgCaj;DtoPDB2UTchd@KfEI-+q&ixgd0$>UTChh5RtY z8-%?6JH(y9=svaru>Ay!8u;|`lk)vZo^jCa1mafo`?zqJb%ESi%XKe1YSmC(n2Y2nm*4;OTi)&n6A5kRyBL zAM7T(FtnV~s+uJMin53}v6av68d2}*9b!ym+vXWwcO{eRAE{m#PEinOO(hoA6N2@3 zoW*3$8Va8 zI1=iK5$woNv0*YH@WSS|=d%GhPjE6i`?JETJ*Tn)LtuNz@x+^A_Wma0>$ivH?rd*f zj5FeQt;Y$_#ry7Ldf73}YFoR|G=IBdVIg5@op5F?g|K^Lh+ zg<-53=h87vd$P3u`|)$zt76gxaJ1L4_srOy3V5+imBTn82u;#RNQOON1&!91N}Dk8 zfcw){Ke9kw?8b7ha@OHy#8j-Dz(R+Ko2g#t{bW30HtQADwc$W@-BwH>W68r=u{E~q z@LP$u``D#h+^l0zznVz#{ZHDvd=FfKP8z1c-r43`FKt)GtsBapBfCy3z>IpJ5bW^+ z`Q3kU1D9NDSfJMC+NlLt*AHERhqTlpon;iNC(&`#MAXNC{-wkfv#Y)GF2C}4y>JE= zQfXfmbAn;IXv@t`99o7ACVzugYa_;RyDY!%Smjm$r7U&hZ}@ZdpSUK+g$E}dbay-< z#{%}Eck_ht7AXc-lE~#3ux!el65QA-^h#J=c0O4o--$clIX-a_@owK79{TPdzxstY zH>=KYdYNIR0<-fs4W2lmhc7^KaJ!>G2O`+aB#H4l|9rt?Fod59*19R->dT$V)+lgAFN#w)B zKlmFS66!XQ2xrKtWMY|0Dv4Vb0_P5zGkba=-a=vOQL39)Pno)5um#*n?w z;0-%Z#91+bQALc7TLrqK;uqw7`Fv1TmEEjp1@*8}b^abPK^?bbIjpU$$GqD$7Y|kvJ@pCRybQ?cUE;e1Z)JPMZq$z~nME z#vDmHCJ?x2V4>cD;1;Z4sa8MK3l}FsKn5DSJ{#_0#?te7>7=1uhswIq$yHHAg8R;_ zYCquD-*OktZAwA;eHUU!Ly}Xe+0ulIaM#coMCFRqIuQs;m+J{ zbq{x69K;Hje)6iywc_BcTb=dmm=}Cc?_#RIRaZXK04l7REH2w{ukFH5;wyY?N*E?8 zKN#dHE_t;y)n6Kl3lvJ$N>$NA@}1~&u=4rue(wG`ztmARu1S$0%g)$JB~zmYBeMpL%U(|WVxK+Ccf$)L zl#aB;)orXP)cSl)?j^@O&j8rpbx`ZQJ(&;t&3XDzQ z3R1il2>bYo9z$^Uw2Lrvc!r2uXK-lF%E4A*!n-v8D0(&w>-{_0zy}KTUc^Ptt^m0O z(v1R}r#guWkNkLVXa(vP+dOmh*<&`!lA?A8)_&NEJc;45X^ZMi7TEWty zB-32(QjI10#;_*ox$5knMWRg2qfTC`0Cu)6GjRjsnVwO4#dsT3`m?rv zJ`M*RDJgbG(a}N+h~$l;j|M}u-S=0?Go`!A8eBhZ+F<|tCHjwCfmJNbg?%JD%)p2z zF*qLc#nmB!I9^g#;?}Ctmf%1MVS{BqqMXAPS-=0C?kHXLVS>vb7yUW|;9tuPbk^fH zT)?Ph7lp5gpT94SHfttE@pnyRW8{$Csu%0LTDMHaIABwfm8ODz=pLZ1#o&A9dN2-O zqP$57w>fjgGYelxBTrPsl;v?i^-#x+F{08s*6P-l>OuH%D9fFyNAjQsxWMc}`dE<{ ztrE_ll0nCE(1N`B=(~>t_OYPF_i8Y%c%uezx1~$gu+!4Y?W4eSy$WoCC!^RPOHjz*cG zL{OiaMbjk%;q31&oI_o!^SasRPlKMO9ZVKVja_jXB%aZ-|vsPNjAhgL8NxgHD#z6$SJjaG`S=x=zsn!pN>p8nWIex zzGu_=(KyYkV~^DIr@iyvLSJ|DFG6G@+k*LadF-y3AFfCMVa^dck(iOt0mAE|Q`0k5 z>|ZMpp<^~u*eB^0zH8r7TXrll9o_QYAi{%1h^XorTm_(!MA>LD^d*hd3Lhj74Tenh zqT@`HJF8tjx*iJ#D2?53H4GU_Az1X{0jUnY|#Du2B zU@&F;Bla->_>9OA{_eY(vFC>#D%{YZ>&W4V`=-hA$#8N3W2{BQ5@ zlNk#>-qN?#<(rgzG0VO7#!H<@SSE-#tLstGky#n=t@hjbrKmZV>AxdD$f$p3pIxzJ z3iQoMGYl~)^}zz4pVb#syG7sKq-nhbv{6`?^3*cH27YN7O`2?OstfDSPU0VIHwnHc z1F!MQ$uDy0eM(15_`+%QLg}d|kkFrE3ifJ9)P{6@-KR&y=9#Aj&8wilFa-VjRL;gu zAXwdju>~uB`O(3W%$pvubfSk`)IbY#RwV2EA96yB?3=$Ebf8?Rc`N6ryCGUCK+i7N zTycaU|E4BgXHjU)6T;3wbci@o5nTS>JZ2Q#r^t_(l2_lWfr-w$=erTR&Km56vhXP+X(V4m2sOxGru<0|k2lY_`1$NQgWiGIbEE5rzto{7SQL+6!1t ztF-NrtvT=w*2pJxJsx_AD*6{=wzPnD$(?d0mw-jxIE9!(C`s&Sj6*{#u|K&F`X2{i zSMmn)nI9x>!(!d!6oYapz`ZKFDLCxnZ~-?&fc%!1{)`~R2!uZll*LhEc%TksU-2fe z~&-3ed)6Fw5vaJu3B1?@2 z!OF_Qm10dT43z5XIvz-*?^u!wii`_9K;SlMb7I*VV&&x+eR6n`PyY_Q`cqf@#CQ10-+dX>Pe~#J3wrQ6D(l;W+p1#( zd%icjE;b7UhkxWv)M!F}g-q_VAN|$2y4_e|Y#YkkFz3;V(*!=J`gV2=KHp^D{{NH8*twINQ0 zVRN@b1K1v2bp_5H9j>6iHT3x}YXW0}Jap|jhQw1U6Lq`23?CnDyn^QLl<>N@u4Wx; zja8p>$_&e)`_apY(2?6hM*Ipn@!MXYPF`xC&ls+Q8O}<#opL5qArDGyBiy$=hU(<< zI|dhfj28EfS!msf0Q#%ZL&Znv0Z9}@o4IA@q1RGaE6{uAm25#^9 z#O{0f1`NJ8b2MMka4$obUj7*)_hVaI%FuqH>8n}4;(Tn~DH82Dq9>>lO&QdWsBybI zeF7z2+C(XHfLg=ME`B>c2ExmUjZ%vN_GVE%Lp&!dxhdH+mX|etOL2t`)$6)%AO3b2 zIZG}jToIO7TSjO3+3=C0rdg;=*Yer$#|~UeXxr+?=yJQKO zASgpm{3SVQuH7N!$MvIZ!G$yiF^J6$u{FW9@78N1g6L*aj~A{aEP9X+z#y*GbPc=SmPCvXO;r zfNkFir&jcw&$?gRFp)C|m)9#2)(7k@b5vibU7&Qy00tnM}F;4T*vN2+fM&C9-noMDjgmL^aRdmkK!qe~k=(0KYBj3r;0 z-P~`G(UxmSL%(Y*^ro~ljO3SOpt0EX=D%sUs|3SdzP&Y>b&<{5dAd%gU6`NZv7nN? z3TzcZo`1%p-WpZLdu)p&Mr{0#>qGO6%_=#ZtXxYzw^iOOOutpE|doiZz zXzyHFfp&-HAoNJbqqw<3w`>Yx?d@5z)d4^L@vkNPeKeGNR=C--|GvK^Ay929(9^YO&h zLd7vtIcq7;Y@$}F2Eh&E;Y~MI=uhwJ7sNQGSU+x}BpDy=#BAg3JKVqkmXAnK(It+= z0XU0RMPuOAhk#f$8VyPDN~%igd9F&VhBj(A%~ki+)hY=1v;OD9CrWjqEjcGO1`UHM zcf_RQ<6R=LP-rq>yUgoW6=9`m3AuSvj(`X!4-%PosPx^vy&AzVk{ib-SgxeU;d|qj zK(!agTPvJ|&MMX1^>zo#YPL+;J1p;S_p4n=l;St@St`*f+o|z{0xZH+g_ZD}u`7@s zFyHR<_EYj_Haltw?oA;u)PpnR`|5|J^EarqI1}=E*g*&|Nk_xQ=YBm+z8hw>{b0Ml zvW(R^bvZ^S__9vD`FU$^9z4HXhntT0fE@{1OY#rb0Fmz+VGp5ZO(DHYS{ZSR%JMSj z_V0;X~QSu;>(~U;+iHF)}qtjvbBmq{4QKk5vyu z-??M-UL0<~DPVH3(39R`BVBJJ-8|+sTNh~vVkv0@&Q0d*_Gwc_aiB+C6L2_Br3uhW zThLVU%oXrHqW%E|O+7&X!F7b;xs>pexafJyM-a6V)NeX&pWd-8v#r+*An-(V9Wfew zI8bWqur*quIfK#Eg8xM@lBw&6CL7EdzE~d+Ed2;Ph1{k%>{z`h;69RKlNWehkFg6F zM(d17U5$kq8xVoGf>Tuq6V=0hePu|cV1e-OZ}gzZ#rJNxKI~=uqnb9j`s!wtm}F>> z1@Exw@Zzs670byGbV>WW1icWbF=O+59H>={2=E2*5Y?iNE}Dox4LWS(vw-S(X~-0H zE=~f3VWUi5Nr4;K<9wdIFT4Kn{fwTXDCFStdzDET=0xh(rH z_E%d8mdI`)o8vKd4v_wS`tlRZBI^N6kQdbR0ih`w)|Ne`Hg55%qsA*=KU?MASu!9( zNsMSdpR@P8DgrzJ31KqBQpM9-?3JPFQo{<-BFb4i3End!T2~5gR=Zi!QRr#0MZHIq zwBN)S)a?^#C8C5b9lrx5L4TW6_&zLqJ_;sMrRGU}7u~&iGIFP}^F1g znR5(Zhtx{K&)ndn)u>)<<}X1FA_A~R-UskfaKLmR<`(*Sk35g{t``-6#`HhEhN^!9 zshjz;h9%V9mEvqkHbJ`JUDZTlc(-iXv9yjRNjL2)a;cS-5mzz3?KD}daUOV&P-;H{ z*}X*9l7_L12OpN51krHlePZJ$ieM%0#`!9wI<@*{e;^7$YLI#aOQVbUhyYcd2&yAd zV!seoTeE)dZYx*53M}~lEF{zAEqmvM&~cRPTxE5kH9wrEXo;#!mRA;)jLVubqA#Nz z5r<||-RmH^T{?ns^`Txd>!c6=Yt)I3sv^6|OX|8xkA?7u@UQCYq~tMYPmKqz1VulM zzizgAVZP-|RkB6PuVi}l3PGSwqh^I`>J4i`T?i|vY$Ga|$K{}2@^n(%DHmN5-4e1+ zok_i->x9xO=)#z{HImYx*r!Ky{O+iF|5!^th+-8Zj7M9XTV~)OUzXQ31hZMm4IefK z@E>Rgv3%*x*V$LPgSCDS+{fmk&b%Y*4A(uoRUVo&tb4Y4su1FtjRk&-sn&62Yn&k_ zUKvP_*8M4~I^u-t|$04xUt*FfuCMg>+U+*5Da0_e7{r-|F1`ZAKF&>sC981xOtl^QogYIKrgd|EV zFyj&^Jkrox7b%N#wga5l`ErqUFy$Lg9Jj7eQg}}D+R)GpuI?Qy=ZV~s_&Vxp+=WDz zMESBm=VZ?|J(Apc>z3TxAsW(xHKz)N{kwr6umHEb;Vy_P<#2@&;S`>&5ID?-RTkye zw%J+5v}8O{RLi!N3t)^8n}L_7xlyp93v3!e%h!0-NjYC`V*@Hlhk*`B_F@X_aE#Wj z3g&+V5vvnm9TvfEo}MwA9OUr8zo$8z6d46H18ZkVS+OakxBzZqd`7c2RGWcSfl7lD zadS5=w3yMYy-285hC2ryx7^10LF`|a_JI*~r_CZoi_uly?z3LUQt%6?%J79zlfC7x zOfXWNkESd+&Or35$V?NR#M#m)DM5gfJRW=cJgPQS9Q5h2ubZy+A8SvJ|GWkhIqJev_hfl@(t>QPk=k2u>M63gbP^HY-^0M#R!L zCcl4}8i1Lo`g>F0us_)q=)kObCP)qw!YGs93rjB2^8wJ}e7E4(NZ~C8w$XmPmhUPFCMP`f!J=(@S5O*?d9+*FgFCvMGa-A~*$p3^AE8^q$(vBf`OMnVt z*5j1#gTRTB4xu#4W+n1!{lac;G)nJNiqpIAODlf3d!xICiZu9wmH z34ULLCr{##+xypU%X8&!p3asH^udOwP4w;MjBHuV&_=^uJWZcfwLmqaJt@BY*X2I# z2wNr>DvqVdpXHL?QFUHtbMV?wh4FRMx7tCMWs&JeWa!<$o)gQ$V$YT8`;Bk*^JB5jrE8XTF=+G^{;IT ztu4TZPBlu`7{KMQD7`#ya?dS=8H4|caGb$*Jid`T@CHq7C(?_`z`M{nPU#Bq%GX5qvd zSxe*V#4WEcafcXjtzVxCaiI#G0thk6x4=j1m9!f4lSu29XO|?z$T*u>)j!(MNYNmx zbY@Boe#CQQw6I#eZ%{8T?BV|DK&IGm&$nnvmqNk6l@)dTWXsW#SGmS>%Xue0KEq60 zsoa}YUk+qw5fDOG@;SC+OU22Fd6hhQ!VRrY*g`Lwjh2b14uVOl_FRM$k=n~-Que!c*j+9G5=)JY129Wfj(|-pHMYIfd zavff3(c*Pfr)K&`aSxkXFu%3;R@kZa8z_``6^`lV7KjP#KKI!YsLp1N!Q6LM5}aR2 znvi9a(^1$-&|E|`|J#}p1NPoU?zH6z&{^k&s0LI=lRT9*qJwCrVNEV+J=$D|w_S=p2o z!%_hPrx9v{ueZilk{|4zmK#=LP^%Id>>(v-OBZz{G*F3BUwSK_K%;G7+Amj^KrnXV z>)SS-GbNP_lzzIh*jd;Xxo>(}yq%z510CrmpK^jZRUDEF4z;n&vlAD;VT&Xt{d}Ua9){Ucwu!xHzMBBK)QbV|h4q z@mSB~6LAMyiwyux23|>Rpm&s{?B%CHBh) z4@R-%KP%b??TP=ZR~CT-&k0u*L&MbUqRjOP(gJc-PghXN%ceBdVx~#&;Z;HxFgPYXrq!cwQ_?3 z_K+gg?OH^=2S5mrLTUU6@UOtm7)ppQoK~1u8_B;}rtWDC2eL*g_FzL15?WLSkG5r*5xw^KmApK+yl?rR_K25VB+6jZ1g(VW-k$3AVo9$SLGW*pg1D zX1YpxnE8~n>k^=v*w@0y9YaeyDATdi&EpTl={EP8DX&( zI}Uuch4ch{y?s9!Mxqx}y;eV;MBn{RmxyZ;X@F0s3XLJWs(P99v%R*xoW_aRYTCSm02vY{AQN$f7<1UKUr^!Au%-ZwnK0Go^6ggIfwEthT$!nMON zi%|n@R=!}!+SK;L=NGILIT*ice}#;_)?vjqXJ~D!8H)2rj(s>%36-fJ zU%(*)p;h9Q5oIv%JSF2_grTlS1UrK)Pq_7_}|?EGWz zyt5EJ`c;$LP1) zQ#G3xDUO`g_wxuoXWP{K93zUUbyI_jLV>FtzpuNtzMW4le7xMiE0q?jFuA3y>N06G z%)jA8N~m+IukLqOi-|u4RzAz(pU8u^_nhBKl$D|jtGnMnthIzOlBInbwh0M2hv3YO zxkS&lwrl;{Y%ajJ&X7Y8?2Ma>5v$%QszBu`mrI7r<$GjW&0-~v5H5y%S>REx9RT+z0r>N-Lt60K^R|q%V_~!G-|H9nKsHB#T zlt;M!ye?K7z{(`Qxb|0L3`ET^W1q-?tjP6y-D}r z!$zoBPC4u~nFq4TQjZ*3MqEe$1uFcZs#64eNh)PM13QaG!9trm?&0@L!Si8#i0;Ha ztBie{7kHChgU8n?t6~!Fmes>-Ezc9PDXvRD;31^3u0dFpra0dZNjheWR(~NvqY%G9 zu4?)V!wn^ratuan^~=|12}lD=xXk$^_HLquO@^fmBhHPT1^Wxd5_(_URTr<{x4YW+ z?#4}_j}`HI^RVeJLq()%h6xu6`oM(vGjj8ZSC|_Yh+Vg&>Ta7lLM~Wg2s#N8R_9@0 zch{TR?7l7`O2glS{oPo+PLx4xA5xiU*-Gmv;rPyDy<2#RS;{B#0nZ3#nI3a9|#&~zCYqUcj92CuoSEVaecc5Lub!Ez$IF0AU8~$3Pi9Fl2ASSIQVdp>&*sX zj(caJsoASMzY^Lk98e4Mhi^w`vXVOZE0<*Js#+9m8bxm2uPT3^f_qw2MextL_Hs*5 z^**s6rL%M)=IEZi$IkCAvt9*eeiiNLlYZN&3)%!Z9I-kulEj{`A69(B2qFjekF`7e z6nR?JWg4afcJp6-e*Ti7p`mXxf^$U%M2E?jFIQtE-qd0Qdcc)_w0ao`rKaUG*0EqP z5h+YC%M4?auY@Ux2aI2?93E`_)E=iWYveR_qny#JfHNY!JU3>R+xo(+(3VtiikMLb z8XXD5Mbf<)b^Y`)!3R1TRp~@ZLWJmIo$m|O z!4IBK6`ESbSU^DPYl}@X;ztqapB_^B9^cbq87Q6f3@L(9QK?2sc*Q~F`c47k5GSz# zn8%=x++SaZ_hLc9q6leu#xp!5{RqDw{R|F|apfQ1*~%bjzXw*Fb| z7P?SRIQoOhDtZJqs{giyUb#Z5X23^C#cO{v^&dphap$Q11yFqrx=g|(Qe`qDtvueT zhXLSOXF>7=;N?KoWEIH^HO5j{?Y`MWkjJ6w3NNSg6hGN@d+CEFT)Md!H*!hgsU4qp zxyt2re9>UF?OWeOK0i7zrJjl*^cs0wiea!$;TIy&izWAdDMV8w$bD$XGN`a8_}0hF zaOiZ?!}17Fej+sR=h2U)OlM@D8pN8%dXTE+e0Kv-cT+ktr+b<5g+FR|$+q zw5Qs8VM+S`w-=;g(Kq0fl~L{G58bHuRCF#HYR5uBcV@ZxblI+n9B}Wcf<%ldn5TIP)lXuhk!`6R@B^Zl3{5bXuCO3v_m5&)NDpW0gQ>WyPR`; zM#kOod~9$c&WH*NoGQ8P3$j@` zD5)K_Ds?tlzY=rwAVoSbOG+7bVUgKY#c$1q>5U(Fo`AB=r!o=mpP&J>6>~)zk+K^ zx!5zPhWVV!I7sfHv`{_x%0X}g#i9P<7m+;TqdLe( za~Zdp)ZT#!I35pLd@7dMckL!G0lcp2b_no3(vNh`$p`amFit~YF^orx?CQ*coS=3~ z5+n>eo?SxZhM({}6KF3ld;ZbJ<__pJpKv`o;iQS=<~AoTfwx`23Ghz<+c}W$Z@jBe zk4z~G6Wz$9Dv}Zzlo@O5A=uJ9HJQH#Y{76LB^o8iI0btzVXvW4Ch`8n1ti{J2C-!k zh;!I>=&5|7ze*~4*0$MD#yKWtmC`!*Z>6xwS?jR#BaI1iL%WMVT=C%O%k0sc3A{S2 zd7oKaZk6B2sODy9;y|bpDHbSanzShm0vKjHBNfg7+#o@=Y3q5xMcVGn&<)zIo`@ZE z8H<)G3o=SXnJ9S&tWyzgN8G+%n_z1tIJ5{u<<{#)VXx6ijIaj9MhquQX?aW6T}-y!wZUbN)!)-m;WPCWGDjHAh|rrL5Kv6{2vk^!#GQ zqOHYg46xA@3Czi7S8MB1yQWcd4iTNOQnoefX{#YwfCQDQDA!$Y;$2c0XbSghTCRBJ zL^*`9aWCCw8B_iJ(2_);%R8xLo4itQUxO7&FUkpS42V@9Azm9dr#kHAwvH2S61t7i zL+h2DXFb&mN`a|z)`!X{npFsLM6=EH=UzQk2GSm7dcIPpX1)2a zas}f6p+t(Y4sg;xSI&|0SauudI0A33+bdzuVb`2}lBX?Djf`;HIgvy}x=e5PXfBymSteFscz7s#uoT};aC0I^SmD?<&gqLS}ucJj*j&XT1bL(e%>nJjCb zz6`%I;VrHB%39RlL1N+WSr(ftBvC?5{d5S)PjdUL0;5_>qY2VB9ph^8Dkd!>g=?zI z72f#K{n*)F=LuL*PA*>KT_2O*co@07Y>`0>l!tLZEaFAt)qO111z$ZX4#-|VU>~Z% zP0%G0F(tT8U0L06Pbhx4zA)UXt3r0wTm7z3_z#^~>ZNTbZ2 zxnj*G*=tXE8_p2Dt<-S+rq=oA*;Objk?h1UBU0Ye`26D@GmeqlZfsW8v)s(Q=WMJ( zm$}u$x4)NYhWlArm~O|&*^LCMgaCYDenDC3v1WlMU)+pI4tNYh zWf`x*F<{#eWwibh2_lHIRL(9zm~-PpP18)RE?e1x$8G-phay1?&(d_W`wbp7#Si%( zcX4%dF*mmV{{)8n{}LEBHYU#h*W_YB|6g2&i#1~a0hA0V)s+9A|B*euZ=`OvE-29> zoIb9(aw)ATB~cp&E=A;jlI4>)q`42i-WWjXsN(({&ff~>lec@l-|jFFV&@J7CjhUW zJ$+u?UV1{!3v)hwUM-z3XXx!=mOC)TSk*Z(4`6gct`;MMG9%r(HBZ=#fqi=0d)}oA zv%V8#*e}4WjqC0H`M;yFl^n$bVfw5_qdRb;Vnnu$_L)}CYt7q|c{wj}27&Icdz;6r zp?9}+>h{w5VBCM$FUUFvuPYp4l>KyThdggBvARV+h0#%ij7O=)TdUTGJ-L^*fD3*1 zFNg2$-H4*i+A+yVR@?U3gw?JH`_s4Epyk+*bT_~dyCK+I!$(Gb32EUpQ`3x>EoWZb zDqlKcfbw3HJ(MCF^I!*cpV$C07$rP z>2|aJxmFbU=FGpjxOE5>E%XlL|%7W`|72IA#^qQ@{$bu#D4IE4bn z{u5`SYsWZ2w&xpN_4yEJRIZ%*U30)|t_ZTarl6%iTit{I<_CTVxNYXJ#jtD-7lEvn zHPz%RwKR_eu^ebaZKr%Ml5dVl%wCl;m^iUP%EW0=|3;`CI3v~aZgthgf%qWvhNp~(IU+E|woQNrgG?stZ#dR-)y&wVb8Wm&`b4_-jCaB8z| z@-EC@V&0;{U42kz^JSG43;gwnz zRxU0%W-Kc=nzLjdl(n=}FoH+V(*4eFU!!DV@vocud5Md~@mF={WLi^IY+bGnVz<@u zN>KoftW2eF_Oxsq`cST(xg}8d)^e^ZgXcjc{-mqV|3KZ%Y%Rg#d^s`W<+E*oZJndm zJcs+A$jkC2<1V2e5`|mA|DKq1FiO_LSD9SURd3@#%mD+J0`|Dwd##G-L=DLW3tgQ( zvH?>l^TnTy5*6M^r53fcDk}W7720SnCtvRn5mZ5z#=nA@*>Typ?gkK}3F*X^jvt@r zqR+W2q=2f)`{G4r-hRG*WgTMpS>L+D&Fzy>mf0=+hpvS@f1U#>I3~G8ln4;qt}838 zn~$Qr4hjp{Rs1;TQ=adMw1t^NEk}QTIGkJ44v3?hY0I>&aG&MRw&n6wqqdd!7|zMf z3BeOP@jQ9`L1a_L&=-!)0g`?HuJtJ;syvdC1(f7y4K`Yw3%-em&y1B{d@D zuJJ9in{O)W{vG2{v*yLeHZyoSepnAeH{b-k(Qke;vqrVtnS4gP5^j_J zaTqx+r)#&pvv|o_N;?@4>RoPdA<8BA;=Xy@0McCpUUU^@(hlUw`(3fBRl`lJNlz-c zqxTKngisDIP&l&%(O>*&rp#n1iO|a67_+=@_=tI$mXT(g{h0M=E3HU4UCtYptk8m#;{JVI+Gu@Kd*Lo zZ#`d~Hz3Q_WvJc3BK(@B`#kdja3LPm_v=XwI}2OJ;10UZa>qT}p}L3Dm#A7h`uyHE zuDdm^GDQeb2S%aI2;|pj04c!FM5jx~nf0ebG}ry}1quBD&0|Y=f0TAXmkzbRW9KY_ zjaS{p#P}#FS=|qIu1yri@#Ku9#Bsu|GAURsMYC3B|8SyWw!A@j(#@u6lD&2lw4 z4qR+o56J5dUH`b_bR3t6J@#vSB+LaQEgvf0c)1X!*=X4;?DyXieD1d+P6LG1LDP;4 zt!h63DM$k7=`zkofWoKVeto^Y?}k5Hs+}F*){~g)KX*Sp{oR3p{H=cael1@gTsr-_ zcuQlsXXQbTwJ<*{H7rA7z~>FgHTjIIl9*<~d}W0?alea&n?m8}Cx;TJdx89xx4^=wB!Yhy}zv|^WB z>@eo9&bKMz(YbEWey&m6+_b-o7+S@uoN+0H45>*p646-2fQPh2Cc77gZM)qvlro`rWYOZ5?(l#)z} z8L*VeBinX>{1fyK#KPoDUrXx!k{a|XoSg%)*x3Xf0L9a zE6s@JbJoZ@IK;e(E6jS(`Y&b|+D8kwFsaF4rm(TT@q(E=4k&Vs5Pi0Q)njGPn=zwVsv4F9Xn>!=U=I!ZG6|1Q38LnY;`c`XCbWqx zeF~bmvOzsK`Nj`qe_Q)KU+(xy^H~IpGS$A(5tm!BXU|sBw>z9RzWr)9AT;Rp8eAIK zdtS{MY&6U`{CAHs$v609r-Xu;$VR=D{^1p=|J~wthbDC`r4bX)K_iGdB+|;(%(mPI zKwfFN04N`v6t;pB_VG~)xtv!ISLS5PO|oSAQQINT`u=$=ls=o~&c)pED8P%&>=OLd z=2}4$W`M4PhQE|_UO=Gr>oPF87?oZXzp9VsW%c$6qR{2Mw4$$d7J5JOL@jWi(x0FF zxn}eH!k9C{G7013QdD?okIZV$zbuOl2q>S3Qa=9KY>l# zN=gX=Gq*oSuDtBZ=pPb1o9QLs4<7k^_7hQX&o5TP7K~*pPoZXt$aKDBf|1w&_+n%& zX3J@=EaJl-1|OTf>eWjnV3Urm)-x2|*e2D@aQAlER*{yxW~cB@ac_HQx(ZK0G3rsd zuPhAKozL7q857Ef?^~YF%|EK9&y$Hr7rOb`zyj$GUIcAp_$88*cZhown?2$TpKvwj zRd+1+)hiX5^}#PDPk7K-TTq_^v@i3O$PdcmSO|mW=Ly+F(&1UGI*gd#Gx5;_@*+YY zdrDkIM3_@Z#$aXHaM{?Q>Xf&33hGXLflQhO#VLfVPDSRrE%=rGZgBWL$-RNZ>1Aql!}?s!gqz9HjU zG8O)hY{CAIVSwvDdgMP3EX-_N|J5z&jo_fDz}$(%j^1Z1;L_jF-ey+!YI1pf7q1|HDmFKG~RkcY5rB}cKnck{aGZx?R>$hpTjvpO} zhXAF$tK%Z52WS>xQAlDdcoTJSz}66mS9s z3-gRbYV;4t2upi~ShFL>;K3RJ{B)+3vq7K?)KvbOvE|376(aJINyFS2!?AKdn;K;| z5I3fZ@pN(TOyWs5=cK`kIPXb`dfIgfBtY5ZYIH%_Z~{4hd3jwm@NkC2?sT=&If4z! zTE*XjIl93j7{>9lxpOhnLewyqcrMSb1-6#Jyw!#-XbDpo$q%)Y9sM$>$ikYrtT1AHjGq2dJ5Jpfda zi)oQ2yj`;J$TzIK&Bx;gmob0{ zxGB$}8ENPQ)Um^iK|Z3cMV=SjR0H?WY-xo-!rW7|3A)TbRWzV3Gz>+5icL6RIW*}; zMS>-ZHqwuHzz8h){_Z$(Fwmf_i~#gTjYZ{Nu~Q>h(vpWHSLq&*Cy-}ZXg}|UR0uoG zX(L@ttE)2Lu7B(RKS8;Q-MVzu=(8ryMsV1~}?j=z9_ z!73N6HO|O|x`N1;Q&%g;(Ok=*2kzNMYMFnRL{wf$H^LI1LO|3*!jZNuF9Yr!FO|Wv zp@E2!#V=r-eK^J_4+U*Ele8H!=S}+N()Nc9}SasXd z;>reXrYdfw{wxm8-3&Gx=+8#y?&N!$S-wVo-7YSgzHz^`y_V;GfpVt#?ZJZ~gmmCX zZ4nz$S%>#bE74~{jPb+YGXgRVL7t&=5_x8GVB zfgEM69Cd>{+eMnyMO3p1fvqh~=F3@)^ly*1QA+Lcet(>yfFWH4En+DcY@JXGGb_jw>lfhh9-%Ly!|P|S5goji|ZAt14)53PA|n;Yr&! z15HCZ1k9n}4{gt(&;ca>f>J=YLQC5QdeTY@4eg*yBjF;x%AmMYE}~+&pYI~)5roO9 z9JHA3eQ?N<3UQ07vn^Y+EEeKiTZ5f-5)iuMED{%7gBerW0O_M{T4z7sB<2>mKb`<0 zTa84eJb#zl4e6}oGL2v)w6lPSa3*oV%wps0@J`RF^K?r0KO7cl>Aw~gh zd)l`k%eqoOXB|N$Mt=#PA?t&5opKEw2h?p^m)t5}1u=TfP>c-i(l+kHyW?yL?aDym z?0Ky(NkC0m;Q~xv6`)|q(*Aml@FI(ZtJHJHBXw>723iVbGuCq?={(1MN}-=WiX-WX z97>@p-89*V+50WCm?8$rc=Qm#uCf(uI&Lny@}!!s{1&Bhb91` zrck}7IW0aD>?|09T6Xqw7&{x48@XijItM{q6NY+N$kw9K}2@Dg_L7s z=1^tf4d8!$orOXv=`3l<$%L@{ifZ%6f=gsA ztuEj#MO1UA^i8f7C4cD9x*p6DhK?z*cP*QN!9uPj0Q@AP$(59eg1nuAtU)Tf;&1m{ zBY@`zXqyN@YTSa-72R>5a>C$ZCcp*G7P_Hx?0r>}fr<@GTqf_gc{&zv)~?7)8M|-CbW1TW=lv-m~yx|CAu}1%`uQIxru4I3CtU;TVi63DxkxM|o7ShuWfWqTdovYeY*-768ihHVj%Y`&1NW;Y24QrDFt6j4QCd#|f*= z6pESh;uaj)IIurNM^n6Yj6+B`021#5oYU~+vfOSIHghkmw=K0 zG(#+$Y?U@+&nXUw7l_VZZR>kZRi+&T1_tsliYQFkRy|fs6&AxY$yoL=h}PL{*ifb( zmJ8iTgs4b1Xd*x_1iSB}&*~G7gNjAmQ&j|fSbU#kX2^QwziS@vuL45L78eRq5p8(Rt;2N@4vG}KcSSb7Cb#K5DO^OB|Z2B}g2zRXg zCPdmUB!W)<=+U%lEDw?M=-LKONSy_hhMiSW>w)la%hEfQuSnunzbRMzfr%wbz>iNp z=Z({WChIUr@*%_mt&0-u5dxWptpVz4!AjOeiE?P478pvUEaE4#57Q@no`6>Cf&Qo8 z#%Za9vnK3OER`&mHe9;u9?Icb5a8A{cQM^!B797(D@fw@}N1g=boika{aw1p5;uygxorNObJ)txXEg>~ z81&HiVrMs5jolY4rt^%Q(lubR#DHH&9+V(WB>qZ#xq57FE_%-d0w8`KLWYtH5BBRN zy$ClCFW4?zttDz4s;Z>|h&hJ6(P$Ms1Yr+g3bDf_q397GY~QM&lB9CTG7ahb3HUt@ zo{!FarelG>M#r?hwDnRP(qokYzuKw8Z$VGX#(J|1GHQ0*5lzG=q5bc~zZ;XSq zh1RX-*>&1vT{?@J0W6LH=+nz!EQd&6SB8cKV9Pm|-s8F&>;+P>V*4qbw|e6xMcAKL z=Djr?C!0huf}R_mX{)Rrqs`_(MuTm;SQ~LPZoi6r?Q!#V4V+jk;qCe(O4zSe`)Rd8 zj?cp}B>{k^r~Ui0Y1=z$Ew{Uc#}N`ELO?Iw?a>i{Ah(AL@JU=E^YRu&zoxJiEIU1q zEv~1I6dJHV`7ybLM#si-QX3$o?bm3V)jtOjT*-)JfHvEESHxiWhGG_8s7_*pcmZh& z%a)ny$OyMWX=pKtZ!A;8Q$X6VcVm$ZN*f*!svN0Xz6?eUz1*yoh^!$^?%iOmij{=> zx(T$sY_Sgkz(At?`gYR?QteU$a~8$o07g?Kj}wo}bYa`Tfz7%!+L_*8X-z8;*9)uisiF(aYSJRAhk!T!StA@z*!aw?Ut#^@7Q9i z(9xyp5MS_Qgc(pJ>i^5DT-22CsT+i^B(r8Ua6L=Ig2FF@m5(wVo8veQ6ghALao?JN zb-$|}=_^o}2PmAIy>a?`*J9br)K@$E`y-P;CYN55Hjd-4Bz}rBM^mIyWIp*KfGF6K z`?|DH*#CUPX27g){GZ9~Kl2**e+M^KHdgNBG!rp^ww=R2jNFaovmz8k6vaAg?=9nb z`7y%<_W4O&8WOahuYCDa0m5L}H$cQfle-{Z{rQ4+fE zoN3XuGp0D0RM;Ksj>twombX2!At?y0(tF@;~zl8Cw^fgpfmR9{>=fS4ilLAJa zum2seF7h9vxAF4o?BV8BfB)Zu%ZGH%+aXB_3>m6y!LIiU@$Gro!P=40h7oOJtCQJk zO~EknN!T;+ybqGwW`nz)r>iYa0CY8`Lua;@?I7Fsi1{uE2G53R39Qc?xn^jxuNMPd z%~{dbqA`~A+NAcGO6=Fr*jFrT zj@f?0fnP z?RXANdkM(j_?_c>%DT&oCnP9 z_C?>XK-?KK-AzWX%D;(4ig?B`{8i$gslS~@RCld)1YgHU|8ZpH{CO{|?^?C-c=6-g z5*i`jefN6)oL@8;ge#Z^B0&MOCjqmtL>FgnKPk&}_>*O~y0_Z>`pA2G^?gHY>gw0g zTl@QuS$$mYOe`Z=`rde$wADgQ%YK*7YG&3s4FO%~#Aqo}Y6eOL?wk9Fwsd8d)IiW4h86)C za3vw_s!7UkeU@11fY|M3$O$dBuWr3^ zD@4s%$ERQhSd+GPvHm%ZNdhoXN0hA+1(Ysp&9qj%`h4)J?t`J&7^*xnDZdThLx$h! z*ZS_8W^6>Bn(OSr>Y=C!%0`&9M|{@Ho_L(YJ10o>Yxn(vRebCer zi62PuAl;#g1lN*i#p~XA0^E54$if(ECfU=Qs^3B_qUw@DMCfvesS4ogCy?dC!xM&x ztqE(F*X68wy-S${%4j8f#SQFLxETqChtH&zer`5lH00hnm)9br5-9{@T!M(Af%mqB zO!q-?){itsAh`>?MD?&^RZb>4Eg-7TD*zDGH2dz_wnZ9j(3J@q^hYF9G2se`OMN;w zp}Q!Akkb2XkS(+7NC6ZszNWBx9_h0xl5Uq)JlV3skrq&IozD3r3FT;Xc%N5gldK|= zrXitL?laQRfu`jQ?-)}?G@ZkP>I52Z7?fw{E+XV-H{#r~Bw)lulfDK+urC#Tc&I1A z38~2~@J`FsJjmMI=lFo0KOA-ah_1ev2O*k)Q*9iHT{cM==K+*}GE?f=!Xi!)kk7#x z%%=no36v6z|E{h+I225qqa2?RDW`*kpjU*DA4fw0guD8C^z`(;d;V;RwsySPO=4mS zhW;3Qzk_~uemec_9<84CoU`@=sGT+UVFIZRvuz(07)gZo(+ir_NQt`|@>`TcP&NMq z=i-=^x|{MUt^xK6#^zaCy#tkPs^i0X(212K!!n@_Y=Ps6I>1NJA~;VHvFdKB>Za%> zT2KtbBvir^APdGr@Yi8#k^=uiNht}w-1~wCU}W4)ut402(*+lVC3oJDy0u+b&6ek& zizr)HBKZ!eNs2)(5=JmA0<1V&gp#C0h-=_OpZ*0V$N(=T;}LTn`hNNjHZn%n%&de- zS6>l+I5oCwvsEL?(WU%R*YL;=FAXwzD0LPEmM`%C(pdFY)E0k1BS zmG@ivp(Z+kEKV=f!Wp{Z4HC=ID5YTKpBDse3()PAE-H0QaR;gd*Et}*liM4u*&;TI z#=W1CX#o;S(XQF%y%5_MnF+9-`%?40G-6IjSbtz!og91!ftoz6>i zj{%?44q>F7#gey#>Yb8%*O7hYjX~b15ID)+E-WVc9vc?>1CSbUy~L#v=EZV8hHaeL zRaY!4Le0szeHz>8SKmtZO%55BD<*LAysYE$AIBTmhlRbofp5e^m53oB&1qD%o248G z8k<7usL_i}^1<5UVT%SsCmq-dm7sNyn*c0XKbh((e?a>DO3XiMRh6hb_yavqdjX?Ec}($%kA+LWLTkgX;6^Z{#b! znZ*q}CPs1}6AQw zrD1a7Lg!^A`=W8O5Ak;48a$o%jAxwkOZ^r9-LG`m)O5Bf>}dhcl_iY#eQ(VZl-hrU zKh-%xd91dG#=*2|K2!{5Ol(%F?P| zXpbHC?DYo){IY0C2G`K+acF#sC4lTZuoESAWLs^)Dc(vs%64@klQn4ZkQQ1()_JhJ zWl@U)!sY4#=e&6$1QrChKBq0$-intM3dJUc99_E22bQ0wik1}rrEK~|M1m_i9z1Uk|2w(%FISNtb zaV4ekDyNbmQcaBwYPIO;FKN+3h(yjTgYQt+Oov>~8AMue*Jcmf3|0s~cDCNBM)gSdV`xAq0W#P&XlvjLZ1ljQI)$kW{3i1Dwq0G$xHNJtdaImp9 zhdcNJ1OC_6aC7#{KV(7C-DvUSd&xg)2aLM_eCa9RG&mq2&69Esr8HqhpP|36d3#e^ zMKX6@91rUS`0Au@=AR5@ZGN5p-^?N5XXmcrm-F*<5TfbD_&<-Ehs*Peq#Z^O`WRGm zM`v#o;oU#Kswyn0IPuP*1>pJetBvnP9q{pf+OL_1zQzpsXwRWpZ-(XlQG5(rXte#% zFvBvdO`~O%@p?P{)pxn&jeqJg3M(PovxPrYfCBEp06*r{!z6MrG0sF{c95IQ_0%U| zU)>fh$z(F9PK^EuCyBI;9`|=tWy>-BpavXKwUj!iU}ul;w+)tCL(>x1yFOMBI3UIy zBwS&(s~!>lW^88&lVGMSY$t~%=EN6xt8C|68E}sH;r8MAXPELg<`hkQH2#(-n;0=% z2NA;VdbW+0L57IeFQ<;`oAAyirJO&itta*wFmp!&*vF!5W575ahCb6#(4rFzxg@wK4WV7`|)Y?NlcUJ*f<~dx5-hEr~w* zZ0~kl3?zhsi6q=UzaM+772}0jy@yG3bV5TXXw9%`y0ic?%)pNP#)UGPFk!@C68+Dv z+q=W54K}UY_~8QTn)VBk@HR$VG0OCofqi#a)K&$_+oRK>y9SClzg72PIe<`{8qeQi z?k7;XP^z5QNrkVrKTc{ad5(`<`_)ECkxzdQLhe{Lt#|&xr0gINVI3g@3x$2Dp@0sc z4LwyV^_m_kapOklC-+_&5uZ z%!aB8nX(mjQ~b1vfO0u5$N=l|>zXGJgADYU=S}2+9&b71frU-v&4I@`fgxTdMBw`* zpgVEY62gww&iC83uO|Uc``ndUIvp|v$t-@lDr8iW5P8I*^kBbswhPgrPJDnqQMWp6yQ8&esvDR^Fwen|k3$~@h(U*ygL<5kI_7wq zz>`kk*r8t_PGEjA%mW7ZXJVKo^8t^;>`CSBic}!BNq=0|DQiv;&LS_ zqUy#FPP|YDSS&jKPNiRhCu?t+wcE5Ku7Ms zXl_>K&LqD>qM*O8oYNa8a5ivYec2YII;I4iF8WCx@8>(^w+b)~w{+Q+4+N`Qw4?wb zc;J2o4Z3khmngZnmz&HOifIFjJ>Uy{`CS4|5Z{4_Dxi(B3ID*1?*sofJP{tPlU!D( zu|ve2zUTwD222!p2-kYv&KV5|Z@ov99S*|I>NCrRw(l zA_(jM{PJ-(-whz#9ge^1XZ&`3zJ6|)>zT@{8ZBuW+za?^oKJFo`vp$qjs^?G%J z3&XJyE=3g=1ljfd*2PTJh+RE-*1To8qhQk{`T^fs{C&cjAhDDQr#rc2JI0rFHes7e z6TAv(xw$(83bSQCsL6!e(TFVhzT2f^1M>}kgl-F~`o(|cqVM=}RpaSi zS!7pHKx~>{-f@?$?}CSg4@HN9`Z1Sr5=9lRL3}fa089w0-Ut1v*DEf1)HjX%@X=Xf zcmeVPeia^-r|AM-R$7#$f}BDAhg#Ef1L+_d%J+&-_Hc_I;pJ*( z$81kZuex~XLkgD(3$FWM^=OlYW>SRXLJ&MarwOR$+asirbn6N}D8{anox$yBxoR^i zBhKQ;xP?3$kT82a@TbTD*sLj%Qzhln4*NM=z!%zjQ#kw zg*b0Pmw!W)x?BKgqQJV`1Ujvn?|fO1yqj*G`xoxYQqVHa{4uvCS2nAf94|2y8lW}# zrmAcz3)pt_1kHIUj^sQ+ZKJ|GQ7^OH?l9fdROFITRT@PloM_r`Z%i~02lH|UC_#oL zzeG+D3#bIM-1RpIZL53|@%CxbaZ6ZGb2tCN7n@iZ`q>nc&EmFP))i)(TV@F))`XHc zY}F6x6y8`R1`u@YuBt&|e1d!+34p!v;w(akw*`G>g_D#AOViNWR?SaX9)$ds46`o* z3j!S18uM;6BC&!cIgh5fi;*d+w*1D$#;$6i{Jmc{TM1o8{xh%;jm8}Y)W!rN^{yon z8z*mN!n5wV%pyDEj(d8inBven!FvV1_=yaLoQnThix-@kr3yBWF|D{e1mM$0Hvsza zhi)o#pg6|aSYe(oeAzd;Y;X+YSk!#({TW;(9t1!5=U$&LEwQs>tPjs~LAg}{1nB;e9M(}u zSzM^vu~3mc)g09HAC*2V2;ku&WR7wuMze^Dm z{X}+U*h(pbwlG~92X>3*+eRhbHSZ+b*8C9ti0IUb?YakyNnwoTQyxa{Zfcw$SK4ly$>GSHwv7+B z*__W=&teMH&0u`t`m$u$%Wu;REk9~g5O9*_M`tR-K7~?>jq>pIAWgd^2%5s^Of9G{ zdp~8Y)=s+zn@BnF006e-kk93lGS!;uPU*XNAq3{Lo`(rjT+r9PXvF7KjH+|tD@=`f zxz#<9TitznM^w|f=kZ!Pbe#ybL(+Sv6jPv7Xw;~L2?r9Rdrzwh$FH#7l80Wls96@|+o24QtEx0R5)j65a3sL`BZa%<%%*fOaGRYruF3jrk4VnTg;{W?r2H+Qw7_4C0~wrPKn;X z$g@ci1%Zi`^cXFpC?j5hYF{MX4Esqk=1}h%Dpc?XwEp`7GP&Lt7mSsei!*u7R}|2y z{mWr{4E@@2RnX*$sL|A{(n~OjC$yHP!3fvg9N2Av-Zo0sTKhWbDe0Fs{KKBhnY2oY z*`PGhz%RIP)>o&SPRlSt3#vg@v+qxbw#|=*SL3j2t+z>z=5k7(k8!P8*CKFaTX*NS zGlK!v8D)}5Ih8akcHYfD{3C~3$v=QW-!X_sXn8i$ySYi{+k?So%6dhF_*pRpREows zL@Sdqrf}wx&yDQ-e-KkXZUG*q_z1X6{5LoAUgd?<|K|vm%rluGi|4t!*4q6gsz!M*UFXO0?%-`L4#|5ORQC71Jui zudhNf;vmQ~K$AUXkTZ4|O*j8oBudb3o2r4uR&`fv^n+L<*N3g9g`INhOQZ}KgvU20Au3VW31*$~rTC*3xVlktV=O9bkEqhX2`?h9K zj7&@guSl2SS`WNof#r7=w=Uo;1qdP`V^&^i#Yi$TGo=`xJ&ISO8>7uN5fd7G>lVqY zmV#tY*EMr%;sc2_*N8yWm;Nnjj8gnp>=>F-^oE^r)#YzQ6|^H|cJXXoNuXM(W}sSB zT^Q&Sw9(hu1R11JDxi*8TwG5nHX<%E>R41!noHL$j7|God;N1{5HkQXRPVH_#tN+= zAr4TK$obM^3)K#S(ihz5%F7Em&&|goIH9uG5RBKF#+C(4c7h*u2$*dbO6hV3+El=j z{N&Q}yAP-Qvhbv-2#VQfpfKX@5-|$i2^HAK^;Y|B%tdrKVYNx;+e^6h_ucK22Cp`^ z704(u@jV)q>kvr@0cYYQ?WwNA}V6-v@%k_P+xcj|0t=+wI;`8y7chLJ~d758dkGOw!p5NU6 z2cKXwwG4M~p=$w(isiU+Rsgy+c7OG;5(vfC2)BoN4kWsQ3j;6(Iz!&b$Acuor3E=8 z|J#D&WdqGS;)}-N5XIS9pJl8nYludJv}TT)<763qVzce{+b67Z?*zF~ktB({lYuv5 zM@-pj_p)1JDKNwKzPdY}38n~iQe!yRz#!Hdot9@7$KNHF&>^RJ{cG$v*V;-NRK-55 zVx*S*C={9VDIEahEKU$z?hu+<5yMyjH5pacj_<1)4JWqN6TaG@f!1 z`403c7B^-{gOiZwk3sge)h5~o^~Ap=FoT;DJSb~%sZb^Ov`(q@zYwYGidj0(KF~V? zi-+@MfjtxD=c8ppj%*SHKp9WmJ^Dc(!$<*Xq2O zS_=j_|C9!Sn7st~ag6Q1T>t57RU83P7pVIP=9F!;>}oe6&HVADf#;k-mg zY9Akvs4_rQEw`?NAs#{@^)KZaY9K{z(M!#h9s8>-XyPaZHdRUQE{1jXM-@rV4i21)4tk-5YO1NnetEf7ma_#tj)Z-W zE{yn{3`F23#s1Q*fD8^7O94quyDUKo3Pp7qZOZOlUD@JlXNhOjh#Ft_e2-I8LzJ?b zuy*vodfr4)(}Mku@8zusu4twYi{Mq}5c30PU;9b2`y?c8+UwzC4tK(F{it16Hp1m! zm;^us<|5ULu|Pb#{3Yp+SW%bo*3^Z!Qoe%uOk=FXa{6JN;sNfA@Xhenq2@v8-Sl zdFHi+aq^doI2kL#+xYx;ebz*Iw;iio!f?brJzIXSb+x+;oOjNyBW76eZ3@JB$Pe&~ zH!a*v$TrOFv_m!~NI4tJWrYI~@GQSnb6<4kH1Io^e^S_cjA8Z9+`MoEuRCrSGrsBJ z7+1`qPHt@S%kx9n0-QQ>$=pIsA2U`jr?MahXu>zos!~sY&wP%g9W+_?QN`)w8mCB_ z75#@~CQ`qb{T;A*T2%l zIArK%hG_Q__IxB31B*J))*)&Zu-AvYVhb01i7pqFg~o+&(J=(XJa2hP?H=A8xs7w3 zW@Tb7gOV^?>$xKP$ILXMHPc`{k0y?)xoI;UT%kUpC6i^bel09H*M~h)I1}v~85g8i zU)Bb4-OgVP#PKWFfE55G6)E5<{&fSn0*t^@p)`PJ?n8oIGg}_vGrRXukK+#ze2h2o z;kaPAb&)glutMi{g>DiVcDPHD=2xQcK*1G_zBf5fL>PZ-$M7Ui2Y7EFoH8%d@t4oW z^I))3b9T$ZFBlUV-v!m%KgG;`IlGY*peMQdZ+%hSptowGmFoe+Yx#hqupQd2?dwGSuu{K_T=ArF5;KJZ)r8i%q4ydK z%q>EX5UX6L7<#mSvk*e^>G8q2AQU}IoG}MGMh|MsjM8X29Z;*@>WSHq2sNf6h;({V zZG5&^Wm9K%*5#<-@n8Zzm0t&UdT&r0F%8fU`E9p zF8Y;lbA~CuHw{BZ*g7vC9K}`+I$br62j7mv+j-`l^S{k_fp`P*|HeI*LPq69ym*Lb z;M7~(w?VmpsbKkIn*e6)kg0?buEm|%-xlbBG(p-R=|}&VC;n*A{FNJW4Qb4rLwU5` zjGzFZRSjSFt|+gt+g;wnQ_9^@hV0WB3|L{z=eBiwej1T=BVy+3F!qE&%#$;x`zbvQ z`DSvuT-c?-9N!vp=CS#^tXZpk7#C^(wLpYec(Yr=Hm~y}zw+azZ~LYb5=)8Qu|!O0 zlo_vYchm8qrcp->lt+2A`}POD#B56W|GRHi=Kq@KIhZ(-&Hhn3|H1ag&=m~c8z$nB z9u_w2)AK$`g<;>)TocEnui=-Xqrf!}Z)noQGE4s0Mt#2Kb>cyX;ON44o3Y0o(SeJy@@MBXV0Bcdh~feDE3pqTCm4Q&(D89A9w1WmN3bc_9Es9 z#QDUgaxe&d-CTt$=5@Lm!&FNB{+z|MkG&K@;Tv#R249rRYPs$%kN>K^5iGVS2nS0H ziQ1}&^AU0c%|_$2U#2d{Fesob-$onzS157&7c)8tCM~1}u-1I)zU-CiT8M>wkGLa$ z;xW9eRx&zm&hK-;&JLc+L%-L3yQWY}&6e)!EF*2K?Y;lJTGZQFVUdn`ufNQjeG@+j zRz$={9khh}!m&jE`<%si;qdh7q3zMcMMKMY$$OLSs(GfVaEybn7JJ?QZw0xhN+mQe+Bx0#*?(ro-!b zOI*))osIix7TH6r3lZ6g>g7~ZLNDdRPZG~!b7Okdy8~PE{NV$0EXd{ z_QSpZFAup82>S+o2aU)IG~568(DAhywGQY;I_agF2<40@N#4P;@2&CydC0CXMq$FB zu2&%kV+AQqX4w4%Q`p;n`LI;CDRcovRvdlC3Rakhh*0blW*u%8dI}-60V==GdiQTUDn$WAc0gCx1C81_C40 zK|#9*5nLf6UA)|R<<%f?jIB%)X(WXfjT5#6VC>@f8@b^+a7aUCUVAV}(Eh<#-)@Dl z;-XO(jkSj&H{(k(M)Ez&bBx%rTG99DO3WqC&{btntWJjS9f1ZkwkfKR{+(i-5p+R{P$ zt&%kZ*iyKq09fCl0-?ZfICInwz(CWb2oFkt5*wGXq40Na(qT3?>8=>?O%~W2QM7VC zyK~1IB!T_oNQb{RSIR(-c{SZu`8H|+3_r@%h3RPY-Iir^t8KVLp;*2$LWIp69#3 zey>^iAFqH`L9l@YfGqG=`J*}wQ^5^6ANMs^o4RM;|w(F2K{su2Ch+2q=GbZJd z5#A$tHwud=K_gkRB7q19R!O)gFN|~h(teN%V;w}A(}-jSmTWv%5wnwuj`>{-`ES>J zRaF+jL_$^vKyIU9VE^3`IS4Bbpv~3#(yHT_o^lZYCQqK+`L}g%vQ5wf2qj9+=P2fja|uUBGrn;nx$C|K?*p+Dc78#0I2e5z)BhV7 zLF4v>cQJ(w@oXqjY`kv)Xi{V)K3YQ-Bk!=ML}YJ4&j{Dw0T+NFSim#x&;$N@o~}b7 z5^^J+t4-P1jd5DJb1!I0A=dMd?~U9Lf|l{lW=UqEle_XH>cKb@fL>;^=N&-WQZ62< zH;Ndv?(Vx!MMD4LQbH+hmKDU|*9NsC#)Xj6>35Wn}}kW z<~;-I+R2F_)gCUL8<_Toy1Qbaf;{#0y70!s?SreIB>GV%N=Ef9qN z#6{A5AZ?ST+gp^gSiWSed>L4@s(U#x_f@f6Gjve>m5Yr6Ag6I7%Zg{~Msk^S2G%N+ zlAeeM9{m`-gK0%_TE^@YBHUq9NWjm7#s?8l$P^X@H6}U=vv|3NlTY!()G008IKik^ z=;d)+E`Gw8G);IWxY0(}<7=VWNUHRp*97Tm_{>VUloRDS4ZHZHP;^NM3v)+>i@A4q zv~L!T$+n^g$j;1J{j2T9#nTqn1&$JiP0Yh%$YV zjRz$B=$y(Or>CHoZ==K@8??7L>LvEC1&lzn<)yzML7CDW#+=JzOJ7}71^;?Po^==K zEDG)RLRGpnsfSp+nV9u2u%^Nj79-9C)R{${r8la>tjI9seuR}g!em_G)+Gu+4kQ}4!~6Ijn&lfE8?n9W**$M{3&-xF#h#z^#$kRjVLA#hx7?IUzpni*KiRhD-0ZI z_$xa&7neHO&>o6XxWGf23`oWJDQ)ROp}Iw`vlhr`%DmpGBipb#|HxLj&vBuH*Al9b zqYNQxZfjVgP4+Gfnmc_E%$gIQzLh~?cn?j9@Os1xjv)--0#L1OH?4p4U&&u6MuY-6E4AYzC}7TesOHctwiv~^+<3~%~td@ z0#N;Bg^|hDwT+7eqy}VV_!XJ+An4$pyHCa=`JgMrtxboi`-tSMA7Q*k*P`1+)8QUp zu&GmliM?f{OYT^LE`MED{S1}ZffTJbkLScZ{p4IzNC4Z9odM>Ua$?o^HcJLFX^8Dg z8xJm-c@vBvZjba5j_b5Q zE1&Kypj?^lA-l=~YzZnzvgrkL{;_2}rQo9>Lxi*n&Zi-v5-<(XiMw4>$@y`tq|?0Xs=2s&eqE6lbrz~LF0jFK(uYF41hN0 z#OgyXgYDOi?660~0+LU6VQxqkUeEy})ECY4jKnHaSPgUm9tEOK|B$An`(A;>3>G7L z`P$9cN|K9E6u+(a)vYeKugU(7i&%5rVyIr}x^QmXsE@HkjM1WB#$+tti2T#keQo=x zvEJ&1o#dwa-P*B-<_g96HIRw<0;m!Pgt{trC=W0Qi$NPH$3<@l5zsH|qQoY8W4hN= zwO>&*ZeFi?&vCglwaW3wf%q`h0^gbj#^Nzio}LW3a#G@iE22OlNfip#HrYYb>`ifG z3J4h2yRB@fs%#4s5lyku_TgSczIF}ty1sbo>-*JEGp!4Gca~#5_yqS_0={OduX$uV zX4=EyxBs>v+lh6P-heos>(zY>4M!0+!l@&M9{DTpyZtJiEY6uSv64qc11c zv_P0IERo)U{c0}B=)zRCd6rGaUjC(hp~%sG@thTfw|23(!I^DJ55({FU_s-(K zg$QTWQ*fg7tWv7vo;RS@5`PERLFFDhWnyzw=VItGRtpK4++i<`M$8f5iDaM5Km(YC zJ5iyTTI(z|ehESDP%l+Ktba(FbHfIb=La0h+Q(Wem=bS$qJp zr4_wR!>dS6=<{D-JKmBUU?!1F7u(AAGa=$V8eC-LwJ@bqkf}<7Y%tr2ENJ-(B5MK1 z;kzTm221xNp!X~w&(#X*tfDwJfc6@ z@{IBN(t(|Oim2QLI@I=-wPT?xNgczXvw<0wDeN}4-^u&4q_N4KEyC$eGWXjM-jhBh z+*va29c_Rg(3CFfo&Tq=WB=d2j+Kpz{lBJY=2Ye+5Y&VeYQTmgu0+C?S(QM*9;Mu5 z?UGB)I;ZAw5PEl%`r+X8up=Q+J#{|_Fbt+u>&HW;W@@D+5IjdKUC02knkcGZ?)W&b zM}2$y{e;v;Z6d}`I&CX6K`9q2YPp}e3~Wh zfI?JUbOR-(8=yvy^`kU$XZJzrnSVy?fGqSzN2ka0>pHZhM=#5#7m;R8a=`gB(EJuh z*}kgjZv74L{rRvq6#8;=tDwcXe*1WLN0&^*knZIK|r^=UOVb z5GLf_=b-f*xwKL)Z!Pu&mN^QJ&elot#|S$Rb{hNdOp=aFm&JlA*=c-UhJOg`id-4= zw0A=6SSfVh`=+vgvdoj}p|?kFnM?2GN(?*gVTW}zs1%6T21O)|Uv01(nPK$-iwp&PU~)^p5hok0hI z0HRM@AL@47Ki>6vw(aV6-v>cmo)4hkHy!#reF8T<0&l76W;b6qctfTb@cTCle!B6~ zDUnm3o=;UR7?Tl}3!gp0qm5TuBFIPFcD>ip)K6Otd(WH&izGFv0T%y32Cf;&Yu+-5CUrEZ{=5ac%v zZmA-vo3-K`EpWkofnO~AxR@ntI+m6kJ$n$Elk$**_6~_Bq%tUkO1z-(h7GqD!d`-} zw@lu+DVVO&re<8S2#($BFIF~e0rJ=B{O%syxtlKjylhOcU%jbQCe1MKqG^tCai8uo zmmd>5fOm`B2xK_%>BJEZZh>=_!2+nhP9YMLAC-|Jgu@Ztm?2G0O_z8|EK0kz8|=&@ z7M$MR%eamzWlP2JXa|x$Au5motH0XLC0g=_Re$dIVODJ?!aLaoSEWUy0T59Rm?I}R zQz(Iz4LFu9RMhbDR74LX$^LGJ&gQm9b${V{ZUABaCP}Z#If9d7%k*sAVXXmAb*9rcL%8^zE_kd$X0)6h&t3e6P`QpmNiIB$s6l+E;zA3SLley;e!vU9OeCl2>nx97Ks|xpUm>9k z5tHGKqs<|8`nqrjo0N~xYPSu81(%Y0=)&hL^C8JNE#KqNY_CuCbVwKo8Xaf206^s@xq0s;Q zEPZs2=^5p)OpG*S>^CX*y(=2`GKB158Zl$dmCU4Q4EBnoW2FsqzD8jj9&5db zqyK6h55r6hpAKVxjKz`<-mm3m5X-jZC*imj(${n7Rsh7Cbc+ORC~f6v<~4EP zqT#m2iQSLq^WF?;*k2Bof0v84vY@t{ZTr!ezl-zc&hChkrUK8JO0|&T_C%C;-kTw9y^xOw*iGn1Ci}&?)h+$vk;4h$?tlL3HA{ zGM3tSG%YU{zTjrQ#OS@*^;+IgnqMdw@#ZcXk_DCjN*ugM{yvC6x(Mkr$v@141v+Qv zbbyFB>~3>M#Xtg`O(Kk{XiOybT_o~d3C+bD`anjNlo5Nv$O#whwUh3t_g+B)7KNK8 zf8t1-5orTb&BkXF2#hOY+<}57!#z_J?}vOpc2ia6)rgd$L>!MfL9A-;rRr> zLwGczOTb1E6W9#R-TcOD1D@?sqs+Dxb!UFPT6=?PuZ)hw-R2^?16eK7hHoGTpc#&) z+&XAurtVy?{8QK_T53-UgwM5$a-9E`bH{*A9Ep`52W9?F%H_F#3mN3ZwC7gkCDYgj0RqA z>&qSm^Wxb9MN;4Iucw7AaAzkJLyh7 zC%wI4f7ErI3`zPYS~el|`8-Y`<^W0Tk$elDVGL;MCRFzQxBn(foGndugYOl>Prp1PjL)@R9uaNW}Vwg8)1B*5xM zV!);ig}9?bK#G2XJeE?`_Tc9I7_|n*6=7?V!^qitii;-BSg-wDZ@A*7HX}_d;i+!r z?&)QZu*mVVinBPpLzE6l6F)!Up>hnf0HT>h_@u6M?(*{T-O~r?ptTZZrbE=^ve-(@ zN!l#xgjPj?UssG-`kV&Koa7q%W?qO3_0{IzMQrEUtfhKp4RJyJ1d(qpB2 zLa9NU8z?|VoGix`qPYe3Q^7L)5uU-K@B&#CqCg$F;lMItdF&|<{qR>36zF%t4TJ_r zjhJ93$GSyJ%wPlJWSo;ujrao=EDsPNea;+#oCJV)#~O+YLkS6czYBZFYUr=}=k&op z;|J9@Y7Or~lSjqrzZZv(Viyey9gwmAeUv5~!dTk7X;gdodxX@_HuuoT@z4nIZ9^XX zCZBJQbA94L(mC$z_8)CtIPCK%@2IO2f@x)5v+PD?sH162hKyDyW-@_?= zljkeWbdGvAvqUF{=GFGuz+=nXQ&DCxh*JNel&bT5Sm_jO<;8q~Di0bV4VXBsCTFA^ zR;X1{9*E1utX0}nGx^-hldC5>bUHJLFK$p0L^L3iNss>e+H9d>jHl6U7s3)8unCAn zBScWww`q6w?WtXCG(z!>Izjovp<837YffNz>wNMU>Yl~7udal+|Bp^_%UF08(qayC zge|xGF`!DQA><#Rr9#ze14xI9JuzEUH4+|qpsjdYbr@ZKm#bYGAvP4Rx{N-UZAP3W z^##1;@iQ#yWbxVVeEi|5Z=Jfk|9Iqak>1V7v8hpRNKj*MUg~ZTrfrF-J#qIgkVXhC z{R%B1Ldec?-(#8DZP~6N?=Bv0$tZY@feZAl!c9N8pZz8blimpylGOa@mE#rK=#3tH zM%F|sSZ`d6CT(xLu^5nm6KbBOOg&P+(4Qy8~P3(fa7*6xqt_N;kZg9i7 zH_)}UolFTocdqFtuPRZ!H2Sr{`obL>4&#qz)m@F5aCn7X(mnjXtqYH`mtOFVnynnq z9hEttE*SZN8p#p+)m^ML|--0KTt5X~w*xypV^F`*`=m1!y z_?x=#=!?P~gZaSZyb~m*xSah>OLqOHiisXI-j$?;iDKbcL3~aRGVpuRh&l~zQz(u= z!#d%Y31OS`mOUK5lq^&?bjXGRaRNAuKTYK|PD#@4$!b*KoMU6l-O)v!E0}C@o}Rz} z=rErY+pe}{<8lJ+Pxr^tYAuusPa9x|hu&MLKd)IRQPmO>EUFt_j;M9xl3hLWsJ=r> z;s>Y)sah5XOP<;q?QClDo1r2@PgF~OV08*c+^mTMelCzc+40gZHCRzmBOxIb{0_Q+ zr{?`w63AEyH0$ii<&+H)gs_#Ed*|q)`YnmaTl0EY1|2*xMk%80nOs-%qMo$VzfhKk0rChkLE<*yGp~UI$ACHbqzzYsAK&y8!)~U zztAU2Pk4=raO+q?{Y8hF`2=t#xPXha>TEY-INyQ9j_38dcUTVQh!*y%rC2yb(5#{= zQop&@_$MizAe$i;D$dn+X~_HuZfCvZUX0VDcX^4xX37XVItaafF%hurRevm%yc&Hc zE#Q#nag(IIw|I9PFXiWZ<^q<$vZ1;K8%!v(FHw4LoJ5eB5Ad$fi~w9hRLs&aJsPs| zVGg|_b-fy_M$xXdnS1|pH}};gXRl=-1THbkja(VA%Fy7=OWc<)Y9kl1Q5s(&6EidW z0ToULawmDNy;W&Lz(KITq+kkRSG;Iqf6xiXFp}(TXuz}#JP&;r{dyjHE;ZSiD(_gE zG^(^TTL^Vh;8u)lqypFzNTcgE8>mghQukHxJ|{YMzS0P9Hcr&4-$kjINfXg4-T6z9l5$J0JUi zA>ETqBTo(gGg__{|BIs|mLNJYNz&_XWU4|NODhnKE56Nmg#2AuR5h+@>6DIM0r4Xix*h_jgW~O6S zGCu=i3{KUPl%5=@0bYqS9!{B-rCwXHDAg#HT%eUw`o8&-^mG+qE^67lqY^hs?gHPF zW7LGlg}ucuko0QPAl+5hL^`BHXJRjM>GtXjwFjsWgoD=eU{^6JVYMd}mkEdD)i$rz zgGg2Do>2(5q80D^s<&EbU?>cmM99>DImpddA&fwqc5}zEFbbz6?S^6~7NUBT?HnQ~ zZ4DiLx_JN7GOi7NDue?z_~=&7WbvR1h0>!VVu+_yRiC#n$G8^3H-?cLDSl;qhM92u z0t*=W1^+jnZZiDm{{ExkVRi(o9Bl;UC17-7RS?-u0!sN`DQ`i99fDI;Z4y-N+wF*jB07Obn4q6TY}mK&S_Gt z%5ggFm@+-|r#f6|!4o*Vq-F5uL8QH^c(HBW`+c#hEUDjE+D$8hHDxU+0eA7mv;)x7 zX-C$Dixo0QmAd;ovLlT(IbVB?lNe*xv;Qn`TChK-0=_5G+B~DSE$C&Yce+Hw~4MDxF`-7TFkT>I4Dk0|nSGjBHChx+f?x@V^k-QZB+GQb_;cpd5op zeTlT?c%YnY+=!e7)G4cRm=4Kf*Ogm z4ps#B4A^2&?>#S5Po}A%E`xM%8oiF(4>31BH)(sNz|^OHt$@25bJyFm-37mQv$Gj< z4tHP2+rug(P;HH&B&@6~{2<0z|E6GM&?zy)sa+G-TR+TBcYynSF6c09Nm)>;{4gY< zydJ?@XaUn=Nho8?PA9MDMGmYQRNuir-Q{+dyVvLOVQ9Rvi=>6iE&tQSO!_|)~qC%9~wHUvIvFH zfkc@f70d)jWI!&%byMPpFSsUCMS@0R{nO33FqPQBfFo~p>XVV4eBrc`6s`a+{qf7R zy4)GRTdwqP^NIQGNZ6N6#xd$kk*D^uW+E6d-4w#Y@(^;Nt_&FG7Me2;W_k%BFC?)% z?frW~Jk_eOOh_}-j=KD<$%@xPBNZh2Tyn#!iz)%k zz24jdI{;+QFD{;ES{uYN_R*5CeI3kA8&IJ$5KCuQJ=tr_xtC#@%qv`7MlPIVy#)$E zs9}wn90M%fiZ; z*8|?|($+p)+q^jas@ z?1aUwyMnsIB?|v!z}pO4r11O1(T%E5?6Z*xht)%xCJNMz!UmNYSV@ApW6~63HXV+j z(q&8*kvn!vQvo#z&skzM_Wo!a1iq3QL;xreL`2|CD(i?q{qp88M=3*;IC+Y23@B=} zTjNknQ&sFTT&^txF6a8VNodx8#{ESLiM{k)lpfx{!xa{AEZcIegn_-%zYd4VT+zP@ zxD@t{=s>6sHLS}ODtO4y5V~i}9vUq-uwtZ*^Ei*_hFJ}MT|FB%McE1OGvnqHvjN6B znkvrfbG&3h0WvXKQRk6TOQMMm#8YNN&%S{gO(@1)5oqvK%AFUHuI*up1M_DrWF8Fk z?Om2ID(dFW4$}Cyio{v@P}mZY4ni#yh}A0zkk$&$>z51`ftvX9Az+|a>~$bn&`q|a zlC=z0SzuPU*;7xKZxw}ZIka4K`2Z=UXV&n+-wi4-`h%h%e@wu?z`A~O_}6ZZQs|I?RMnz)%N!a2Kc4Na8lwZ^uHW?xk5CkX+%hG_z zo^6x;awNQ5@wmt&f;uZo#Med=A+q(-p2g=wvK=)d$C9$@`eGb&aP+>Eh|iU^I2% zegc6#MRSBE&K<$4!b;)%lLz1q`*S*tf)LZaamf#Kcc8J|n`zNul^JW&yR!3+!0{-n zNbHPy#!m52MBj%8ad%fKmtnt6D-Fjx#?5g^!pKgPHYaE7T5!?e+)Moq+m>T215j(8 zNLv-Oh$eUAs75#6bk)jLKmjCJH=Uu+19_Thahxz)0c%>?E~35+x9FN10a@_ zWVuvtwWz#+5AfBhP6|tCK;s>t+4;^&Sz)hJMgRQdR+apgsF1UzjXNwBOXyL44zxtf z;#HiTy=<}wXa&J#Zu#BU!Y0S&WuHmzN>+<;8BQNdmMOapy?Ft}4a|9jxD!TW zPtEAem|zs=4-~Q2YXUHH*EPg9ehAA?A0pyJtJu{!Nw4fLqRIT@%uCMJ70KRX@ZQp> zIBx*E<4~zWuC(x*f z_M+>@&w%-_E-IkqBV}rY9!hr2-H+5I(b3-Qo=OM7Jfk z=Cu*@#ykyPhf9Ia0eQV?@F1`5EW*(fDCa7im8hNitApq|W5!3mjC2rxV-scnBL$Aw z*J%xD_XChJ1*#KXZQaqzn?!;_tfzbJ-bjU0ZT8H#=4+ek?yb={?(l6&=+o=9g zq}lu;lrm@elEPs)8Hg3jxKwKA=x^C-$%w6!1JS+J=+-L{fwSQ-rEMpIgXDP2qn{F! zY=$%@gM)DCAVMFix-NV(Jtud)465p~Ma9TMVdDRS!7 z3T}|?Ww1YZ&zlC3L_Rs&NZR+KMTqW37=cJ}BNs5~kEY#{qduoY4Jn$?XwZ)KcT}4h zDeW5_fGm_cdtxq`g@Fu>JwB?0;X7^jN1)~sbOPRJy{l^ahP^rXn;}rxzdCS%{RX0P z(hmq88nvpZ$1a{rXTc41Ov%4=-y}oQno~?L70F%^7`aTDX&%U1Q5g7*Q)&w5PH&IO zi^0TQWm?1%Ecq3+5saI*-;_-v%Us;Z#mOa~+CcZuaZbgT>0Ss!rM~aK-pRw5Dnuy{ zOAbZw5)|BYgjbU`Rbg%rkFS*ruFhn8s|ip!i(}QMn(u&05kYDOjnVx@U1DpSn-Z?B zY#<=V^FnrfFyb&OizUy8iSU!^lD6KVlVwKmgpxWu5K+xn^eaPyPzDt9&vu%)CrK7j z-=Q(>=xBQ8R!ehFaMn{1Gh>A^~NfM!hGgA=2U~o6I~veXt@dvQrZw++jTCv+*JZQx9*-jSFh5sdHh7Mej6HrqZ$jJR9e#}n@ zUjAZDezxSONRi{?`NFE+Y;{8;NN>4i1FZ1%$TyT*be~y)W#Pw`3?K&Jo>J0fB( zGtJPiIi6K5${%>1&U}_8kZg61$$8+0U@{Tq1XSWk%BM~=5&jIl^M&QuKRGH#N+@(r zN42${gF6r{e{YDWfG=FC6P83yG_+@D#T?{gky(YbtcwqX0#jY@qf7kG;g60K(J2~2 zwD4}Ae5~oC#F%Hi+WP4KjI!sz>FjN>ez{`Az**h6_8AwQq6YtB@7ECuZcTIFRRXa`9b zBC@Eo7|&ln_4$4x`g?3F(QQLI-BWk_R9xtp)Be2>v%!(y)`>eDv79bsv7EZM$;Lfs?!dpsY60#z zmz2QpUqxU0S3NsfS>J$LpI0?PWMZgd+F7m}{kdo%_eC~h%$hm-rprz4O9QU*EoJiH z-IYv`&%gKxCojrdOX0QSS6=NpS zPt(=f>S0)=*JgNHwvzR8t5Uh;=I%$DbQ~7lYW6weCR;RQXcU005I4Mlf{lg7BhBP@ zx&TPOx)0VZ9EX2m^2+`h=1q-|we2bzzpzHQ8L$CI702%1WzfOF8I;0IJyYr@luJ;* z7dsL*Fd5vqSW$tzTtqa)<(~H&KFuC5$*v;nVwN^hXqP-rjJO6I%IKdMD z6%)I}ZRBiimh=EZP5ZwBpr0L50|stbNy3L{kK>@}1_mx{2&9rB7L&d$OAtL!d2Srp z%GWu_5z2}?1fHbaEP33T{D0^7%BPlUcGoU-P=UZwM~ajkY?d0~Hkl9CmBwvRYXreG zuC$fRvegH1w(Zx_?LW>y&4WQ39A*O1<;%`q$#kZ?#FZ1S5@FSM^&PRIRw;!H1RXN&wx_{CU&?XZyQ z_b3cM$5s#d4{$g4oX-DMc(MJL%*D#Z%$4ZcE&;$@L7p;e76_1=(_$H~`0yoj@smWi z?Blo`2MGWI1Iy5nX_RE>>Zq@R_`1pd$k-xRkJ>^E_NQv?jP=OjX8mxGg~nC>Vf@Oj zksy>H9HFZ`5_oueeYA9T9J^daE^SLWsCX%K_lr(17`&}RPT>00trZ)?#n=4~^ih0y zbpiPJu8s>~GQGEJm?GKS3#((;`Hep1(-aOPX_VayX%|_$fiz{aY}uxX zrXOGkhn%3P6O*85h`)obp=pD-<&1TpRRj0yIZ5j_{hh|YqUyk?}WbG)W!mlIF=&*p}!rxO95Zp?lb>`jKolALQ zVPnlHPLvaM@K5rgDQrovC8HwNt_00CTQ8r$O8Kx}vYG0wyKe#WJk?ES?B`g0cjt&N z|A8k(yHNONVf(Z`W=s&{lSVOJ69pi_ zy&162y-uc_#xUjUUNh02P5{YHJPNOq9kodIx2X3aH?=|)#+KThvDtVUc45jxC>)jI zg5OZ2bvMj0;kX0p9sMiTaQPobb%*E3r=Ek;e6Yk*($?Y8AcWCzoF{^M!xRu7pC<>KM8MSxkxcGBWgd&wkFql%pndUm|Iw;-jY6Fvc8`T;oC| zm~(tO`)1wrPAp!B+I3DrL=puqi%ycxtldYGA#(1kjLtcMLo?&@5df~Aez|-$$1Cxx z6sE91K3V!#C+$#>VUii?qMVBW;suB|rDiu9pKCNx&xjJ>t-1GCmp1mcC zt4tUbirofKlOcl8hVl2;kUb(Z*dAQu!P=kdS!px7uXhTt!MCMX{oXWhX80iU{hv@; z@-DUvZl=7a#`8xbXU98BxD;w}%ATmT)5Er(nX^pRSEsw!JGa7zNc#n*mvfoaHcT|3 zeVN*jOXYa)E?;I73IzZN-tfmg-|~%X)mYfd@$(9#Q?+q`mdkGc{7T=<1P@pbS`f9% z>zBwkveB%-IqfHDzTc0)Cuo?YH=4_*ldnfQ71V4XoIwpEWVUHuNErc%T+s1g>KruI z#!$Z(ghiVUnrc7j@ZxGeIgSo4-_1)G9{!g{TYAkk=FnYY{3D8A4AR|hf?&C8l?-XJ2wC?qr7s70UD}$5A z)0(CG0aIpLwG}{}w^zHr0hC6n2D~Cj`91qg&Xqo&p@W(J4ewHfZV!;EDKnJ&O3!g{c>4ZT~SLd+x0#{Zf+`YYxLZC?;n!!zR*Y z0E)@$_W2+C%|v{@n+xC@6aVMz^iN|n!%b43L#9~Bp?1Kh%B4&cU7A$)fd{D_MT5cE4FC@xYIIcQe%56HEtRnWEO#}R|g$5thX$Iii zYW<$Dk1p*-q%J6s9aPgE=78Q5YVUXcv2B<>qDC9?R1O4zZNXaeHyn?PJ=LFH#2wi*fKbgULpD=U>zOn!uC^5=gM)?IIOr zj1x-k)AL4s7`nS7)2BED4S6?zqN|lzs;f)HY)HU0<(!IOBr#BMP)~e_14&eAwx6S6 zE)ff}ph!Gjw~s~*?5*#vS?{J_&L5|4nne1ll(#A|G7MkEz{2cBpx0saKb~D;A_iC( zOO=`_>3l%+K&f2C39ZEWL69m1_9#}=63{z?QIV!WLlRYgI6lEJE zRZ37zkfdG6bj1%Avai~+%SK87ta!L@H6gPuR0Nb8xkcz_} zIvBLKn~vk>qM+K0^G=tjdNb^E!cuL^Ad;eSJUlF#oeWGpTS&2<(N4l>=TLmd*G;SH zsOKQq*Tjz~&T(+Vs74B+^!EngY+MneO7`cXK;e>~5^dy~_F+B_XD4S8Tr#4=r7a*& z$bIxM=>@C0rh4^f8~z9ts+S7oNKqBeFXMuJYF7fb{h1>CU#&Y#P*g2QWgEdbl}82i zth0x7Jw-$qio}vu?a>LNqurjvE({ynx@@}sow+L$fgk`llp8^c;txfEXIhRSn#U7j zBEGMF=U71&SP)vm94fIUVFuY%^#-`zZ)D~ai2?z^8=m%NronC@PcrN+D-!qcRJ-Bt zw8ThY4px97jA;YK6=qZRBNjSmE?t35HTV07B)z8}?@>Lm!bKQwX@0HpHR3~?xq-5o zD|qKQgz)W3$z-2Uh)QR8=JrvN+hf8!pV?*+!1Kegs}eE5Yt7GyvE5IcF$1K0QLjdy zjTWl^h+UwR#u8JI=f6cT_8Odv)@x3PJCxLHjB%+%n}(|@|MoDK zW>&~W?`%aGiuOQGz*Yp4jN-Z!2f~HM+8oMgxRlv?A!oN;N!=N$(s6YQc=wkYa)TUM zK)F^_{M+tEPP3fLC(En5um`xnhB<-U z`I6DBvxkXEeaPVI!83=jntE|n9!6@CH}%e-3$N*j={_(id7C`D%2 zkVm0?K*9-MIdnw)+fGUI*#_P*U5>`TAFwo@##sTtiqfMXruLR~{8?(o?EEDtYJ4ax zkcG3Kf9oetE{JsP$?-|^WDwWnj`p6{rT!&B7~H*GxD(*@CBd%P%vATzCl>rt>GWl0 zY==Nq9Oo&QA1`T~6%N?-9sDbDPG%e`&(faTTy@A~M4=$UaH=QyN@RsQMw~Y=BR9D_ zl1hBd)FI=KNM*ou`_MwTx6%FWy(~}_7Xvg!rQ8n_j`6B<(zx*4+j3hF^eN2*a&;j; zEl9iKi%}s^Dr=8smu0g+J88)LYDu75${D5dW-W6<_dV~u3Qcm3wDpbPz4TR zotv7j^Adaa28EOJ)&d|4v z64-6#mx`ph#B@e^mu3*rO+G{*Tx#HhD}DfHzZ#~|Yq$l?E%;_OWSFhCI!z_$+a2PU>LSLkR4sLAxF8@7{C=!vu25f+DdmibkC%LOWff z@Z_xi1jk(@xzTYeG%Ty2?((mwF3%vO%nFB&{kh-C3~h)tBcv?w3IW&>P}DHabOUOh z$Z8FWml7v78Xo=Af_gi1xQaDz6DL9&Fe5CU?*aD$W=hN!!Tw^Y3k{e(-yd5YoT)cE z|9}F^EEh#nHQTzMUsE-Ab;nV-$oB`4ga@p9SdxRf489%@-=VJ>*d>)IZ+Ax4lqwTropX_JOY`^#zy)U z0|41sgyzG^(Y}-vX!Kj&3Dp+zG+8Y)r)}Qp^K0%?bTkciJ^-J>Jv?fbyzjzVba)K!LJmk-HY8>1BETtX^F)6^(j`&eOHPPWMn%%Rc z3XAEW;OSSIqF-zNYz1ba67f({A3*W-k4jneZLtI*jyr&Hpb`ej_A3~Gmkjg6zL~%J zwH*A4&B;`@sZEm}s55Z&9k(pW#~Y-wZnPQUkcd69HEYhOj3cGi*cDJtyb!5QgMr|V zDk64nm}c38Ucx-nG;j<0dWN9|zplA-3?M_*L3*6D z++6hf#JO!0yS$B?!%=thFv=6P4-ffkw;uFhPgDg>TD>3*2^0w99025$M`9Rai!n6< zFHDm+#*qc|Y!QGeIJn`dsyp-R(?6*p!rl;EpN_CSy4Ox6)y@feeiBt@8QO{j44dVE z&bTaeQaLCe@ySzni~I}d1^|a$rngziFVKuVL98p6hbpJ+0XhI}_mq;3kDB4CsgCH< zj3>yeb?rMijP1~++8Pm!;bq9zAgDn!nKmlu{Kj8lOfPg{F+>ojqm1FV2Ip%rpy?9kgN0VFTLakWz2=@WA!W%b*L{&+OC58x#RPz|^=l&NJ4pywHe7vaKb z+{UUJ(Hg)fCV+5!0I|S>3`y)j9e=6$-U??Rh!z=HW=0`Y-8O-NgNTXu^A0Oq8v5QB z7c<`@6mB}uiPIV}e>}n9GXX%C@)rFqMdt6!*gXHPgJ{|c0g`DSNwTJK8{gRi8)#$V z3O~X2`>0QWfc$66Cd9qB@=*dWfFN zX1l=RFbG6|aw$6+w}k3tDq@H`K8%$`CU}tE(WB;Z%v~YN$)(3gLC=(>*@dZ{TmgR4 zim`-H>wo?H0NgmSk%28K>kf$%;z@NF`mgOg?;s zLL*;WJ#<@uhS5=~d^>VyyA{pk-f(`suCg_JQUe4H*vjbw5$ZpqxbQ#>_u^TKf)0r) z7rEWqGu3(}1y&ksyP@o=a2d6esTPvJXu|G1Jm@U?fDp2;bt5ltXN~B5Q2u%xk?5^G z1(G-c$iuZ(n|tfD`I*EMVjzO4tYTc_X)S`WEJ$)!MyD9IQpHda<>+egu)Ag2lRwS* zuMQ3HQ2WMaxJoGGLPQB zrW7)*JZ>MR)IG$GQfb9f@iq&LgF!xH6o-?oD`*m}Jx@_h?{WPJWoGt4E8>La%F>g} zMfBOaO&&}^>saPlaF?Pt(EOi3%I0f_L!yikpxMQEpWqFvHzJ`vtHn4clePH1D65bZFMAR+0r3W15_Q;HwP%QiVi~^X==8AZ+55U<*V=+^e5ZzI zTr{};%G;aL4v2+mR2-mfDcv|lgx?tE_V9c$t`AcE$3 z9GGo{TBeQ>h=%)0I4Imbk8 z4f3?0?0X2yR>Y+D6OatLs+@8VbBN?qMvEY_%k8Tewf`|RHf9@PEn9WPOX{%NtGOT@ zaPU24r;v~v7;wT0F#*lD9P9RD*j;O5Yf91Ql?6!{L=aDa4H#)@y0un?t*r@ zk|}^(2-YjeDp%1wjsO%p-!+<5J*H|=pL>7h*6DvHM?aDT+EWb$<$+jQr;h_0p-jiier4Sz1fETsXjrrl2)>fNSiE&% z5=&J$!=c82@0UvHW+$FqNX!VZ-t;I650M6_UP`YCCMFbam0dzSEeQv`Sde3_3CDoe}QU9g+3>oYm@gC7| zqIj<7l=}6YkuP!CpRAqi87hiVz=x;FS1)=;q#sIK&kfe1(j;*N2J~E zN8%Xt3&)$oVejxK1U67Ba?yXY-7%Ky)h(hWQ1)mnRL$4R%vF40w}lG($n?yPq4;P( zfK__|aqO=R_UJXrue0wJO}jr6;i0kUa+BN^<5LWN4$zjSW0YP){_<^lJs?OudOch` zB-W7RUr4M6Kd~GVYi@{GpT?r!Tu%OV7XSSpgAG<_Wo~41baG{3Z3>gd(GdhPIWaSn z+tEgUkJLsIzR!F45hFf9#F~D8$$bLCiB*n+Bdc5@jTD(#!}ypPFSaMk=GR}fyQ|tW z_D+B!Iw7%=r|qt;m#3bp>JJN6@C6J1(%;qg?8DiI1s|T_pVfBpzBbxZIxI7vjO?e_*|TQU~jWEW8r%&gIqF{in|#zq)+(IxN(( zP?nqYgDk=`uHhMT>DiCJym;~K^7X~j@RKoxu>zMr`NzwrKZM897g8vTpTBtZ{MqXt zqZ~#rI4```BFJ$ryepg&i*sQ?y0ob(2B8%%m=qenvTo{CH9UvkHRtJh^ESySwZ^r7 zFPh<*FRZh;?y8Cc94hXd3sxvN!8s2y$G2~Xw{2nQWY>dk3ah<9JydPi?8?n>Tu`P^ z9@nk!ZX-kD~s#jHf=hApu_g-D#^f=lc<5q!9+qAOgofp8;>dr zt=ZvG;hE%gg04;i2~|i%)~tIJNYmzj>#|FmTczp!>bLY!#a-4xQ~>Bsc#m?vkIG__ z3G}cks#Ji}N&MoQ8J+H`Z~E@L@B?@TD8yOt3|>UX;6?g~Ay z(h}?(AFpm#n`$_ja0Q$ewRN+uSLqPOXk5JxkKBQD(RiE{%qn-cV>De?zu63bx|Sfi zmiWnfH@pwer1Pf?{qpZmlBG0$wA@`K8I|x9SZN)&pCeVzJ49DRr5Xq~8I&pt&|&yZ z%xLvhi)z)5;ckQd6~sFec%t&nW-u(6h%<)bC->onW=4|xtoCj6KZrBq-HElR6I1A{ zlQ)~0bFHFC+)L@k&Iee+nV?mF_4T@H)81S$al!%X-Me8S1A)kJ`>qOLA~!3e0I-g$shH^e>!zy)cMzuVmQH!SDWjKwMy2w&RbPD^9Qs@`(6m*6RuQVo zzAsm4y%z?(>V32}WC5e#;mF!@#@d$yk^@XhGGVof?hgoPN#tF zehD&!m$+@p5WD~d&BmQLaFiS=>_ByDMs<%j$t?p`(wT1J*#T%BeY=GSZnlGP;MW#q zD_5(k>nJWL^Y%^JOn?P{PHE)GV@3`W&%sTIEipcb{``a3tfVXjoR0iucVri<$u6XR zBS`(970m!ymT`QwtA9@@E(^v-$|?J#1}8|3Ws6Yayf+g!^pr-y3u7vScvN26V>2i- zV}_A=gH#Eix#JVhgQL5{*CCWatvZMDXR5?VHs`h)yqp8dgsiE5qPZ{QhVTIR1*MM5 z*AFoj%FHk*@jyPo&!^M_kjNFK9!ya{4LMmgMc`l^>40Q8Tz;Jr3dE%$O7UBLm2lO9 zemSKCbVZlCGe{PegT#~2&T+Q}+Q+ESV0=HA7o_-yf5_k;DWF=)=Vf}#tqX;DZ9`urOuo8uo z`MX!O3x{=3=RhMh*D(Hxu70@4pa42+E^)KcqPUgRUDtJ z;sTc`3Xx0Hjf7|-S?_RpL|-EaXHGdi6n_(^A02V*^iZ~C#**p}5m*dY& zUCQ;6({8uXG7$2D3-Ww|L^np{&-70{;&FtgK%Y^c+iKgiw+V2Rv-tW=-LF&FnM`3S zc$(tQ0gp0&6PzA>c{bbj>$a*0_zdoLl5=w?ag`YKatz5VR9I-AXHPThXH(v9Oy>Ph zo~D&vdVN}kbOy~xH5rRXu;> zIQnSj{E~&*gd#2RXaG&fdznW^ZxcY;iRaYYgoY-6Xm5muP~SI^S11tKixDxnO+E)T zGKowSL`$L|o1|`t4XGpwy=<$GR5~iC@-v@X$G8L7fOK(^A~)pX2H;Sg?h`~8opxma z&m{vEA%}KSSR1-BayaurSLPzX<~Eix8Zy)@|w^lB3^^N8%T{V zw@-Fg8_Z!mRCgFA5Vx6hdFsApDrW7Niam_33QB^MIm&l0sqD9s)Qvy^pLYHjQo!nr z;S6LD3TKLhxvbR3MPk$!#P*wz%ApuP|NJw7sTpyu7Q1EIn!^qdphw7` z;ut+xrU+f%?pJ;4cno|ZcOxL#6YX`Ja?oou z9jM+xsBH;SGNk1g+4A6Hf4ce-%7 zA&ig#0vdLj-z0-VHbC(b972F_KsY@Ht>(>)ChBJ2rQJ-9(zYtQX4fqrd>6BS2cX|L zdw{$?luVK_Kgog>G9VZ=wt9DT_;Mbn`z<$@& z?{?A26!@mezP&Cn;c~(7>9-d@MF8gpO3ctoN*?*OzW=_ueV9H2yhTu;penp2Rlw3s zwM*h?Q-lc*iZiRb-G2Kkc+c*CsvBN1z@l{?B_K}yny?e}%BiaR79K7i{B77vK(Xe0 z=tfBNgW2t>)tmpTslHH^BFsHB|0=3Xad)Un&`VO~ghL6a6$4C-8a)@g6s5+}+@Ol> z;qXw?#AzL~pp&`ry(%LnLQHYe`*ImIe-C+I?)=x--epo9Xa2xxN5Fl5Reem*HJaADg*UAP6hyuVusw$WJ&3nC`8DX05#p zNKN{p+KsbnK?#&dLN0ZGT_*O+<;73;61_5>;&5)lwAtsvKpyhALCT5uh2g@;`|7?f zH}&tCIe>S1n#a!N;#IPr2=hlbX~@Hgam%>@QgmysC5fzG70a?6~P%BnF{KZ#geO zl+rbuvW3{|(_mw`0>TdwbGdw)2x___AUayfJG z{q_#xA&m4vOu<97`6rg=#uTB^DL^hK2I3L<y zxJ|uvX~&)~!~Gyi8&6-S^LlMi=3ic2j-xV!W3HW8EYvv=&(K@>-{bO7I;x!*xUu75 zA1GUYhPZtB!yI{mxB^Z<$^LDO2`8PL(tbC`T*3e&GZ!ics5fBpP+`@yEs+0w!6{$$ zij{jPn91_}`aC({fUV;kRkb&Dtfpaimea|Inri9v#FntyWD-+i!<5O9AGN7A32kYT zJ8A_|IL(W&MG1sm<`!i<#rU3A6JtC)_2=4XeqV>PA4 zLAPY9w+#-zL*IZTyGg?ZP_O{Tt0}^dqCzN&irGoq-8WCZ8-)Rv7C<2f0u;$M1OQh| zeVqhl#R9_6hR)3RzP5q7!NB(6lE4rLiNnKzZD>1zSztK`zc?2G`2l7ICW?4!ER{)r z!{F~G!3a|{#cA3roHgn^Nkv7NtA9i0mPA=woOYuCGy5l6#56{DtDMD&7@X zN;rj*x#>A)_xk?Xj}KF9^W3iICTT=KI(5wX!(C{4{c(C7yd7*Esx^wnG$1e_Z(?c+GdD6ZleFMNf8ANzZX3xF%`>wf zLHNmDtlE9QAWv&q#tMNWM@x8ZfWU$pjiiamq0EaFB|o3)TlJ7LqO66DAXx(|qt(-0 zed^Syi$9MkVPoq5q@UGd^m+7o%)(m!Q7y)=CZm_&LfmPbTN5$NpDZ6K%Lozj}N2`s7!?EGeOi zxwL%t#;-9$;KqE)*}IeTpZ&5>L}hZp%xMi6R5{t_0aFa8ofW=az)1boa7!*W@FcUY=#0?X|;g@wz9Vfpy+XOKLc%&;%p@IA9cYV^hODy%W0sLOUwpV!qz ze2*l`;$_tZ9?G-3tLck$fYml1Flz&HV7!vfpsDcSe{XMUwOK_|IpNMp+#4U@@uN1M zP+eV2Ul4ql&ZeEVVJ|1jDJ1DlFyTmWNAynE9Z$~VjTUmE&ETB9d6f* zokH@Q0IS)$4nS~4n6?~218O}>)Z$7W0xek#X<1k_Yu)^-P9`vmDSrsc!Ot(Yf38>Q zvBoNef3VM@0h$Pku@O*Igd3MX-!8%~2(ALuMcieS)E z$_&r~zb>Q@v_}d77$7MYON5UyG-{pPM7hZTf6k&bfIB2}8lQBTdiG4^ zf141LAk$8w7B)pjY>BE>U8nff5ZHL(O;A>Zhyd}>9 zAS`?Da0>#Xk{|T7Z5Bz{)aCQQm&gRQbK`H>E}G{ zyUhHKL#nGG3!>^GIyU5;jLv4eYGYLg6Hu2-TiC;XKjQ-78pLoq+jq zdhnGv+{}_)9r}Igf0|@Lf14r;SS1RHRpM2>sZw-GjsCxhI?bT_>1PXG^yBn>vJddo zU0Wdin8Nqjd>ip#K0(Mw{VpJZ;@h_C`ZAWi;2={wP<+7Dc8YW~gUQk&%m<=mpuGH)f1=q-m1E{<;XG8X z&f4qf6Q~{-7QrYqs`Lh{dUlzr2PJI3hw8)<@&PK|y=26|ccoeEnRvUZzckD3I!3rO zzHZ1yH7!)kvpKYPc}l?@zIO0!@I|a0zy+FNt9($AwBdagDZ0<1DB7HNBll`KPi}IQkJC%@Fg#c~eLpY{dg@f^$2?YoI$k(@^4Cv81(eoK%C1))eET}S-B0Yo4htFE zVVFN``X2^hXFm7nSgkYV8+t!;1MlyR)r5wI2vTumLzIe}e>@&>RCVy^)?u_%VN4nA zt1tom7IcN*pbFdjSCLeOF(9td+}{KG9ICKD&XhnAi%kE(5{NT{Ex`lDX;Ljll<612 zO74r6@Z&QStvCz_THULvq4YU;;3JYGeKY?RlEk6I;`@^nKZU?-x89^e14N1Y99HJl zY49wK!YmwXe>Y#fSiC-!1b+0SOVf1v{#nv3t4f1~#P!n%UPKOiOJ;k$6_WUMhVgiqUh0T5`Kt~awyoim{*jLL&7Q>w4# zDw0$&EB5QR9Xpq+=DKNT^OWU<#(~oiONNFKX^PwP}et@bIrDeFP3hhdi2ufrxN}z<+1A}bV(=+MEI@z+@*?JwL1QM)PVpkJ< z{Ff+MfAnQy8xy6EMuVOn>U=_uBBnEo7&H+_^iC{yKT$VldI`me^TDD zC_0HlCFCgYIf)VWb!pRv;f0XWf*yUxwCNK&_xFIK_rw8eITQyh8v_jCAOA3^tgtas zuKY7YdwHMe2UQCe;a8d4B`^EQqT2Zs$f7L%Fl90N2rIg_~S zRey+-)^)%d1ZdC}%~B&kQ5S)0)3H`tN+da{SM0yEi{3>aYnlBwUi4oMde4q=(oa#!31|Jmv}X?BK8_fG=DfaR*Er2Okm!8ph(GZ46-O`WbZ$`eS0uC zKHOKII7eI%tN!xMyZzTnOjAS&6ZZPUqgMyV?~NZA$NdBx;WSZ>?2$A5Qy=&2*F7AelxUSKueHx`D~6cOxy2~Uhkx6b zMK&4k=!5oi=ioPej3Eeq4`UQDEnVhSc9zSD@5^{LDwPy6$&xs2q+jIfBj%rWef`6e z_5&4&lgK*vc{!cR@?(t2r{~5w79*Z^eXCZBg{;eLe7Zl-W#TasJhk;3*QGgW#ld{= zw9UuYT^lST)^k}lmr#NdDkxM0+kc8Yd)nwnq}4CwSyt7u^dqgWifLBO{79!+S!r)b zf^aOX_~|nfHX$fVspI_Aw>xYtpN_NhnJkCfj~k1p1~Ztd3vi=fjZMvQielPk;Kd97 z<~`hKI@tNv0EQwW9B7=EklX2Sd+VSqi_))(bu-J)bZ2qI2&cAW+I2J>=6_qmo#$=* zIOW~=OIa_=Tqlx1zb4n7nj?%un;wn_0`P@fzu?#d6 zz}y#(@`*1zJn^As3l2CJKnDtF3HvV4s(Msf)DY34W_j+bHr;Wf`3nOJH>}17U>{Cs z+^uUEbVJo3z84xsz;^MqJ%8xNQ|Z?vVMl?{5sEtU8>8i12cOf?a$ftec;ufC zC9Eu#`K0m_X6wcoiaG0|=P~rB3E2#~b)~z47Lk5->LO4%0C7OIfqnLu=|Oi01nCN> zqYhlu1Vo_{G8Po7xYN!-*kPI4KUB?Vn%-*?KEMDp z`Bai^X|Amx)$J!)#qqqfFv|93RMTlbcUQgF;^+`BN*c_}ZmVp+{seujLGq0#0X z)4`GD7^)r%^nXWljK4^CKx-jO6T8PdEYq25|C(h|$jF0i+aZowjJ^bx&Se$YM?z!m zx*-tKZ*cc%VKGHH(#z}mms)PP&b4|a1LJOF9*eHip=mdfU9@+)y9y}JW&NZIEbwhI zIxkZ_W@MdR`uMRs3B2y;!;_^pYN%2TY09qO?d$fuj(^3wt-YalQCpMFt!JZ43#3~Z z$eGaL)J1@kRBXP*-WFXbh^+Eu&7SI9sP|OAJoCalmxHf09LGqdFu2aS_iP*koZpxr zLj}5Oe(JcrY2YE6O;^|aa$~{~0ldb<#r7+UZmUn zX7EOL|1?eZy=(I~bawAeX_Gw$UXp}3d&~nbV|pqiPO1Ojlz#N4)E4u>Hl>3>|Bs&f z`v-v0xRbNC@kIfDKy(L_jC5hrR5D#j?kCf50u!g+Y})%P0EVZZ=y#dV2gr{NP=;dAI9egR5B>m_3<2`Dd6q#hmoN>#>#QPJf$7>LfOyzrvgp_qCCqI<2Qm{Xy770$0Jo6Hg7n8!6i z1}!L%pZzBa20uF^1{-l-S!X$IG!|@AuPRt9Sj<;{GVS!LeV2DWh0%HT=N1nJ2k_F`Z0!Bb4K8i9%%W|!aapdxt~}fI!)A+voaMvTVI=rJ z=lQ6sv^gAKv*A%;4B#p6Jg=9_W`P03v^mh<>4i`eh)XL0v_LPx?>q#LtP-~9G3D9H zSPw9NJI%A&=nP;+&B;H*kVbv~El!K2O?z4)!c*v;)RCmULt&*X@ z`{I5E?Ci2beTmKsjwG4vivW(~If3f8VXh2x6_%(hjEXC?=)_B>I z6lIL-MP7RacG$)A2%xMO&%gbv-R?RHRz6Uqjf%|M@2=5%AwPm!sj~Qd+un5TCgB6C z6lI{z2ehWHRKPg2=9lZb!-x^w^PzvnL5jtDoL+$a$m!c%GARVB_4nu+Vy(f`O3U+q z@XKU;&M8=$uQ$s&85;n{aghbOP69DV$!y>|zJh(cKeWAcWP7kG+C~XVE^SxQ36;N3 z6=O$4GwFxH#6V+RHUa>Y;(2u2eA>6$1Za>jjH5WJ(Uh(V+lS=iT*907=DOKtI-vqg zq%Y1cFYpw`(98d6x&zP|=*+{acvo1V3a3gKfTv-!L`LZBl+j zuU4RTOD;dUcugr%ctEtQgqR_5l|$$S&r+aaf?hKQy{b}*fvXYpR>=@5X8#;gFFVwh z^#$h8VO-B)+I8Et^%9s!Jc0tHaRR(AZFh~ZV~jO@!w+G73mVw0&_@)p0iczCoAtbT z6n}s(xI1z-4kzY$<$1kE`UWy&h24#i#!8t#-Cft)CKDAcON!pVU$*mQ1V#z?hxFxhI1(%VkNa=ALg$JZQ4QYxdUK&R{WRic8*SCjLt$`=a4RkElSbu zn@VxumPILl{fcQLkU$}hyw$pY5(-gIQA-TAXGbRmj`bidnSv-|-=gyvNoi!@JDyVB z4yu@@L)Kyx+4*+0YM>g4qE3Z(z{gx4eLg15Fv;k^4W>nqA}^CLHkglxufa0u>&uib z0Z=s4mfUz~MP|v0i@K{ZLaepJK!f08R%P?7nq)^vG$0wFLGol~wLZvy6hNyV!V)|$ zECCc#PqRc&6=J=BFwy+WjSsxTl7 z@2M1lpBM^=cDMea!=*j*g-ExbF%^17g&S59P&^AmsSAqG>Z(H8p?GhJO_z%d!$tPD z`DTd=Gov^uYPYMen%(SwNn8j@7$yjs5IF;rCFCqI=+y&aQ1^^dFEST|%*8}G8(P^F zE8`{uDskJjs|KS$OJWI&eJIFL@xn+ySOQQ8)N2NDktsyzFi`UC*-t|8>kkqdgnCPznw=;Os;n|*h)@A3kolo@E3senimAk-+P zIzyOxZ}FQ&ATy^Q zNDw7SkiV|m-F34_bvh3Ll(SR@C$F`;Z@cjZ#kS4L^sZL{ZuVC(@k`LWy?~b*^I~dH3=pA6T2>pIJ zf<+@<`7tZM zy1Y(K2Es{3!ma9$l$wjP?@;fMWjODn%V=WA^dhu>f*#VW0c0vXwAqzjK2aP{1O)dj z0){EN-0j=KS^;~rqm;I(pdN7|I0)5H-1>64GcMeY7$*sWYzBCbAvUwQK}WTo9JSd- z(t>#~bc*>mON)p0aK|c&&BZvgA}o&6N7g%Q6V?H~nAh2_V_P(76OhqR_h^2NH&8$@1)~e3d_6Q2XRr*^ zc8-==ZcwFzWnh(Mvrdu<7D^2Fr%M|9Fi#PGD~+c-|Gl!tb&9m%=44oA{8<90iu>vD z{JU2gmpCm1BI5W6Rc@8R%(ButOAefR4!|`E&OLa;cD-o6BH8)vD4T>Bxm9E47eI-w)Hm$4pPQMb7ZnRJ5S*b))8f;;@C3k zjDve#CA^LbRm}8b>W*W>M~{+{AmbH(T5-^Hg@k(Ksr*1r2hB}Y#Ml{YnLW{-(C z$Z`iut<&&!gzTASo?bw4-+#6dZ*}rEZ+?6AY7A%q5S5^g((K7GolA$z38jF4bS5@x zq_h~Ea7b}=DJ{?xpmH^0iqv~i2g)W}073>LJm{0Y&E<{*mMaURMHdVFpZZ3bGN40p zN%tmD!`>{LE|D(aFWi%KJ+KY!(Y)4|7VBfc3wlR!cQb|cn&HQEiFqPByZsz-%M{{w zofh%E#((dU%$0kK+vCXJ>@muJy(apStE2E3hJpIaISZ)OxmnQ+=ai?3MfBVwR zeY2syhR{OXYm+v*JTO}Cq#tqZH;E>~vEj00b+C`zYyHws0A{?eULq{E}BgW5E9mnc=N7xa<`VwRQX6J6#; z@l~9mVq}DrtaIJZOAKHXBJ6NQrD*{_NPz(GvRoPjH%;E42L)AfXxZzYZIWX9R}@Wo z*A(JOkaEzO2X}bAr*p%9$-R3XQ+Uc)+w{&`lJ6)&ajaJ%=cfX;Um<^QH5YYwemVJf zcvvYdu!c!^IXP7oc!vj>-GoDafLc2|zkL4kG{N(hf@W1E3oWY-$ zFD8FEIe(d!8hxV)N`jNx&_(LK(G0IgxC(9C_(Buk7Fj*9p>~6RAL9i#gIps5o)TyW}FC;RRFF;nxJ?o1KT?Q)MJoc9I47F;*>zt>ElwQ)?)n^&g z1mWCSO02QFMoHy=bJ`g4Daq1cA22+iqsWJ>jIk&y1_m!MP-`iJW9-Z66g(gbROTH<7@4xbkV zOea(1#&4`u=q73K2nOn=QtRi3Dxs-EZxGLtra}4a;6g2bKJ_8qlHbD&B)B~`9i|l? z5(YJn>g-45f(~D{N$|iddBzO|B;5A6RSy&)7l?k}`w`-tb$qPei&=Iu^%;dr9k;_I zWN%_> z3Nbe}ATS`6-2n#yGL_{4Uw`Y=xgrUo!k{JIiMB+ZDJu3g=zs4lcXxIrQS!O4KNJU8 z@N&7_nSJJ&XNG(`AqAZf_ZNQW>$A6KZzpsZi$C-ANU(4VrM?%g%u3$xmui^KmGRc_g5D$+g-peE0n6-`p^_1!qFXpQyD3YByo+ZeE+g)=H1hMMN|KRZXfy3GV=Iz^0?(O|BP2Q)rP~Q7jOYbt6Mt@}V{`Iz*_jTJ0?lA?| zDmrsE18=(Fi>t{$fE~D}g{dgagfS}$W+qAyI27XuStdpFO+EMv;*D@)(O+R#j1}PDxPkUM zU{@QPruxHs5Gc$LqVBT;%5eu}GXQ1EfzCMG9kICS+ioz7i9%V7jA$)PHfZghEFVguz$lE40(Q7BMwsx#bAxYsqjjui}|GTlc?lepK{BlTzh-q7_5mN>8hI$CQ}Ze zF#x;h^WZGlWkSQcTDRS>Ey$39=(vdjfn%dju9mewV91mP&CCN6aLz0SX2dxFf*{Vz z)us)8Wq%YG*;L-KyGuu_O(E1VFqlG0q}pZIZf}->B5XSO(S@ErdmPX};F&Qqd&hAA zj?#Iiie?Ue5#U0qDEg%eX3C>{W$(#XPNx73Dk7-+{cL=tfubQs72$;*=qhA3Pgig@ ziLSzxO*mk%TTTvxM97gK;RJ(Zh<6VkI0YgjsDJ9=7=c>2WCua5_E;+hwXn+Uff5LY zyVQtak3fTMWI^aic^opyDor9 zx!MD)hEqC>chC~t#HlIXnLB7}PB`&ouumDlnm`iEQ2+BFX@PGUjqq)^(N~GJ=VjBh zK7V(yd=DeWw*4~ZK2*th?t_OZ%zbSa94HNr1vrMu%4Bromj)bAp$|PN$ry7AY7*x| zU_J;CWjdbN+~#MiFZ@rj1T<+n{eFOh#ah#eCz-GBMb5Kb`Jg~Q_or(~a|;Yc6`!(dZ+fd}9R z5yp1`?KX{ouA92A%T@jFDu@Kjk-vu#m#vX2-+4e;$q62Egg>Qm*2UwW0??(#<2iZ` zn=qHf+h^yuU3Fb`!O1R*(WE@eSF1Zr__zy14@A2{^epP%S6$TvWYZLNz27voQh&y+ zEUR)+b(^5ztU`)Plpz>WM$GLTRuAK-G@ElrLF-R20G_&*B!{{y{#U5G%1Al>x7pK8G zlJ8HkrKNjt1?GmZ6d9>3Mq)frWAHg)B0k?!1+oh63&FfoNMM9OB%dw_`mQS1VOb;W zeG)-t+B`%EhGKfAXvgl5?D5eE4 zMIsaL7_EpskOROhW<(B<#D5{zZA6JPJxdAA%@9WiJvs_-aw&KUIYh_W>PX87T;&}z zi&3@HGI|*!J#QI#j)#XpWsGZiovbOrJcn(hsRZSw)Q+?AW>VH;`siko-~3mH^FM7L z2=oBd05*4NR&Nr9xIwuB5vB2w36NP~J{lxDJq_2G5%=q9SdBf6>wm6YhmEDd+01*& zugf6IaLlnWfQ338z&G`;VWz=D_UZ#7Rd6<{RH@WEp-`aeVN&LZcn*pq#E<04oZ85` z+HA@jujrgC#0z7I>5Hb`EIkfDk!vDPHgjgPzP#~!hfGLF5^ZyzMB31&eZ z!S_2UbFFUv=xcDZRdim6TzJA}uQyQ{G`V%R40sbbp}f)TbCNB1apCM|z;! zTTd8ZicGcF5I5kG$Xirm4S0gLp!BgwQKV({!0krF`qO>e;f($iDhGMgU zs{B}+Q1s6lrH(Xq zuNa^Q&DrsU0Dt<5?>ZKe1hM-)M*uq+ah}%LeHp2Vt1g@hcuvVAGv7f0(uaB!)VM{B z)rN}0)kc`k%1EAB!TiP>DYM}Bhi8U&1P4`F*1AFj`V3=Sb6D?Wn9)vXD(17U)w&I2 zEhUomq6%Z2vQ+d3vLZs*{dv?fY|`L?GR9A|p90q_oqzS(s!d>e2mvS|Pr0CKHd}u* zKyO5%jj@YqW$I$C%YGhW5VBM>a_R9i2vB{PgR^#@+gB9X6glHpZ&R-2t2x9%3>Ip2ry&bB^bO0!OV4d}*qe@Ang^TzD_*S209%?aV2oi~Y? z6jVwIU4Qj^n)nIo;q<2Bd4K~S`#}_|@m5ss{&@6WQ-05Pvc~QS^7G<^a zqD4T}sqjQztwsW2fQ@i;wHvko&%{msJxFBNq@#|%P*OYz9M?4l*mszbd1~BbjZ{hY zD<>~;Sn7(TeT;MqsMglKcV$|*uNppEw}2Wre1GO10|yu0XKdzO4VknH2CCE@>dRNF zn0G?E zqJPA{e6={dIYlDhxu7gw7#g9!Q01>lC%mwY^`^SRE4xpJOysVFFF2GV)24W}w9^^W>U#4$3W*9>+eF)6X50v&FyE@#M74olRA2O@>7b72zRI8VVH;3G} zGjTHyJu&y{A7_63_2HhU6ldB5nBM~8AXP$b!s%@X=(?VrKe*^RA4CotNLNzQ zB*Uy78Sg>-#)fiPn5{!Ukqxa-;B{s+m% z{rwl`6CksTCU+0*DF@eSKm_oc%2&H@SNF4)?Mv*-RAss#VlSJGIH`zt5 zqzqva*_d`)|Mfa67u80}DMLx@f-S3Zu1rvjsKC}+(DqNe$gg~1=a=A4_~=B+j!Be) zln;-gW@&nDXhm7HMYb;fQjR1tyM&r&^Qvs~kF9(VW2h!(`+rAZ3^f+<@EBZIwwAvA zDg5%fHc=ApqI|4$Ba|eO73JB-ne=CRsGkYcsXu^+Bb&kmTd;*fYR_{&RiBFmAc%03 zx>%M)xtPt1?Rj2L4-e|%ozzNWL?W8n@-0jVF^MclvwUqFV#1w$Fg@}$RWNX<5H9{u zFxmwlJD0hydw-dgt&hmIGMY*14&OETwZOrgK$Alvu*HqS>By$8Yu1pz)vorF-?Uj9 z0D2$)J!DuvfGj9*jjae~BO4rbmP0Op*+63!jjxGWml`X3d)4NR@2ho+aYRT5`GZN` zw5Qwcf%1(J#F%TJkZ<|NY_nbGJ`B(EY?0SC$xOHh#eX6%+hSR0r=UThU#LU6j%q*B zZC$PEY~!1

&(85$;!*YlOTO+=?GoC1T-TNIiBlADn_WvsKlmoU zZw^L&;(v2#X4Y1-rUlC@O=J6=IJv?XE8U{Ec5fo6LSb zefIp-*;v0RJ!ZIr>OW?H%iy1@>OS-u=h81&Ue4>QZGbozS(}agMrpFZpejlq9+_X+ zbyaQsv{toW@5^&wln)w6F-H-s8a~JqIot1XHh-B^n7XDYjfkzQ8&A-nF~v7AI%wX0 zJV`RdiP%GLJF?N^8~Jd%&I)H;PI%#PJUwiHu;;nPUoer9@o?I8aJG+53rGkcq8mM<jvIV-Xy)du6Nztbanf&T=*34s(vKWCw|FKvxMvjHG>7K%^s+ z-Z*xc44rrhv=LYf-5%R-+FhWeHedhk4vRqf8ty1KA}t2dG;YNQG&bfmvhT!R;2^bJn(T7WVxb!7`PK$M}JM% z+;-Mgx$=z|oW>DkH;MaS7F2S*Z!n2ck^g|o8^uDvHr@TP+Nn?};-cFcG97;kw{eG@ zY~ASQ7bpdew9T)ui8z?-AhxXPjfsbI;;!YTf0F5X`Hg`&>L@hx>>ocqeXYTR1WheL zxH~O~3GP;lz)5P;1&axG34Xh-jDH?5whd^m_!MD5-O(5NRVpIae}-*<8=0`DZt_i4 ztG%1bKIiE^m@urusqnn%cnLaIUrLWDgTCYv62yqTy7MdZ6 zyb5!hEYltsR>?TE@LyJIlLgro5p@;}_5eDB+NiA`4bo8iH2^+=D}6jr~e zTS8zoH?2QCcV$zo%6wsW_ioRhpJ#QT*Dvxbz39VQBEn|i33Fz`lmS+NcSdHLkAZsj zmV*0ow)cg~Y*An5uClZ5FiA=8J+=LBJ$p{w)?ICA-(M`gMS^>m%_#a>cekx`6*vw_ z(y*z$wL|6_dJJ0&iO3xc*}e2`IDe!Etl8zqli?o&`TG}*OcB|afD-|Ff2fF>xOQy; zX@LWb)oCSde0O`f-IJ~S`VPtAaQ9wpIkAJnKosz}S2XN#j> zj((Z2FqZzz7L(J9qo=Q#ow&kjuI1$7`Y3+DCQOxu;S(cd;q2sMarB7WZ!dm^`BIMN zb5S_S;hT%AqesubfA;F)f9$oNs6-(R)A)lZ{1{U(R$3f;^WPUQ&Msb`KleXrU1-D8 z^wS?-KL5cF3s(p(O>4RzV)F3&zVd z`uJUa|0GR*$TIVGd9%9=tTL~cQCQApp`-<2`4^RR*)C@_$(nuVb7c+djHTuFYpC|N zuCCC6aXr4>BuqpYSV%ksC%I_pVJ=0w3*c7)FsXcYxIF`_8#*hZhd zR$twG0Y8UT#>Z2Jj)zeU!ZJfq{CHh=({KMCA!!VyaGJ8vi~%G7Xh4_0$pY6nZTs7> zt0;_c2_NdNtCwMz7p2k(i2A0Q&+o&yETmFN$e%aS9hfbYwFypVFn>9Wnu1A@Mgi{p z;Mv9G-;e=Bg#Hs**a^1=@W@V-bH@LLByoCv^z{72q+f69qo+Sj*wNGP{eMnhJ%>N% z-%b8>bao!r`J7C`0bGr9exCvW-lvjg+4R##({J%;PO5a|>vleG@oYkt0*Bv+6j3-O zXeing9L71GjByzfPk+IUOS6LZOd&#}UgS>N1Yew2>W@ccfm z!dzjUP3NwbS2(D(GoMrjm(qjFL|OB7z1*X!_i}4U8SS$6ntuq?N9aO`vb2r7#zE_Nf);jk_y4fw8&j__7Ys1d^>u(V?rco>El)a3Mwzx!A3y< z1yE*_pDpTY*+fv3z#I)Hl?RC!2ei>?tM^R=vJ;?Z;02mY+~2lcjlfzmnHK*n%g1AA zBSiZAdb5PNkbeh*GEWqQbSb#sw2*d7r(Bax+a=;BD@;k-UNwKN*AQ~y11SrkRr;w3 zM+Juy(tJA7xG^DNDJ_B=U(LCU^Pvy>@WR+(q#c4X2L7hMzF>lB;JIcf*gm%emVJLn zQVC1&KR{A%XGk*xNrBV1>wCgna95E`e$`^U8AtI}cYm00AdpgYE!&==E4gaDXnM@$ zpqexq0vLQ>G2$k`H43UvOj`1Mc@pDFln}^@;;QR`Bx2B7M{#w(tL}CaWD*cSB>bxC zIt&D5sRE0FI-iZW`lz6I%95EKP~cos^ek7K9%ElPk-pE6ElPsyw6_&`?^(M56pV@n z*w%v7w|`gCo2p5~7zmaYYzOn0B+T1;h(khb`baMzfq`*2A2QSTx6M2OoFh-bctre! z;#s-O<4_(CeI(BUNMChR2M>^d!;XYHzeeW+^NXD&I3FIVBi2akR{abuEudIP2_&7< zahsQ1A{EtqOVM!JQqYoJ-=a}CWO|?%LstQ#Dt|_Fn9&d;LoZYI$Vq%Ug$0iz%@%Md zX*fALFywmuzUc^^mHL>!4uk{cShW>!++;s4i%8S8nt0v_iv*hPz{DCb0gUYxO*rmN3e!-2#S#(>;A7Dre$NvpVswVQ-`WG&>C9*HW7;fk$<1G zlhHmMOL9%v2Q_n3&6{6q6hc!_qJKj}63L5VFo1qpAxEtwvKx6?Uw`Nk8n>FNX`b(3 zm{AvG+*EC6mv3WH@BgpsV+4%4s&(?MlKky4Ob$6<+}GN>!>C(Y`mA8Scz-OlN*}t+ z16rj}|2p|qnvbE&d9d>Y1(ISi*o{l9kD|Z(&Xc4x^}fNTk?+y)L#`&wHh;Am@sR11 zygIYc+2t`VTx#;PgYJibsU1birfW#MfUauf2SI;8kR-Kr02XKKX4S_u2E{l)7$^DS zSH}fv*JwV*L15bob{RF`Ni}d*qOu5EP_t-H84l*j>GU0{q|}T;;QkmXC?q=yoy7Kx zb>vv}@&@~az}eJ5(R){g>3_$lkuo!o#JVjISYqADe%g2N)3R%r+J^MxwLq1~bQ*l@ zIH8^uHtqSZwy)8dpl&Ce&zX;v#Q)MV$fteJGUL%Avb0h_Nkb}5HI;A#>e$&cD)ZMm zeyRq|4&;1pV2HulK<(6VojzJ^F6YfG)_%ek!cx}k`gL+Wa9+ybxqqqvnzpBtqH|ix z_Jbg2hGtXE1ohiCvmY&cInRkLIexGL)Cq!^#=AteDGH*Whh3l~QklXJ7bK5h ziS-;J-i+kFPm_uuD1Wyf#8aIjVsMKl0cXpl!;;c(CWzDNv#x8Csin+$slr+j$`7DC zY5sRrUmc?l2~BBi-lPatGPnODeu#l5C${5R-b2{V=ujW+UI3#=n?NNyBeFv+_}dg$ z`7pjS*d>I?h3diH12~Wu$c^$|wZv`-6i-q*0?&_7*BbSzxPLVyN?%=pZiDN>-iGLZ zMd=v8UlB)7jY{xQU=zE+>}(F^eqC3K*sg^_mvU_=&osnYzI|w8=rNX&21^Kp8m6iI zN0$y!pVJjhh5{H^c$w);Iv#j5)Qa1g$2T>M-8sgf({bny1wd^-%QFyd4j|wmERSv~ z0@2%Hd3|bB4}WgI`$WiH=En!9-;f+ZF#l$9gcpnB(a|ctK-ss-;AZsktVe!zB1~Cm zIONt<;I4Y;0_6W%J+m*Oo>hN{ehLMt+R5R?=YE(Ta4g`YZciiuA<>j8=_YK{x){XL zczW(>SiOB80wgd8{=Dj;a78WvmbRKmRD@OxMxX4HE2Ckty!E6j_I<0Ods7fvpsxmZ>zqm zaDkE$7te~+d{>cL?G5n4-{b>@91A3KIMI;}pZLyE!J4qz}@HK?=gUOu-BmmN(b~|que04yg z?jim7d?K{cDM;yZFq*3jo`TyjA|c#8tl+hP zO(NG4z+wtyH;^lmwf+&0rbSNhL=$YjP`PYQu9|fnPFDpDX`c`TvCnp~z@Rdg=-Ot9 zeZOFR-vJ=Xm+eGMi|oYnb+u07%vKbO4S9pq!pjWD_^*fd#7xn08w0$_M2tX-9`=oe8c3&OX(5; z-%xJlfB~uYk9L?WrQh@SKMH_|@~tfcbY%F*8PF7*5bACy z$HSWdym&Hd0;CUuf%)muUp#RiGI%-orcRvQYMtETRkE3+8-^kc<<{Qo_NGc9t*Ha> zK2Eeol%sScd|A&&P75j8_keKdNq_v18%w$LMS;dKjNJXSp3lLTpCCWAC1sd@hS|P} zWT~z{omVp=NfdbRp2V37+>{Mhx_0{x)^`esH=q4w)*yoU7iQF* z#jL}aqOR<-+)5cw4ZW1qq>?2e*%{q>9_MiM|NaMpWolrzJ0bx_0Rfh`f+GPH2?RFW zBks4GECK%m0YSH$Fad1=f7ea-5JxBj#R+9BLlt-}Ieyi4&wwhM{MFSv3E~q<9z`Jp z1qd|GxeDe_+APjR4vkaIa0jI=LXwI#1+`;#1ogKfDXz%%^2)VGVLoIZV;@3Pn@!=A=2HGsfmz)Ex;SLh`wOL%)>5^zCY>@v_WEX{ZU? z4*Okrs&7|%V^ZF`+y-LO20hH|C89$UrKLPUgh7#us}rU@bf0@t@pwkvqt=%+s;N%k zp&tnicRFq-`n9l>e;Zk9yI(fgWL9YWeWqO~l8MUVynd7RKBY}3#gH)#Rr5ycdzgl^ zOn7uq_Mj@LvChoY$>9$Y?Xrc&8j4T^35>ywl$T}&(cAVg><&ZGGB)Z2Ecmy!bTrse z@;kVK{Du)%XI+lbF>;LVIX`BLR*e+1-IqdW&>NDvrTM)Ee|^$i7TSQ@(>RM-6eyEf zwrT1-U6b~5<0P$z^OGcqctttVXq%-OhsNIu#e2^{He&qGSIv68E%~#6CtSZQRAxq% zW()t$1O&jjor3HsM}6Dw*UM~JJCO85_~t?J2Wa-%PGfps3JWY342?86y68El4Hj~F zSTv<0g*K;6fAwAPJ`JbN>60dw@=Oy?&jb0eZVI4nc!C56i;N5XCzW?v3IPt#1y+a$ zYhfazx+5X}B&qhSqw&Y%lLW5cHbbEnqxqxa^bglzj&`yc-8bniKpXGMt}$+M!wJSh8nLTnbZ&5fA$f7l<^UE9cw4|SG+VXhvyRvAtA z6nyL`$#;q_s1u4cVJvoAh#GJa=n6yEEn!YZ14P2lUAMT@9k41>B}t)DnGgM7OfEFt-pU+IWjPxLo%PEff1VZeqZB^RuV(I%Ys2eUC~>Xr$S^- zZD=a|f0jE4@<*+?J(N_1KrwA{R{@v;E*&z);9T#hdz!94(31g>=Qv_A`jV2RUZ2Di zNn=b(Uy>pWy(LUU3s|6QXtzDwrg{NUD@RKBCJ#YKp_ccb?x2C?X}RMSlFCgA&W#H0 z%K%%P-rn7d_rb$;ae;lMXsQbbuzAlikITS$|A6ohN)P@gc zLem8j$tw*=-1s@GfuoE1U0?Qj;oZIT0B-3mtiRiAnqi+cIgCd=-s-3Cn~)PlqpU~A zq&*ooFfHr^z2(v9%sZR1M#W?a3*7X7d}mV@Di8WhSPuM>-q|u^&R;%91X)7}n!d5l ze_*~a=f|tZS#|fV-IY|k5ulIByUB!^&o@i#?#W>In)}!~;3C3JTYp+(k2y&Vc}`s3 zj10wtz~y~29QIv#K+uX!UZxMjc2f`S0w<SB&@ye*x?RywslsFSt9x4cj^6r|^o;uOjBzCTNxG zvNM&7b6TW7(dg*F460^1^lWtg=WUS>VmcK@&VVTfmmyIda|VntO>e^Mb_17qeBHK| zs$Xa$4t$RmWO3^#1fYSSgQ=#DS$!@5Fb3-OD1uLIdESgNiWsI44BU6Q!!>!SIk>s> zT3vD;E~QYHK!=yXB%cD@cDy^f9me@J{*fnM57}8M5fq#v(JMA}xDdc6A&OaC8tBA!E<3=deA?%oy09 z`|qiKshSykxXVh3qLtWH+g;sN_0&^O7at}p;}hn8((lFQ=)=*62@h-dYq6O;oE;rM z=lR5C&IqF>v&*Bnfls(*nH3W&Rp#=^Y;$y1ihHwvpW*vT^}jD|ri2i%XSO`LdwO>A zZ1(86|Du+evfQK(ROZ*XhBcO_wWm)WO@H#saE2B}r{xpBWHRjpS83^0*bEnfH9RRC z!ewTR#zS5`n?3#8^OI+1=coR|oMkNMc-q;?i?eVT&xE5b-~Z#u>FoUJlNZr9C;Prl zMJ_Xc2^OZp!fM!1Zd?CV!LnR4o2Fu{PfQL0Q@IDr!}Fu#^B*UFZM`dwj(?i)qvJFG&%#1L#O74qA0RmX&M9Otjr2FN9V;Plg0z9)?4D#QkdNEp}GxGonuKabdV2Zk~ z>R=a23va!s{EEvgQxuK$2EB@D*PIhyY>K9tU&Sl<(x4=LD%({IFu2Pc z#Fu9*R@i2#6DXK*Xgd~N2(LopS7k^l7yfeS#5QpZcjVZ+n0gEJM5$j_$yt{xOxLF@ zVVmm-V8<9hv?l=zg~=e%o&})j{8xWpZWrs_GB~CLuoHpm&zqY?eRJJrtG@<+|M1fu zfD#`8K69=Vp}yQA7ln=ZaW67oaN7WnJ{@nHcHV~DXb!NT5N(!$*QU7I+qT;_<<+)W z9=fnt&FcgYm21Sp{c?MF>%T;JO5H8pSrzLTT?u8aa@_x^s@KaqvDyH-f`DJ`+SlB? zi5KMt(9b2%H%IzDzK_Ks1R869pt2%_^GsN)2(QKA9f@Uz?i`2na;QrNmC*|f;O}j@ zEuk~~VS|k!+=lVV>~XlyANQ^^UoH>N9lcDyAO=yu`#_;uK=a;xuIp+6JHwSi2raNL zBX%vf4-SuN+In38rT|y>k{eS8tju%%Tj9MbMi6?7;Fid5T#-$mW|n1tT)#;$wVGg> zoaYLl4lKOq{Ic2>o#zHB**MWzMc?p)o^M?PmYyUCi>#{(XrcY{eu)%d!~||H75w&s zNd|+Dy(SWnd)Lz)}xO`8UATuH4 zpk%nD?u2=Op3I0(o0Kts4Q?tV!|F1ToDmLPUzFF-+^{Dxt>uAPncv>*peN)`cKArV zEjdBGYsDl&N8DTv0|?qShhBk~O?{CwLmI5gQa5m#`p;}t+yr=iQ!oIQsUgyz_2tRu(fbv;ipv{Inqo7fhGWh4xL7xVQxp5^(=QMNBG zu%1x%v7YGD211)p6a)1r{u`oi{23uMR5)A-&dHPss;|q%om9L~yX5sYk{?J#L2|1L zv6d9#W${gFH~>A#B!(k3Xki`V?&eS9;$FhH;7(HzoJJwb?G^!~P?cJd_<0-JVt4V7 z1YkcyGWAR39H!uZ-kNev&Cg_9FzOcD`KE}Zfgkw3oacwF)WCfy(d%k^b!g3BtttN% z4H|&GCjFAwSbKs&SC-{flC(n?f%~p^BkSJu;h_n{1IzDj+ElbbIAS#>I+iR48O13y zw{`Q~x>~#+_^C**j`^7wX!uSGMiQ^UYe4*}kE0f-MGd}xx@)56dwK48?%QOSW3S8( zzklIn5lDp~*)%Y@CY5}#C(Mk17XXpMee7DH=k@T1k5xEEk_&JQDu8=vHvk%Ht`k2< zwMsDR6-8<(F7K4agTv4-s%=6TJhd%Fd604IpXS71<7I-Tbxv0}w2}8vgJFP|Oy-sN zZ-pUff!jxad&K3hqxmbo;Z;EZ`&I>OdZg!_4ff>4>3Oo@a-_$w0?nCsE%WX? zjb6MSG6bzCC^XOj!tGPs>ojy8lpXbA-TU>m|~tFlMj&Po-oT52X?zdmXRQe~DKm3MmEx ziD)Z|J^(w2CQ_&s3Or@@=SrZs6h#by7HlX9OhA=K6Aj@Bo`gx2Xj1e2ZZynAT{OW5 zcm(kdMR3^1bY11B#TBUgq@>g5&HEVjFmN(|t_ypNnDFy9$}l0!bVH9cWO0sjzUOYR z3lOzb95G^$20yLs($Ez18b@r}#NzezJ zNh;~FH`}Pu;S&LrfaVq}qMg5s^Ha!wq@!d}8x&@Qxxq9Q6htky7U2MRIz*Jm(Zs7* z2mSvtsdkBla@z^B^v-k{>s~Iq1}8C`9n8Z0VmAvX2Ow;ghUtk(p@cflF1O3F1}aN> zLT5_RY+!*s766mW0TqFEk;Fs<69DU1`aaZ&G#$qh8>?=^4^q^6|^5MVPQh|SW7J-t@< z2ge%16?EPIXKqXzza+Q0>4)RC1K@YN%gdsE%^7k}-M9sdu1$|MPDoBJ_Zlnn3{`0XLVq zK>o0NPu#j zHlB%QmW$nc&pr3-*?k{T!Xj$^`M6z@#Ozr3Gh0W`CZmfRDI-mE!V?)y79;lo zi?k-GjFgZ>r_p3RI+cWzv&lb4To9hH7$!}B=A+Y>-@SfmMg=2W$I6esxP1Nm=IW=( zk2kN)j~6#A?e4*qCQPM%vJid_ESkckM5JcYSTIdu6-Q%{k~FnbFP@mGOcEx!_Mcbz zvZ$N9GQUU;QLwP^T~^=awT+IGl&9ef0{{6;5*mlmCl_XH%oxm7(U?)9x&5J7^f#S< z;w5%nV$*CF(`o>{kMxDjtQkE2u7&1 zKWwX_Y!=hglgp~w*j$sCs02dXN1-T}=Epc8k|)Cd`07PWrql9ddiJeb-$bXAZjx2r z?5eVl)tI?YWCA>Z(atCTu^2L_STwnRwzc`{SC?kf+__<%5*8~tR52~P73*Ua3MLXF zVxWl+hI`Ux%^n)^$a**fGbyF2vp9xo(Ntu6K6{TH7D3Wk` z7_|}rsO;j|mbmno?U&eq(+|po`b~fTy>c@}Vj;SFEtYvxPfu@mi$z|Y_xGxQi+|;t zMVK%>vr|+|xZpUYnHME)A%Ursb+>Szz5#qzdD*UH5u}2Mlm&{JAx)%eL1l0I4fC`= zjegrQK&nqM08;LkZy3~~oags_divU>5_E&^wNEj>@2@=&@d8%%iV*;DIhg9DaoTP9 zVcqdN?Z=A()0z61z&LqegY3J1DnDeaV(tqLayY=hj%*tKec5H3PKjbE`)%Ta$p>+P z7C9m=$11noHT}x%%BEQLyX1D2mGAnqL+9=<9XeM+r|gTf3B`&(NI|oy-aw7slA-DvNn>%KjL&bSF z%)yL7VrO|>W6~15gGfTs=Y9{>?$JqRUnCDj1G|LBBw?N?LhIwP%r|9z1pR?PY)7J$ z!5-jK#-4pg)MUO}Z~Gi+HvO3pSe_5Czo#b1r@=F6dV1eq+e?gy4@Gf*+I@f8pZel7 z2&5S_-14hBZ2YQUf9)B6!YLp?yF1Lb!61k%%J`cBUKQJSsZ+`mO30r^j<8eFs^ zI3BiZl$oy%%!5BAq#}$CIG96o3NCaE$h&johfNcdfXCQKU|#Ib33$9Tn5AJ(*emr3}r2ZNFW)`GUkThU(^lGZfgh?`)aILd3un zgPjA;Y9@G8K@pSu!7oS?{Myr)!|9A(v?JRh#qj6FGOvSfr&@+pi`t_HsRkTYS+zv- zC~2HvRk9Kgnx49f&uTWQWY=*&GSTt zJwqfPin(*KAXiMOAkmq}5~8-wkA-VZU97iG_2C*tlO!x|`Ys3oXJPe+KKPrR2VZHd z{>-5P-wG*061De0074?!V+*>{8CAx#vK{a*YmiTHVMA+wTveI>KnaeK*1rCr+aatb z5S7tHwUul9c^{{k=f`5T3fT*eJZ~_tFfkar1hlE`J4a@v84Fu~7+`Hx?MmVun1G9) zM2=73h7wLvcwcbI61;%stF6xfbT+{~J?Vhbp&u8!a@G`^(gFro zB`t7z)`EzCP4v+UD)hRbVJKg%zHxGp1Zh`RB^T;cGptczutTOVosojJDs2X|TJb&_$4r{O$nGN(4o z*i)&y9ddlN)yCa;_g8}^KJSlyeoS@aLsEc$njkrUJ~y5xn_XiZP4F0yVJhK923qAa zJYJLqI6^E5TpOtpzo{Zea$Fb(@3W+u#P-DfRF+-~~s)+@NMz z4BAXl0lnm#^B7OV#(AL>gkb>L4upTcy1pC;wkUnpsgZmB>xlaa2=`0+zu|XiamG9W z_13C?qX`pdX{-X{Gv0J+a5(WtA>1`WINPiO(u9{CSVM_}6Pv+(3Qz3dm*7gn(Jwg% zk{UTyLF;Cj5y5Z}#`NHv=H_OpA6v9_ul|fu41;d6+f^`Vl<5P5#^FTNkFFh@%UA#l zW5$u(j%F7(Ty;SPrV2bdbFw6euMh{@KrtkLo>De)ILW~n2mJ8*%#DXds4;ThTFWoo z8`b3``pf8jWY`;-_uR20X#_4ES|N?V#X~!#=2iIF)#&2tRn%0we01@1#6}k{&HtYL z^c?9Lq9A2FxQjpl0p62qxzAV%vyrj8+Vz_Cl4$nOyQCbw z%a9e$x5yrJ2vs)owWbWs={t0Ug155!I3tBbMnd}jwF5Fzly+b5NDu{yBJy|V8e+H$ zOI*RbSKS)Nb?D0!A==f!b*c8cP6t zM=Y!H%Gh_u5W3y{-d`cKakzLba?2`!2zw7MQ9`WKNTY>-i&OH%8JWPrXN;XrobBtzjwlUWQcQG~3>Qv$*&~7%%>&0#^wX&Z{ zNKPoxUn~~5Sl#&iKpT>l1Z@I5X(iiUjcm5mKq2=kWHrb9`!6m1W6_tsN&y`LF*cXo zN&!WGYjfMi6^8p+lOMsV)5Ol0YwUeDZ8GDF8fju%uB=X)mK_aDLLwTHa6r(qn#q6f z*((5%FfSEq&zR!{u>0;g&+eWB?EW%H5FRAvum2s-kA6A&Wq@s2_!-X!&o7UjUSKuQ zNDCs^;PU#&J%9(8CrFZkqzq{_xSSt7qU`a1<-g&6#+vt2i5MXSp1GVHJ$iBa?Cs^r zg}ISa#3UB}0z;+@b0|xcFFSv8GW^jLLmQk3?u(z9B7wLjnE9fg?86`k%0f%F5loQ~ zJT&st+spIsFP^YL{UV4 zp=?Mbl-dWXX=WQ1(6FMumU*^ZrZ@Hi*hBJoVUpiu%gU4!1#Vnhqi^(iIwnouNFwXCP+1L7A zAuUA!HeD`P0ENFmm*8>8ZYuztoXOzmbm5&ZbrMD!eRko{UxvG&2&%UbdL{DhZ9f zzxHhlq4k>en2aLR_^?cLXl7A3=@RT2Tvukxtn$VqoUAM2EGnv7qP3r_KR8SpnuNht zEc1vJn4d;YZl{?oC7_iA3cpz7%W39@+mL92xZ-wX8Me)!bMqtZ%5yjLlU#<f|=%Nz8F3FSmcw@WBXvZZ171OKEL{f z3LxBAozStmeDdi@up}%i5u@@?K^0Bxj1j9@EtdI>pMBb0nibK1D@?_@X4%5kCBU}u zrzy0%uJJT2*Xt@))jwZ9`}^}(=P!PEclM8yf8DDY46i8666W5gUwbP6w&D3QyUCYT zR<5@f=xf=!!E{5!*H3Mu8tjNUZgwZXUT<;~8@)2sjUIgo^j}S~<=FWT+ffi0{Px@6 zIu>gfVt;2#+po@l`5aa~yDCTjd?>-u*P}z5pj zMvLRoV`o{bPPZ^Bvuaf?{34~9s%3g)VC7Iy+OW%Sew|eC-&fW%U){6PO|}8`jXud2 zlkAg^&M=p8-nw2l+~<7?kBj?0#SFR$E05J4K!PE%K5o8$byE!lRk7$AqhBwkEzYk8GrTWG0OeHA{J~ z70TP{ujbjjDDOsb{*fjMj*H3hH1qR*o3Y!XoK23O_@JF9aY4ZN$-0@K8&B5F^d(qh z^wfR}kq#h1LV6XMX4khL|0?k%QfbZtTo&K14A8eHCl?>YkFM z`Mg>i`fIT}Gnv5<=9WY?lMIr8PwP}@>)H>A7;YGU)d%k;{Gu_ck4clLlco=4;XO_2 zO!Q+u$wE{hSzH*>rJJQ8`H8cnpKKs2twYjk>Oy}==U@g3eJHb8mM$~v)tDr~oJ|^u zlF-tag9pYxn6{$C{Pvb{Y3n|Shasl33D=u+o;7;dQbiyZGu`T2 z72%M7wnCKFko6K4*)so7xk1Pj#Ptz@&q<~ zfh7+k;bnY(LCvrgF=2H9u7+%l#i0AH%9d_!+hhnPIiy{O8KM(&rm?B>f5)6DVJhtJ z#R5mBl>|}injcTkE?&JoKYz8A^qz$gZqt^3hP2yhUe0VbXkL0T5l|>xMnhzspck{& zR8;$iXoa1B0RBDwvlsLUj8ohYZ$ja%Be7?bQV8Y~-c%*n)9ZlnWb2^lSr`$Jse+`2vgI^w3v1&J%e?U-QG2htd+E~V%@J*X z>e>nTp3UWeZ<%Wc;tvqjNj!kD?~<~acmm5`kMmU^-n=?hk$9>)trdyySy&{#RtChk zg>57ri+%&KKzyxhC*pfHS0uic#ne{f4-nN!JXE~zda;>!jQjnf;)zdSu#-qUL>*g+ z?^#$RzE%drw}ovaKB4^vWP$iv*G|NL_iV06d@YN1uG5kD14MNZPc;1Qxn67}9x5We zX0(oYqG5oFns~Bxj_+GoAikl@5Kp$v@kHZ(qb*N-L)R|E_ie5~d_xx5I>#R(s*`vn z>4PMv~Fo%>$&8)gCPl_pQ%Gv??14MN~&&{5ehk%~xz29&i0zJcskrwpb5nzPAXKfMsTAYEt zC2S+~4EGyq1?X#CJ3-&GxgzwnEZq6-AwqwEs7~mq*;D!u&{MhhOV0g&!Wx(D5y04` zJFj2zt+e+n$^Zzi7F<0ztTK^1oMPJ3g$WA{z|52QIYdn)qK+VVKsoBuzrK80D3KIC(?Vi zRV2NZwFBx0i0VW=NmQ>fhkymczCR>k%hEibxy{-XvXq3zGY8?+2TwkK>SLULn7TK7 zuna=59QLYA+WWUS(pbhrIq7?MGJ`Nguns$3?%a--=2?YeWm}|wD3Nier9B}5c+&d# z!OHEKvIlbFVVLHAamvgoG4Z*E?0xpAN!(Sq`9MrMyD7@Nn$DMQldU!{FXVklt24_2C0lk2eVJd7pxWm;%-3a}$b01a4e4X2UYY&gakqCuve*Wy$b34ds#&W6SySXZNfY* z{T#(+6pka{FU&dPoM%esvoogQO*a#sy6shF7>Tc6RJ+x(vE!0wT=O{oyl7YMP&A`l z;mzu8+ckgtva9Ot)X~l;T#j=J+tN%k_s%mnld4STRD^Yk#iEL9Z~&D`8lH5uo6Rz5 zRD`HoE#08b6f+Ucc3*XFnAuzN_!!We(Ubhx@+=GP^!YC z%8gNy2` z42dXiJXSoDlEnKjmX46rWL&biz|}S^YPd}I3AfBMZF2qSl3`3~7Uvba-MT7^*K7Ao z=nOa#SAM;oSfq6GGMaOw*c&@!GNTENsFe;)cP?-;swF}I_AUedlJLk!2XUS;p0l`W z(T;xse0KS2{?u6m4l0m^Ww8xdNyFpKUOQjNv`kC7JAy|UaC?cC>h{fcxd;xO6Bch; zZT-CnH@O(H8s;Td_gG2T5mvHH<;cozRdntJYA+F&sk^{GU>a-~C%^F5;JH%qU^f>5 zKyK8L-AwX<2oA`HL6hxUPcKGbRLetpu|$8bUD0$^xnCFVYytqyb9q3$GY<9;2Gqj( ztMTSr2lhyN$#|Ie-l*W|#;|B;4>Qx0#-Xx#*mZUL(00p>eX0mR!uik$a7?Ct%-R~x z%X!>>v23gRU~B=ZK#4*?s_nf)L|H4w8@}_)5>8k=+p>8GI%ske_qtoYN03nh(FcEt zM)!Faw*grtg!e#hGp{3(*drr5gH7xrXp_2G1gfY^Q8AKSO%N9_bT}9gb}WHfpag<6 zq0XUgk_l`WGDbeO!eaR@ST{E;`oVHt?-Kt6f*6iU39k9RTCanU2_6ryDuRM@igGz+ z6we_lIr=}MVG>Ka;!Qv^DdohgMHGKDieVrc*h-AVUB5pIiUM2`EGbG;#87Ea5&_7a zw=v8%6jA%4YT7QuKf@>=A#7AHOqD?>fuhmuD>rs|Gy5B4LENW5XRy|c5u4|jnPSq| zzmO<>c6D-o_2mpg*Yf22+ZjDMe{TQ#?CT5obM^V`Hz$`@Zk_3D>L7m!*%W`Xlr!4y zlK~1gp8`iKp9GSdk+^N!;)Ve^M44RJ^yc( z_Z8To2@0UV>InGzs*7g>!VKOBRtB-8&dMlqo#*ic_Mm0pn}9t9ogu#*_7wD0!H}|1 zS~%=2$n(?r(<~$!graaf^OAo^bB3|A^Fy4JgYOdl=->xd3G_f2a z25Lvu1xZjgNkd7P%0vTtz$QrCMo>v&Cfr7)3}c|pLZFU5jODT32VsAP!D#rlOM2T& z96v;GLDDJ591al`Dhci~>@m2{kl7iC#*AjfW3o`uSV_qfHoDn<&P z9B9g0CerTXx-V?hFf)Id6R1#sLERU^rnNI^Eb2~sqQF}HaVNH(lpp5A4%PE($Z`fH zr-3NUY!aDgJb2Bvi&?5B5wmht-ll!R6nIxFgvMKW{`3>S(LrqsWjB=m!fnKoE`oKL z#_azXQC6WYfrOPwb;zDxv3oosF?}>5N${wth(rZOq{%#Oep-KQ7bp=}Z58Xb4ghkk zhlPzzzUYMR^s3@x7z_jU87IW*WlDc+IoU>Ov?250J`Bn%eTcxZKx%|1GgLsoXdpGV zgt6NI*pADAM8M<_OTjuOW!5(yF@P2TM{a(In=13G+zbjUpi17q+Ju`zf_3Po&hTKt zTnV&bkaMV@F$;fwU2S80%_-KBMa;e^opdQm$S@Q`$OJh79YGp>V3p$Y9oSM~I`MM5 zehAYkCN0}#xPm4Jf)S1;6f!+^7J8F^nrBbUs`mjYh;bOs9&eQW*wv?7V!ppHtOSEW zw4~T_=&B7yIGS?gt@aS>DFM&<1}j)**u@M8>l;%eVWgS#FjN zNdfku8t>i);f2%!OX<)#lU86K3yHn_2bibKC=cmncCL6+Kw6G9cip@R6*m-KMEAoE z%_4jhkCohAlH~448&EovX!A(b0#!lEl|L-mlH(G!-!%EacAccD)zw!2j!u!MX3c%G zEP^n*CUk$I?8>`^%abwKDDlJV3fmY!C}ONL8{2BP&)Khq>XFtHLXFWeRxdh7^sDV| z--Tpfaco1pnJ~&jxK1v(dX%RLT&VBkRP1l}gm?1wpJ~?ERRSb=-b;Bdzb_yy^<7^$ z1bPadtCzR+n`2a9b1VrGNrKc1@{k!n3e2<1SAl;;g#E8g=l*p)Z>Ez=Mu0d{_PzXf z)wW#k7qRh8Qmf|An+Ml{%vOJK=*6d4%uS`Go1)szPv6zm!pGFJ__(L3KLlE8_V`-M zruk&JhV7X6HO@bdix6aOKZg<^bLyZG?_3xZJGIPXx;WStg9(_KVe9MTb9WR93$wge z(cXWJ&oRf7+@_6<$XE)V^V5%t@S@7og|R$lB+~14IUd`Vx8s)=6BFAqd?;ctKLq$~Iz0%By9O+FH$Q!HQSa9dLv7n1k<+11FFpM+us zUiR~-!%GY zY_HPiuS3Ld7h}YyOc;#dI>NXs8liWRo)L^ZFap(ZF`@BZ|6dEZi%;T@CjXfx2(J6W zx$dC}+OBAPXUkTf=>v#IeRv6!)`5FQ6&)ZKebyr1JI}Pw&aK{z&+uumC+KkRSiOJJ z`>t}}L(Y(zK-;SaCz+X)%CxcZe;nattg%44_=2oQ-*S*)%?99q`bWMImegrFtLaCJolrW6MB%{nOaqzi%yF z|2U@O(jMcst8d#5PIm9196EEb^G|<)%@Z1mez-I5dxPWj6qUF2`|-UVeCzR`gA>xn z!OZZbYB*>K7o*ZJMu#TGz=p;4VZ7N3|G9LyZokAG>cKyYw(}SUGId3X@!ve=Vc=U4+OH9c5XHcSJWUCP~t_0YL;cafeLRCdYl|oM~*&sGvF6` z!O<@D`85;qXN4@pnwV& znQqRv>4#L<41zMRjo(T{>Lm>D;~MdcJq8Vf*kjl=wfhd|I%)Rbe*pyc!R{%SpJD+X z0Xet6Vga24f3;dmkKD!)zAy442D-!+yi~s*$;nXyk%F#>`xF1Jc6VRyzO1NUOMg|n)n6X&K75jD z#YmwPQ>%yPyYK>CSz8#fQk)fTeRucW$4$8(>;C(PfB)WDQfNaAJom7^`%b#051%+) zF#+qEx^3>$Gxq{E^3VNT4@3D2 z;c4-sf45l`mWs6W&%PV|@q!eBNEw%_ZX1rLW@QTtF%|xJ$~hb>!Fmd-{?Ug`*?#uM zatUjOCa?XrlsVgVT>ESH$>07A#=ij6Bdu! zgluTYvEgxX+dTDU|LP56g`y<=&<4Xu!6`|be}9cjQl_Vxw%Q(I7C6|e@wDNv-@8=+ zo0dGScKsNm%L%n{@wxNXQdtOYC-4>K~QCypSZ|Ha&g!| ze>4jJwuQ*6R3B}Okl>iri>Kslbk7kZ+}Pwv>6RcImeTa%*+4Zz+>&U7ei_0I4+^Ov z+{~|jcB`@=oUl~C^=k;DP&~O3as>ecgzB@&aFD)|jJS=aOd*)dF~ZB_*mdpJTLE>) z7(zJ#A1Xzluc4d^04zrNYa7ZYgxSo4f9g1M9#jqar8K#}@0(u}ae(dV!7&|86eezX z-Rw-Of^ZXhQms+RgB7{V6puxEG5aRCI4U=id{h?ptg(1ZWkgG1hammPXyX~;Le-I0& zWL1XB;y{W>X_sIi0L#ZPSgI{ab8TINfjS2RQz&x-47g)GH46r$R{(#ADHrbh5E1Z9 z$n^O7P}LFNgq=o3X>t?aaEdjw@M??+;b-WEQZuPbzX4-~U^-d3Ek`Uv%8>*vA<=C> zbvmzk4kj3FczU}T1FaY?nViAPf31lL{q%iZ1y<%7PE#rWk(M0^AyQt$K}_df*6j8% z)7s*$-7p6JzvobL%ITU|iAyb|E`wc+2}v(_Kdk#M^jOG0)yS|RdLF5$6efgWc-o=u z#@OVvNYOvXA@Gdl2s|VZQdo0JAe7uhAdogCkwCIMq2j1@V~<1@XsRaJf6jB3V?God zc3ibg9ak-zkavV=5wxcw@FT+LGXW81d*#q8K-$96ilzu30Zv2EM7-7!0MPX8NKyXxGob+ImH&01rQcg*ofNno4H zFV1(W8I6>T5m&5n7g?stEJq1h$?(=T=_yl%kztb~K7KwuaNBO$`G&uR0_9L8*v7dcH-?Xq^2 zWu>THlnfuYjchh}e}*TX8W;e1*nQQi=SGIR3QioZkP@WJDX68e;SRf*!$>*R>BDn_ zvUh6j#n-n{?Qa=5bPS-E~@-52=)}ww!K>k{m06kO!Q3vBSZo;J3%s z*u3z!I7K8W13JHc6 z$0EMwG7hn9YBE1du2mH;&-2Lx}Wp_nbA+2IpK4h{Yl0l4j@3r$Sy{hf;}d(mo=f~L|(I|9BTFRep|Pf}!6J$^ZwET#9J3DXbTu|CaV>m1dA%w>!QEgoC@J zFsHTv_RESO`~%FL!jY^Nq)V0urc<(ti)GkxG2%LkzfTBbX(0DIxSBAobmfiUYOUaq z?cRomZ>xA0e_qNF9ifT*1DoXij=#qCVL}wp>7w?J*}%h3YB*)7hYv==EUj@x>~f;9f-pu zfFN-h(Ic~lJMAs+0%Dig+15tSqVDxQYXm&#aJ3C!#=A3_Ai}zUZ^GZ%iG^UA@Mgeq z;x60tc!bN2BIWF%$$7dMDfv?EO?*#?fJm5@*r?dRm8eqbLC>!R!dOcP8wUEhQU_?B zOtruc7M!q4obgz_OBU0AVHcy?hrqJRJ>Fc!Sl{FhK0%p7)}bkR1ymGxu;)5Sd5a}V zgBfce@@eWTkv;{+@xR)tOHlIAyU<*RL_zrw0WyNQffYr7iYHV(b}L}1sG3;y*FRRI zRhl#6``>rfcw=4+9h$X>%buc9DzrNZ+Rqj^EM4PYnrQp&fs{PehE_XD{T=>vJdke` zD2s4dzi}yk?ut4@DvFz%>TpR;+wd*fCguhLNw*E=wRG>%QzLA=w^S;r?5o?X-9x9_p zn6J*#30m#{7+ln=l+eFTyh18Wav541jqb;9sSe=NGjUQZp8qx=B?Qtt+u@+NFZF7& z-H5PUjGts>6*}glcG_cmT1Mn?yX4ve6}e$RIrm8>UUhLiNNKBc3d{!VvQ1g|Pzxo& zG0&+IMzh};F`Br)-5|AwS~1mMBNIAUX*9<}cq1E|j05zkIGbtJJU)!D9m(%Un~TS- zGnX1ZZsf9IDK!jk47_?O;^C2Y-78S5Vz?P4W5E-qI>Ktwr zT;^rgGrt48QPI3`v^m*(NB=^y&vRL&^4L^<=P=~c~i#Ev36V+f(@!C!od^3{SH5G0)Ngam>pnt z4c!nYeJ}otWzZXgqD|ne=p@3DvOqK~7vU(mH}K>6mM0}9@Tf%P3D|uc_wws%=Gx%C zK%04OIL*ejtmx@{e@p1t6Up$Hzm6J3Pl%Nd#1;2yrFTK+@-QoG1<%W4b6;=E4GPXS zdtcilR|2=&1;4>dp;vj*_8tC-RMu2SP*LEtwr$+z2SBrZeUDm;%9j%eM^%r?t^KgF;cCnX^{ z^z|1w`;+=caVM_K8|y2xT4J_Vab`#92Wy71T*Un2wDda|p|W&Cc8n7fYoX+7WfD-e zCQtVpd;~rrma7iR2w|r^H!nN4*W>B!?I4Db#*@ma;scqrakebjLhRjwnYpGWcYU-D zYI*2o6xib+>a3}u@;!w($!3j%`897)YoP1n?CW{$r$Vs^*!p(yeLcs2PtJ%wVd!%B zI-iWHe1h2~kK>uom>9O4GE_c-QUp>(ExSCeT_LTg8=W_}Ws$r2a7#AQe8leKJ|i1+ zx!{`+5G6W9J9EXFGawJ1n{TwWW=w^P;cxN5n+HoS+O=GpB{+%>B$TLYW=NyUea_=j zuq7tdO_X?P)Yxwu89G)wSgtcCbpSJON6KSj?dy|ut{1(oh%OVL$^LL2?S(kA6<-U+P|kI{Xo9QbV6X?N`c_9 z_;&Jzm8#tek=;`IUVrPR0d|Tc&9Vv+;CgyQ6og>X%7Z_PDGl}s5g6zFSBVo>nd;@x zyfb$_hdT}?)v6+}nF$|A(vRACg#m&_cURYXMJUmZbet`k%ohzZ2r@Qk&H1&ZnhKj* zNy-<+9|PmCV*3t9oiQ~Zy0eDiu*1d~AH<9F(ar<+kxlk;QxP+2%0xlr#&;jKyk~(* zq-Yq*XYWXob=#&n3k(8kj&Lk&Zzv)V;KYAAD$jgC$c*2*pwbN28EVKHe5EJufkK5l zYI~UJd&WRIKjbG4f0=+K$fP1`$tWdu^b(%iFW*}$! zlO1{WX5YOxnX;T9*9>@fu;WP}oSvu;7BiCj8x0qXq7`yqOcuugbt-jP=OMTVW|wVE zjB(OPskx}(JFW4;o>Qrq4sv_o`5FQ?km<$YJ${q3K z{mql$RHq1?fXOh0QChE-$26@^*}rJaLl((8r}@EQ4RKRhmDqewp34&0qkiU;6X^a+ z%f-hBIhy0A4Lp4as=C6-ED;R`T!@tc_=(SfB}HqY-~F1)LgI$nEd!W{WK zW)#7cYQb@$TM*-jb!ftcll~enFIm|20WvF+1-Bg=yf_D4hz3Vw1|5YWj9;WtH;6$~ z+>w;T8<^z~eWoMlLlId8rIn9-EGFSb%Ub#}_~&81;T904MjXqJGMeRd6({WUAgZdS z_=(gc-nx74qyL%>fMO41ER6VMNX={N->&9d_LU9w|1r~cnh}A{zPQ7G?I^Og@8YcV z6GqO^0b&e>NO5BCLX>)~iu^|*u8<8^26U65CQuq|>>TCQQvl^P(d3W)#esR}LlC5> zwAPM?oa!{+vP@JL!QXx58CLK_KBEy*&-y2-Jq*y5CL1cmRHniQL<#Wv+NM7#r^DJ@oU^q3WB^KAkNDdH|7iofl@qdNpp=g&N?}`Q*Vj0r9i!mTA*9R1vfk3K2PHn^GZ-}j znlOByF1^*GE4;>fW%l%6E$Kf4I&e~t^SbG;q0MjPz^|9Nr=1RY+Sm}Mz<6fm+0Ee~ z0{0>sUd`O#)JL1P>BRhn2(I!hJSrXYegb3vrPX`B*T!>Uq@UEd6a|kg2Xz`2`&y_J z1?=ma7U$}rAo+_mJD!em>0wcdh$oL08uKR{r^D9fEZfod$yDp*c*;m$SvXRwy#Vh* zVD~Hvb%>AUgxIpbItj7&@KFF#t-{ub&)TN39otFGjB)W*)aX&oEqWuik(iyb^FYn? z5i%?lTuZNX%2er}Ff9o7B0rjjo$F1uXU(Zc4tqt0 zwmu?B8Md88^?KON8XdY1i-M;^CO{1BLVxfKaAVhdWtToSqB9VYUOW8Z)HB+sDQ-#JUqCm}n#TE4 z=y1=ZXZ8G;d>4+U4iGasl+5{a3hhtP%0e}Tx->RDyFnr8Hf}>m-DyuS1+u!VlwfzY zRMKP{X6T$o!9JcN8g1jCR2G{#ejGCFx zI(045u5$2C6}l;tR?BWlBfxk^TjflZpJOR2kw%3|F(DGna}tTdm7weRcpVavAHQvS z))~_9dtZxSzH#8}WF384F>l|EjxJPkz?#9@_V>yMH=av$vC4d$b@)o!e+lUpJFzYg z4i@}1|DlIzhXrb0yw>ME~io5(>RuM?rl z#B_G8f7h1Q{pe;H2m*8ssYiyPB^B@K)SyK+Fcx$Pi`w`1Td@`rG4v_I42l1k8*g>p zLS|*rU$rc8gDCH0OrlfiOCWQQy1eQ%;}d~UNqr$lmC!B#;4OFuRlNOvH0#a1$le$1 zpZ-;~Kx+n_S3I%fAa2*F&T3%+oolmR@ z2!@(1Eb~bfLi44o5Ggk~zkAAX4R!Dy+=k)y5&RvD{w8-FaMD?^PHQUj63Wt~mQxV4 znRwkHI5oi2;aPcm)&W+-yXL5r`C{+PEs;D_7Oelg@|{@6Cpk9N*8z%)@Bk0hedw+xT3w~~7~ zJq>)_yk0oJT-;60*D5eE{gbxD>aOnC0u{!QT2%h7Bt@IG75cs$rc^ZT&J*s!Hbuvu zUAAN<1U9tuFVhp-O;61~`V`P@q-`0l1yUIw;jC0CuYsgKpYizP?_ZWzyYf9bC7R0W z)pj5S=C~&x0p42-{=8@>%O&zz*M11()h|{Z9Xg@jIE71tEvG&M05#SjZ#EjMj8pe* zfgJAh_YPX!c}shwXCh}03W?`V#Q*{K}Fm{UDW z*=+geH4t&4VFkCBcD3=Sr5Sxmf9m(`+u*t1&+T1~^@F&XnEloIYUV+4wKl#*jCa0D zt9GR1J$(d0YUVEjk_{?|+L%L^i9MI2kJ8eeoya{zxZfA|b@U1_iq!5y!Mp3iwv`8Z zU7yvyEc}Z4mu26vjCJ9AeORotQaz>TVWppcNq`VNz}HLr*Vf4Eo6)grOh z7%=|3FUtD8Q-<{w{3{!{c#v-%`*XLB#@Q|-VQ^f8jZL)QnvZF1UVm-meC;fF^e_F~ zj!RYt{GvyAkvh&41^XfWnlk;I-Zs5hiUl_|`hl7IOG=veQOtoCkP0j%FQ}4%g?Tzj z(!g*_6BVv)b&%w&@w3AyA(j<1xOZ$LL4l&;2{E-e2Xo$xD<+$ZUvaf910e#>tQ| zOkTT1Q3WkH&T^x#qpG!z{a+`cyI1LFEjTbKniH-Bb+~}WZFgd%qYnG&q6V3O#quMN z4^I_1Lq>~U^{xJZ$-Jl8UeLC@DD8i!o3uX;peP93{{T1k#@29bYyg(D9pC@T(rk|X z%hKcv26EJON~6Raf36t|a_=x0n+CPDL>en&Ldnl#ttOs^FY)dae0RHZBPWvOcw}Kn z90cRdY>l>`FKQQ>!AA{)c;f6!F_litker``+ zTLQ;8R?`C)&hM6P3NEV<6A%M*T@%p;;1<@J6d5g1CDAw(a;(L0M4a?dN2AAvG3=nF zTNi?Bl2DGz0v${(lauP&)mXE!73wmvShL^O8uH~5YVe5OXct|2eBQu$n{m|rrI+WM z`vi+4ziu0{d{k6Af@W!ZXJYmm@qZ8rd^@FUchSSjuxYAVckvZ5g}_3Vg4WkT2jBWf zd=oq_fxwjSkJW@ve_9G!q$rJ7yP+0rHf*^5c-AV|5ab(8nhM_SWzp6PbpiJ4>CVF> z$=O8$>1Z=n$Tghv>~dcjECf)ihI-tuk}2@2~IA1tw*Gwka?rP!{Ge zD&anfT(owN9uEPZuQcLN^W5xjC(d4<@0IEs>g!#mo-L3O(4JtD%inIT^evAZhIfy4 z8k|fr0m;FZFPbN=dN%f<5d=X=t}pLK={@CGQCG@`goRS7ge$<4r>V(~t|}0_%`B>k z6$1?%F)NDjGjofy)%R_;w)x~XjjBcMXZ=@2leodfS;X8PzPdL%4RcR*L_Ik@uZ&YQ zM?b+K&5UJFJx3Dh&e^Y;QYXdwzIOQliEM@D&>cv7xhN>9i zZPvROx7b5>EDZ2m?FuvyW5COwBsQH?&p;rI#J&wWfkX+tl%9uJc%P`cjuM< zrl)_k`grRP*@j4LyHM#mm@Y!5U>0tshjd?GE3sBt7A9RWA>TuHgDS!#|5**5q!M7- z>z1nCJ<}?h91BuI=Qk@WMcajD3?FWc(^#vJGU=2hr~phc?1Q28yU>N5TC?b2Hj=oL zOh?7@Qm*E&diQoSl3z|6%p{%efkXDX@w@im3afeD1`V(J9IV4$1~lweJ&P{s|5)8kCtN{bf!|T2FBlEnlkFQ3LcLO%h{o+%qy@V?EJ5ifcg)I>&Fnji z9<-kecmfJ-51~TP1;^11hImOJXB}e; z9YC5^P-9()RmE%$jDoR2s>!X+Sao*qeG^%uf$Q8&}*9(O))~2lPXwt=;>3|I61V3NN2M2M7 z$Z(d(3OJ|1tW1B;g}K2&dy<{{14ZSdKB#wA`(j=LDLwL;i2BRg@v@t z6C@S^9+1?G@e(txnjUA#aki)`;@ReuMeXZhYirQY&zlu(>%5xm6OELEK=pG&NOoZp z2!r5B$TcXT+gIBvHT-`AfF?Ry5~Z?|7IK$EeuEI}Id;y!!vhl3x`@h@qAoyZ7iP?o z`qyi?^xwL(;9~P*Y&}XgYA>YN)~CO`!f8=h={gR~VCv6!DDY`8z95+Xfq!q{3uP>= zWdJZbQ*XxmDn5T85%V8lfp$U{0kJ3vN;YY)l6h#-CIti>k34INX#mUnv3|w`JObZe zTBncvubY2F2et^WForZmem9^j!%`rfN^Nd#X_O|dpLG`PT>bmo5yNIo?X30c=j8O& zE)pjR%IoKGzDFCp5|y#ELd+P2gX!-f|0!sH&^uOdp})3HBNw8Y0xE$vy7qyaiqW8- zGBgmCj3D^@^cp%5jghjk4RvxYOAr)SAjI@UE-avSR3MKSm9xTSgLH`lleVNJ z3l$k0Vg;iIa^LAifnS0!4Z{inhL2qJ$tDH8AaII7lztQ1ANAcw zn}*d3^V*%iZu3+8AK{iprYBT0F8L#vqo@n0S1^vYzSqUzc$3DllxnO$L$(%4BPp0WAU=IU^Ba-E+g8dP9_ap}{ipwE~R#!6xy;sm3OqdPRBFGoBCjvBnI0{iv zLpJn~vX$64oF&>_c1XYUHvC}8k&)asLi$=6$iTa5!Do)$C~Nu zUw7%|Y76|G|$^i2J@gZ5+SpP>pvvRYh1w?=<0Ui8fx;10p z1)M-zeujtiN!ma~fj|VZa3oS4lR8V$%Y6A%)SeSLNsR~C4nfHkmX>yQ#A?)5oGgZ` zxrlA;zVPW}`|!T97x*!JPGJ>dCnZ_jl;N&V(3K2XI(ee$|0buCE?$>%R@P$6WKhV3 zxpTQwOlKD3*&QGXX7R9a0y_SOHhSNh)aY(k@F!(XZ5X=2$wX}chsE)7dHwx)b{lXh zj9BmZGHc;i5$a1BW8#-tQ)Z?%l;10_pWB_Ao%bdgsRmUtDw%Z8Rl7~oh`Gwp?eKPd z()hd&lbR-p<7`Y<{GSPe>JfD<*5f5H*Tr(xS;tutF_!zaIQhTYa}TuMO%EPvN*rmv z)hw!9Rjq=~*pLh?+GxskY8M7L3pXlRsRF=Hm*#e*4_=Kv6hca;^$v;PYu=5Wp zRT52SH%qsx~txkxy{>qGM1W!EBQE0WSHuRaEJ!vE2<8c+zP zqe$o&O*hVr`R)&ZZ2HQio&?*vT=TMJ0IRx6Y$LiC1}>`r*G1bCeMUolQAfA!Pxezp zwLl508;IRud>@K3890}}D(@X+TJOn3YP~EeP#kIJy>_X7wkj+mNjP6H4P^Y#H`e&g z_UzJROBY2J(~Oy>&0;^`72>pJt*Z3&hiS0I8VSMiP~hZ&4gTwoDZsvdqlW5O>0gX8 ze3hTlv|U+@Y?UYX+;ljxNY}vjNH>2YCMmq07;67}ywH>Fmkbl6lSDb;?1s8+YsW^! zQ0zU#WTN}EfBP496gumz0`EbAp5C_k4r;|{)D5=_AD~o_<(cLhni={H_09epJf?-v zVV%mObRPx?D(HrPYjP88g1xB?$A96r-mEb>64szZLOHN@*`e>9uO^Nw@*Y=tHBvid zHOwflL!fWo6PdZIW4^L*2h# zsL#!&^HFA9Qe|E2SsNmcpbWK4dcLzD$(mT61$3ZgJGU1atDjXJr2R!8*bAM@jojCC zlN>e#$`>?58V&E|f=sKBXjYSPqLU`p>ak0MGL6AQ`hyF^3M)YLQ<8!46q2m?z?>Er zo0R}%XnDw-T0wrp8G{y~WCR@ZGQep!n=*rY6$6r=8e+%orf8vYnkWNc=z=u3=iNr> zGe+1qzB;8*N#=A_g+^ToR-ll#m_UhB8-v$@D&cL>t*Rs0QmscDeT?39O7tzisR^X2f>7Pl5+u>P=(R}pcO z4P3pDU&@)dZR&`gXoTWA-xuCE1rP~+-5&QDp4p)Zqkt)Ut_Wl{Q=)bSPsvU6DLGV!3V*@MqVQSKWq<1XeHL3TV>2z@1 z+|iZ(zWmc(4?GiOkgRI~R*ozsEUsI_ZGk=|Lj4tDDw1+&4uDWQH@}RhiLHEK9;2nW z6x1wIX;jltm%f3xDDIkkg`TJ<|8{MVi+PGT)@_CuwFxr0cjr2`msCTIG>TNrX`>+^ zpGpel%OYPaKn=3<7?M}Nl&tXfYIDeBKHU)u6rLP#IjcQnYU>X)Jb-Q1ql|jHtoy|s zzhBTQD%j3(p$4|0d$`&-jpYRF-i-iP1>nT^LxPfy`hQ{W0r#D5HpTgB6Nt;?;(n%w zJjvZUOhDA%hOpDz7&)_gvMWNbBok5^MVZ%YLlc6`zz6rpj$tq@dqTqhbR$&ZsGu`< z%<H0%S3$E-1#JhP_C)@%4fxH8*ec=UZ z12W{oAObDG<`<*JXi19z>F`5nY%8o9_3fCB-7+pZnYyN~v@{tDo$7$PyfBUa8DGFN z!;KAGk?9w`M$VIP(&s>xZrZ_@U$C90H9diKbrb$|;LE=D)glyQ=DY138cM>O`rdX< zgbOLPB!F5BF|boeW1aOJ+Fw-!gvjLw0qW$9xNrw&?3SDqzSmBp3LML@?P7YeV zRM4=|3iI{y@|>j;x?Bjk=Z69&HvC)MCAA(*PJ&cOrFG78TR(uY(J;vs-pxmJ%EUAW zbA8iy*3N{|r3o|x0nJH0x}~g}f6IE(#e5MHFR}~OR)pf^9#ot-@?*N?xTa4rq0{Jln&;*75O%biWramvRj8#)5h-E%?HIWJP~@ z-B}F{KF(^YnTr9Np;pW!blb119I?fjXB2aDdhvw&SF-uv&BPRQyIsD!JiOrqPXy!q zT%FvmS6>S@DGo{STa3;)&kD}WFP_ZNz2N-e|7}i(Poo{RaREHh8-7%EkhE?ZXuEtX zrbvy8rGnJ}xl~GsQHX`mrmHG=AibRZIdy1L@vsUk(ty->7L2hzMI0Dq8-4GELb!Zn;*O zg$Fa2N($?U5D~wHF%fd`4RTs2%hZs1mY4YM+G4-;8T=xe%rr>5ynIW^u^!=_?^KE- znjBt|I91>nS{IHzOcDId_dWi<#^D{0DCi4rT;gns+23hdRR|Hx-ff zpmc{|vjXW8O72zAO1SBz?&Z;kT-I?DIPQXtie_z-b(+h&ziJO)psy%ht^<-EM7-+6 zOz{obH;@2$&9YX>i|clNW?pFv5BLa@uLyq(R~2ztgu~xIf4;`z?zzOD;)KDN4F-oI z{`VD*2O;fBKV= zYWPW8t{30beh;lCOZU&+;GgMr!?!>872Vup2nVvr#!yJh3>|kJ>o%+Tzg{m1Z?@;b zw+-7@9nO2>oEeQG;6C3srO)nWRvQ;(>9ZHX$FU4X&)ygE7e!so{TI1e6$2N0Unha_ zsavJg$u}K!A#Z-)P`}3(C4E%6SyNp0?QX$-wq;A8G<;Nl+Tv?=`3H_4OylSqSw`7Z z)=AC@QmwWXAHWn%dl5Qp0z3DZLRfK$&^lz87!ydl4aC<}Qz&pOrhCtar}=&NOqRg~ zI2^E}%A#COkf04kr-=rj+UC;+CES6lwwWPmXx2YN3{;RHAJpG@jNR;{NMIRB%un6y za%<@T$#y0e=_)*TbYQc0`Ig1CH9m5onji9=+0(7UieN%(WH}#$2X-wzo$G3=z&mp} z#nBp_xymzLzWB(G4B<|>aFo6u0!;cJ$Py**?*`BlEaCt6Sb%Q&A2Xemjpu)DbpQt- zZ9nC|Y<2w6f42HpWVJs<3n|jcr{z9!qV;cU2B{RSB3nxs_I5HZvi7@c)=1-r-shQ_ zpw3M7tEGBS+1#A=S?AeqHe$ADsn9EfZ|8bKUjpALsZK0EhL-g+7xwmJezq|wI#14S z!gg>9HYlrH+L46$br(J_QWR0ncv?jCe&zdc>0?! zM^{%*+cX{t?M4S5>olrWF?adja%2Q?P6yBa3W!-0i*AeQs6oL->*;iwwyjv5CCgO_ zRC_6W1`I%+Cn_h#XoKm>^I137DOzKkAe_3@xhI|W9A>+7^PN9#VgGS$KY8A#2@!x7 zIYIAwdR1<(4Ub7=)>7OpnzNNl;hi6UCCPS)OW)I6?+=H^1r>MobA7+BKX&bR_;MhA z1!I;`z}(N4Z6$ZASD-=I-{mAxL8{zBlS$dsT%C+pa{6zXvk{cvsVj4Nrc|^s`E4+s zyi$GMSua=v@M!7GR`(7#mjO|{c38mSPu^N{=AP=V%PcefPIMeCpBImrf9(h7B*%{z zY7glzIX~oloaUGOv;ClM==u0{(S>M_wA>DH4Rrp!AF*Jblq zWKdZeDhnsFe485$aK$svgUX2#&}5K)@(I5yW=W+Lx7w!mcpse55eI(RWqbn{h?c`) zFjFT3F!=K(jMJ{&v}E-Bbr~xTdK~jFG!)pr>&8`0_*H0581-BZAVRV_mP*!0YLH}G z_soZ;mHXtUK*|cWPqB`2sY8{%;*qOT-lthPJo$Pj7biA$OTi|5Q#zCc?OHumF{3zF z;%#u-kzkByqVxeJ%C`x{vClwBTPTb~jIe2xV9-sGcu3KTVmW*`xm-l3c!TAlSgs3x zj+?uKKbKlDndA|U$X|mHfX3)-YXT|v$(i9AOMi;X8%A$BOXBqMZ|PT*h5&Uk3uZ#` zht+RxAu5a2?~cqJUB8>BXVvHN!8H)!tX&aW*B$m;g|~772n_CzQg)!+?oz6A>|)?l z^-NYtu$wtgWlY24YEsgIR6Nn54-bzxG&s-t0UlN9dxh>F*PIS+_cOBs)#+E!$a<&w zKk`@AU=x0UtRj6si{EK33@d6MTq~M}|9h4o{%@8b-a5mTb!YioFKR88S6>ps_52C; z-xPsY7)5d_em9T=Xzy_GTa4L-6Tf_twX{(8Xl^XSoUu?Wt5kK1QM#K2Q7%Tcui zcYPK7L!I3!^V}(`b`m-`URKS(#ZZ+lp5n*omP^Wk3y72J-(UJ7D*IC5*L^f^o$*Hv zTSv1=lsEvPs9jzSFs`Te>tAgNF6+n6W1%bhOTUmWd#0G`faPyqhHOO{uiqn00yW+4 z_Ix|?`SyO#5MnD|?3dy>5>Hvv0^(O;qa)M9zA$U~f>0#wDowDDNWVhUA#YC1zxPRA z(CS!}!~{2mcq#pTmoNfl!FPF( z9xm;23{fL4fzNipT~1~0Y0B7q_r~ePU({3Qcq~wZa8s9Co@|fk$ZD9F6}7&5GkonO z{EaL|+L{S)$`ZoNqIS2YqF$6f1Yv}IN3rcf9TflQ>{~B?`bZbR;kP0XHTn-`Do(wGa4O8WgEM_tTzI;x?wEk2$L zXV?uovrq<3AG420Br+@Gl0zO#el|p0UrQ@EFr3{*^O=b(-l+bK7-Ua?O@;22LKj4g zXwX&1jz82N$3t?!E<~4d(5zyVL_!$JUuZ9P**h`N1vf+#;|5tH{YgV(G#+CLsr3j2 zBvKTSYd_N3r7BnBIlmHo6jlK#Z3MI%X?4`k{MfKCQoNbQy&1m&=0O!rCjYs|6dw=) zvD*wm)l=X=%VvOa>0orMMkiKNSOyq z;PO!C9ukPpnghfYF0h_g~;?t4vvINdz% z1yIDlF{givq@Z=YgV=6@g1%vP`T9Lot47FaNexP_!Ec!=8?s&6lLJLdvpoHQBJUk% zphwrvQaIBhQZ*vP`}`yzdTEuOGz8_MHN;yA)tXhsZrF`h1x9D{jI@?a!o&4^QYo=N zOgZ`f+QNDnuDPFkj);&dFvC;F(GxZA`111ccS}zOfpTLD_x0zRT{p^#iB(Uw#em1g z+}-Wmpi_*{*B;C7Z*a(oCsu+3sejI^p< z^$Z(hMje>mWC|1-Qbg;T;B>o`<>%O2;dp7=lt-;B6ozZQKmRl7ULgLj-uQ31!Or%- zHY5uR0Pf%W{}LhWod5HbpPyMSEj<^M@n7Uw$9{7H^|~>WnDixI9?3Y=d)GD(jkuL1 zQWvih1`Y++%$m8;`SmzU%QvG0HlyT;*@tN* zi8+Z`^EPkM1ktChw+0;OD_M>!}_HG0GN0G z9meq#Vh_eukOZV8e(z=yWM~zc;tD z9Bu}aBD&p*jx-dFDD;cP+xN@O&GEP=@!w*3y;!^by{;xKrZS2gfwZ{s6X<==IMshm zF6K>$R8*uTpxgfQ`q7v~Ca)492|Pxw^l?6*pn_edlW{+~&Qdbd#PKYGg zwvgYbJUtgJ(ejG${KM&s0anAmUR9(!BAbg+u8w`@_d}XR^<=Ln?vO=!q@6cb@}!oo zN6xZ>V=|QrP2@t&%}?b12%wzIp%>uQHN6^d^)3?30y9vedTG+Oy;HA)5yK`XLDl;k ztP(v|-?^1>kOLE2nJ22NB5vNWNPUuwf9avG&U>VsuaSnpIu&3YN+YJ^T0TlUC>!12)XRA^| zkxu;mh;=l=*At^CUNGUFRnfNnN1(MX2o{BLRH_Vm4EOTus5Epv4{ zyZ22H&8fUkPZY;8WkaMZ7im+Fu!6`PvU!Tpq88P#2QwihC`hQts7i7jk^Xxe4(@B}mo1(&l0?w?T{(^bUyfm{qWw?+WrJDcmQb zJSDj`R@T_-!5m)|Kt1FDQ`N@%O$k1A$Fdp(334(tY>Z?ToG5@vU5A=FzbN1UJROL|JGI#mD^v@KW%{_#Nv4*qBs}aJ zi4V;EnVA9pMuqlBn2~6Xs0tS8bRnx8zS$&9!tH=QBxS|C>knNb-xHyp6{?*Y?puhu z!=`QF$)4F{!!;AVoMP;?qDZt zH4DVr-UK;c4?@8EwG@OYitL7p{&!1?AJ(ebbOV7KI-YEp*1j=s(payG->J_{ji3D9l_lQPkk9dz z*C1^(4CaQQU0F^|AuGE@OQR)*S|#Y+v=Uf>&`BTivTUkBH{aTewfgEBEzk!S|Ms^= zxDyX=*>I6_?2W$Gt#{NCUH2idSp1tWa$oz=r$jwc7)=yx&Y|86mj(O)jZJ!)LTk$z za4#@Jk8$%i5}XhkHg=0LDNMDY_l19EPKgio!D*NGzI~;pI2(x*F?J#cTIKfSV;@*w zB3$|m$PN_jq%ujyxT9X()m!-2!b38!5udjq#qO`1- zbuSyz@qIdR=N&-?-PQ3t5(57mIs{VhrLV}tKxqkoN&Ia4wCzS1SA?G);ToCYPlh@p z&w2gLu;DPAZc>H)JVBKq#WNS&S_?0a-qRtP8SplVJ)A@Zq~9_TqKkVivLZqt63BZ$ zRQx*SAn)sViQkhhP5CX|Ab`H+6S;+f4vPBzgJ<<6v1NEO*wK0Se*NJli5aMRY!Ij5 zSx_oQTju?cjQX3PyyZr&mWhg)X-DqjiYc$_g_|-7yY@=3b|U+##oMWUB+Z_%pp1`Q&j9X%i+m4WJYkp|*A2-I zB~eXZFS)+OLdSx**ufmQ%Lf!n>>kwV50}RWU3Ok6NVYCBerIIL0|i>;NS0Anh8+PDo)P5fi(zJPF5gtLil%{0L+rJ zKbLJ3P!}r-rBTILx*cI=B=e01EOuHDaWA@!?i9?I!q}fN0~K7mZCA}+_7%NJj7DU=ZY_>=~I_DvFXbBLFPVIh{fyjkWJs5Uofz}$&*2FV-#;H?*0}1 zhA&t79~fA6v@T%9m>npA48SXlGiIkUlLtQm6oNuZ4KDYT&=CG+<9wN#cY$K%{}DRV z$KR}IQ582%lvAIxvA>I98QF{Jv84L|;~a25_apR@CKOOb_y@d7A_Md%`Lk6_6Yr*C zo!VnA9^a2pWf5>`O|AOy{X0o2{)&KATz4d~4?tmlP&5>Q`~wg-2E|tboW&~Ct2X%o zMqX0bBslZ|7Lg4+_&AwIq!>V?lPxg;s&M}zis6KpYS}(&)iIkw9vn&s$^z=O`tWZ} z+E-bmon|xQj!kG`4xm7}t^`5_o zN_^w4PW%UJ_JGNZgZAW(M-aP(VMIs021#d%K@Tx>vWer457T%?Uk|^ubcz2!8O=Lx z^&Mp9Pn-Pe-h5j*ib9raeuf+o&T<>fcn={=c9r-o^Zn|#;^uX66|)K7hkNl9Els}+ zym`_)o4cZHo<)Aj4t_B}?0Mge&m_^K9eB!F6Z%&zC@kB``WWsWh$?>1o2i~637@sB z0#Uv2w(Ywg!5@|hs}Rj9Mxze3%c%Wy`!@Q37n_Wb&%SH-!$~x>5Y{9Ifs4UC@Tmd# z4Z5kgVvvSc0ZIVQ&Bc<&QvoUl)cW-wVf~-jtjKBFka+iTkNc*gyce;A9r~(z0tN~S z0L`{OK{|vi>Fw){?>(Iqb6mlRSsMo?0F#H0FV1iT#Vt1;@A?QwzO2n?IS*3<&D&-D*yYdZ=Hzn-?NAHF@b?!L=8j9);ud&tHbhuaO~ zAKumj3&YKSobwI0?+lL!c6nC!f+CppuPTkUa}Cm_JG$YCBL-N0&CN`bGFh)_cqd`+ zhEUq!AiFK9-0kaf4->53JA)Fpy-XsjtGb%)y1oBNM0Ku7SG$EsYcje0fF&^hxEzsuewCc;y(yqn$gja3?NP#g`Ts}OIW||qgo`#iwmq?viEZ1)OzdQ0d&jnI+qP}n zww?Rls&hV_|Ipp_RQKw&gvhsB3OZ6R&wF^FEgE4Z9un7?N5+Im@_zMtT?c;^UpWl; z6aJxkyw=$|sl-T@_TF)IcKoH|=U?(&k+BFG}d<9pG z9<&#CrRCB*yGX@UWWNR)ZC-v)gVlyz=Wj@zh6mi+Uno8=k6A;oHXk{}&Gg4YT;Zl! zcN~MG=q&30o8q1Jcfg%FTjdYq7 z%m^^h9H!}Pc1JAKjP(itoA}C$x~W3upk&UEIW)V-goPI_+scIX;gHdfIHrP}VS)d$ zReK)NSmu9=W%Mg~!+N?6Y%u>`lipQ_=J*El0SIz8Ht2RTTjY2hWx88{I?Eym(i=5H zZ-$iu%oz}0y4-)toT2xD|KaWMK#ZB_nF0biKCYS9x#V&~Xnn!Q{e*%R4G4F0NAo_q zFDnFUBj1(nCSOSm;xhG>GW?-(d#Q)zwpNaszqx`y+r#(&5cJ3qffH#dz68a7amA&i zKpjGGK^mh9>iR0W_hegE2x{zfx<6n}&pl0)5Rcj#ZTr1~3xb1+ru`Fw$q(ut*9IQp z_k9xv_#Lh3$vaS=;JPVExH=%wvzLt%<@QG+=-L`x*&*qKhU{p3)kfTaTA?p$eL>m} zKvN1Jp{L@51#Lnih=#P{)FJ|8-1_YCV?!pDjm#P$TfFw>{EDv}-{6FAy_5cF3Zg}i zU2ARYS^8g3P>=?!;J#RNIQKInLjlKse~13Oz0R5t5QQpqSfPTyCNYO8-hc~zQP;~a zQFf8RbLmT#wn4KjvrH_JS#k`pi@?wxyniuCH-UxcE1hlPvn6oAnghf`#!B9cV(OL)F7iB(l&@rG=t^>XmkUC0V z+!|*kV5k-mQLO8`0>t+E1hPS%vF&^h?m|DFtH%vREJ7-3zNMUGnKsn1|Es>0Mk})l zGR5`f{Uye6GkP*u1BsU1SHEWDfNa@bzF|5YzX-uspaH)OGCpYnc6E9s#O?g?tC*OT zYrASB3wc&cti?gBsx`-H{|9s*W-i5+&%H+`3MkK(%yj6YU@pMS!HnY9Vs%J=qS`tX z-B+Fole&d&5j4ZwQ|Fx10O^GJ0~N|ZRPGQ%%A0veV3eS2&?6 zZ*8STuAd|JaC`Q%Zap#d4<0vwI?v|Ysq?)yiHJF7XGeW(oU0W+l?qram?HTb+5Qq| z!bwQ_$6i>O_}x%ivZmo3>X1D+)-_=FKL8c+v~(a(X}wGb1hmxY^ZCsg(z>Qh=G(i; zjctipXfQS%r9Xt&h~CR!;Gv}=P2@#!Dpb|PfDn@&R&c7*!=6Sy7Pt#YcehbyjC3mC z9UZdDy(mlVL9wKJ@B%LSQHr<42h$1Rwrf|F>*!S(^$d_z@KMidOu^>O$+XA2rG}C1 zqUG84lx4i&Q~<__q*o`9enB_NLv};V`_XX84xu-@v_?Td1=MF%164S|O0o7MN|uSt z$NE56aV)M-~nYHjrM?RuJR5D~fY zZKnJjG$vyF6F#KvK#O{TV4QuqxZ)aMPJ4~tiS_65?mO}q}Y^Z8trMZ#{;a(E7W0>+isGvU0zQG0s zQ$d%Y56~$?dxnRQyG#06oW9xj)@VYaZst1{uq)DXl zF(0-E&*MW*T)A{O9{UkSh-yAFZRJ(`kf6hXKrUFL|r_|1*a(hnXTk{&o)^r;(~vI<^x)HA9?x6&BkZ7YN0;=UeIY=>_fcR z4_T%N{<2CdyeB^JXYU5<2Z}c!1-Su$2g=OcLf-&T0R^q|Y6)lp*uervSt6Xh|3PQH zZ$y;h{I27C-}q&VQ3kTh{Ils96!p7SgF?`G|3?WFJBL0AB-H?M9&6gz#I5@MeaF$z zA%1D~x8xTXY+k>tb-m=aid_pc)Jp+7&IV7nyrx|;1DxIrJ&`0gENmn8)KFIvm#aem zC$E}NZ#1Sn=li%=LsLSU>X22CIMmxv}=A)a7YBgd2Eh@cj; z?yB5;k16f18!%s(I|HN5Uw&PxJtcWGp)OO}(GlY9aq>W=nt8Y=lq=&BqqF{WfrdxA zcEOP=WjayyQ%}e%{3M&Wesy2&-$UK@W|heJ`T3D>bXoX6dJ`icaQE+uYC4o)OB?IX z3Et{)^*z{jV|tjb6MbV8VSBpp-<;$aqjHGoUip%$1)j+53zC9V(#5`6_!&0&7EiKK z9JqwMz>+B5oAE%o9;VU=Z;vp&#MWS!C~<9GGKMXXS>N0v zA|dp&R35$X5r}|!s{Z$4n*lT^U+XA0|3Cw$mi;FItW-ka*2|n*lc)0Q5Jz@H(t;&p zL5a8&RHd7EM3bI1Y@&cGBgRL_CY_J(QUU4YHb~t%%Du3_uSrOKKe7RhvXUXGzUp)1 z(BbvWeOEy5*Wau{Cg8OF@n&UyDYf#OYnW}jnNlEOy6wgGpM< zPi1n%XKxoap#+aL&C?bLeejk7V!?0h5l%lWXS8!z zHR{<3Q_iQ`K{{IM#2U2DP*|)Ewn)k{ZW!x^=_0t;r%mk0b0MvC*Louj;!4Vcn%mi5}0gZgw#qJ!NfCwk~ zZCV2O$8Wv<`m-4NYCUa7+5+?IlDk|&y%3xwHE+py42tm7(FW=(1`e+aY+$(>}k!CL$>Bb ziBi}rRq9TPyAI2pF#iw-FE^KJmC>h-4|@x}N(hI{1MRaN94QjgK!)vVIF~+MM+dQP za1XDf8Eem5G&dm^#}1UN@PaJWW&B5Cr5}W~HojQOWe8H7@we;2J5t0|r>;$U`S!K- z@5rN?DG<(n;FY50=m1RLKbZsC*{rz1VS$kR4J9E^H0%g+n>h}EG#1Mke@y}cv|!q( ziaVQ}>_*1n!BsV+rB%cb$D3b*gD~k>{HizPgy+;i?mcv}s9jopjTB9cIljU$>8{doaBbY!ljwHK-vvYOrG8-XY%Yn;2FHKw$Q9~h{unUlf%0TBphZz zf*vz7_uKY&`_Ci5D~o@UAD55Y`Qp;n=mRC(ns#KDK@;u+L`|D?1Jn~LNV;4o=Vfts z@dMTgW0rJyvh=*^hBJ4=#JZ|-TI9@x+u5>v3n2VEVPCg0yb0@(Xp~&4Utk!aRvz{1 zT6awjXjQX>7ESOIOQc*3&gCe~+16f??*VF&Twco%D5%2eFNziU1^QZ>Srws~`WbL> zj}@%tY5v{h$9`+o@ww4cwD)THdr=nvuM+YBY58pGBBOOuTK1eNvmNQpE#Qps<$*oT zYe|Lb3GP#pd2}FBlZ4c7AY}fBw`Vy`vy5IDNa>9&L*&#i`8?NSQ9-pSm?sE>KU2|X zp*##18C_`ZwTfY}F{pd8@Nd%w`ctW*>$U1%W%>Qk93yMZ#R4kse<@bhPxZwvJGYY3 zolV3)A;G!ezpcpHYo3w%{@z~JK3ccvVI0lb{YM#`Oxg$~t8X+DZTNWB03*t2D}nY) zz`Wq6kH;fTIA)B{y$zL7N^_`DKn<1%Vvm6FOVyoeYk!#`(kqAL(Ghn$Z_T(hT6qCk znP$(`(cn*N{`0gWj&`gnolwh^j2x#kGd4paYeZ`QweR4Rz`&=yM);8%p7 zkc^R&z~QrpKoIY?q41(goIs7s(LPlu`#feGY;y&J5Dt$okqY9^AcFVtAJ2}A5-+=$_zfbcrrW>Zp&%rvFVT%ZqVfq$m-R|Jr5x#8r5QenoNizVnki`3fNQrM60bSYVo zDa(|Y!T8$S`(c=(K=uz7@E9&`Mxz$W0KS{6hu8gnf2qOsq{Pf6|1fA)HHc8vV5BsV zNjbRA^+rLU(~C#I^ZEE_L+@%v95YiI*T?5!Z{@^?S_xAa8RtJOinpW3^JG+m@Gs7Obcvh$DgJvD4vu#VKj8}B`*i%cwtyHU`xeSEPdgjc1WJV z8Dtp^JheNvHY>+O`^6PfCf4}qt4LFuQ-hq43|fk&`d9sPf(1ZkM8wOv{5P}$w{^?4 zBO*yGr?qv6bgFtfC%Qbia9?NXKy|mxd*1b?c)fn7>WlT^u@Wb3oc*?3OPfpjJ_JU8 z;2hjfQ*yA_(UOKWP$MKwe8It%5U(GMItuEK>MtJ7lS**s*|p61eA%kkMlbdDU@ z4kf(LdF|!td3f1ad7dV%7iy|>hajJ4vnFhHc^zcOz=u{F;1M{8cdD}eWAF06AU~AG zP?bJ#A$pbZkgO#-eONk|&!UfWYk;5rfQ|f`Cb9gJaNl$y`4Ujf-I!H!X-VKCmemVA zK3yo(f|2Dk{5{r+U4&7WI&AxHN1*bTk5|2UR!Sn|yyRo%?(_2~S(Nie5C`w7@GR$b z^4mfEHI|Mekj2d;$s`XWX8FBi<8%bb3Bfq(XL%TrAZ)|YVR#L5cGUcCoH`Os`MSVz zOLM`f%v@qqOy!2239gPXtP1hFw4vZDOe}9ZtLts(?H68_11A1OmaCg&%AmffXovt` z&KJ};T!18PVg;e2QX)%v)%SQBt%2w3ukzW46-os?;173z$}*(_Fk>#Eq~`J`yT=m% z?DFCI*cdze*OL6TO($A4uTNbHn4~8szTmSd<0&T)HG(0qU`tKmJFuc-vl`G|^Hiz2 zxQylTXQIz5{vrf70*$9CJeRFcA$3hnMw;)ihvIJb%1reSjXUOlTzcXwM;kx2#ki8! zXz)=6`VeX?2zxO^#aU>O1_1(SBn$hgFJ1L$uvbjRbMqEU{i#qTY?16njUsIEm4%Wf z4qY(>1+`8z(Fv0YVSUoz$9DgopukMv$?^U*-^qGU<>k zm(_YD!d_VSSald62955C{3AkUpSXkqKj6p&UQg?*f*5zJFw*#rU8eS#Pq1Br^$pxC za#6WM)%G`tT3ls_4aZ%FMEY4BVoHU z*Q#F~a}QxONwN!{VQb*EBaZJw5dzxj*Pq(ALB!u*4*-5I2qir%w}lX;JCwI%PSg@W z1YR&fEGxr>Xa{z#2Q}nBGTPwU63NZu-s&H+lT z&USV-YY#@ii?Wb;%#NiG4pCRoT!;_byt*a3A6yNNCSO`j2#5$@O*{(t?l=RIVu^|^ z>Uv_dau>@6g8K0Q*d|c93NmR`Bh%LqzwRF+FHnqzY3bl6V#J+`^Z5E%XXQaNI0+7!MNVaDhJMY(&&nXP|x zV^O*YBW*firx;PT^q>8=l`9vtQ04KdXnhhfv~*oKR`08B)}Uf|FxS&REqrvuFmt8d zHQBQaO$a}^UDY~J@_2^QWCYE&En6ho1fl*kjpHMfIsMGi`+)NrENtKrw8BPt$0zk| z6Rl2Ouhz$Vi8)@uLI0HLPd8xJuB8jdgF{ENGp!j9lV8hsk4^dcj3AJz6G}?99kX$f~4S4a6T zCD*U|t!jFa^;po4D7PbUMU}jtU|l8qvb$k;PaCS$#07MQFGY=%A!CXXWpvO^k7*tE zfg-xQlpU0zq8C)x%vAF05Mxr-vE`3URfoK~lczm7@*%h^T34`eL2g^@a8*z>k-QY1f6Ky zXu0&`*yCUTFLGwmXUM=em`U{Anne|>Vx0$-h`}NX^`_nb;qSV#={L4-l74CFD6DU0 z{h&jA)21uRzB2UY;}ddu;C?AhB$S9m5sUV$pAI^KgC;PT873@e)CnK^Ybnuf#8pdA zZDR?!o}{z)0a{;k@E(HF;HAERJC6V}jc2ELDr+ z-=8#yiUQ=cj@wG$X%JQd8JOpd5>z0?bzc-B0{@)Nm$FXG%?Rl10-g z!xsoKB-rt?7a)&B$ozmDJgU^9gu8&)a8G+kd zoq;H*KxBthq+;*I0m}Y)(eKGDyR&F~)@Pw@ErPs0)RlZvS-;RoXk0$(R zPC(ySF>ZH0>$D>#Op*BULB_XKQKLY$q8%vAtEtT7j~461!Ws8lEC5!K`pTts?R|t- zF`{+&{hsF8J@U>ozx#Wi11+3V_n<_vgNwS(PF!NH%vxI`M;P^pgzj|Z0PUu$_h}w2 zU8J09FnrsZ*yF_j%b}6Dl%xj#K-YTIcm|tsOi(4JrW4ObH}iQQ$Ik%y4UW$$#{$S~ zhpVB4wjl{SJHoTr6rQ%N@h#tW5I77O)!OtDSP zW~D=x=b^D73~ts~sOx>OA*fTG5y!4k{+C+aAUzh{>ChQY;ZQuSV=1qo?@j?5A%SVx zR^3AWzzc1|2Qk};P5UY^fnYSFodxoVM~bmtY6!&5Cwdp-u^2M`JyH5TXRg=Vy(aIM zeVk(6@RA;{Jek4+ZDM}Tsi1kT6TjS}+}P6hD5LjRFb|Mw9zs+v^*)W|fe7?ICGQ2e z5!~aL&!nzT>LlhHT?3qYhrkzoMoS_Xhgm(AY!!6}h>7HsqSw2tLx?q@P=Rskp{^8b z*{S>%(m9;NQpw63p)yg}9pR(pHzs_lQ{_nRLP`X{RxD4=Xj12TCN5zZV}}uTeelwp zL_>X5tf}&_cg$3M5d?hK>JOZGWkjJS*oUE%FpupZP9s=CeQ|=BK83mqx?Qx{Ni$17 zm-;n*2&Lp5H^!7lO`5u?ZXkr6N(fDLlfGxQ40ijqk+Lc$A<^e!G>T(%u&}RJ*a|7D z{VZP_J>mf|M0pSbcIgyk`!ySZj%|2yVx+^9_KPO9QMg1;+ZVaSQn0%GeETge3)aaVzB5*EZ$0ZcWrznYL zXqLhsJW98^z%or+VPN-YpYNp0z+%YUh9pORVA`YG>=Swhp0%Mi zOHt~UBZC!I+tsHG0Ze-4@8poOMU;`Kl#JDj+Q2m{54n&lF26Rq4Y#N3*ub}))?pKzn<0W&;U(B zo#db$D(MLW0Q&ZdGBYW9E@Edh12t7kPQGNU?qG!D89s8B`D6ZF%-=0ehd<{43WstR z!gV6@j}Q|{nvKL#*4V#o`VD~%1D#r+I;5Fd@4UfP&J6GyYL0Vi-|K`{Qt;1Q)S6d0 zKY-m_8~6VU9<%=scnkr{!okVjQm_s{ga;zUHg^rw=j5ze^!JMFAHVX|zFHpK^OV3q zfA5wF)Yx*{kx%qE$wT)Ltb=X@i6}J_*P(ran<97|UGBEiVDeW5=6Evr-1ZXHKUj=+ zeN!>$a#$bZ?)Ha6ixzxcP1v;Gc5-YLU+N?Y`7^tPzA;yH-4OlC-Qqa;F?|%U;RjkY z$(Oje!-)ULtm8z2+IRbJNo;l>3}K_t$Udqeui0OFOked~JYVj{JQte9 zWL-5{gBzf{cho4}?b9eI`21Joet#4A^zODMZvZJq^6BvXJMezeQN9;=Vg?l>pNWq7 z>{#T+ri^*DYHF8Q{+%$=RIIu9lLzGD`Az7(2lUP4a@%wM+t;Vx7BP+eti2tISGxMx zmD9tp`x-(PZFk$N^V70{4ue%Mkt49Z!|eVUnS0Wb1MHr(eSYac_!A$s!ZNj*Njw2> z+WHvw@AmeAv_;0UCTS9c?+1!e5ayGc!P*;U>5z2Qw}DaW>Pg!U{ll`vXEdavsk^IRf% zn|$6}c4kC@*-Aldevwcuj0f8QI;;ih z!cYE5zfobGz|W@#CN~Zhc!L`t8Gs&I8AV;rj}V!neOU28W9pJ!YeT-ZUV;z zcT|Sex;-nOuQ9^Q$6SF^l-0b=@xTmMjVAiEIC9`vsy9>-cmQY>gF*yy{F;9MPNS${t?{N7rc*`_c_%G8~VV6`G zj&@t%@s8GI*)Ww0Okr$MqbbpiMx@i(C{dslx5ct7RR;*}9 z;s59M0)`6AE~R-#yQ`g(tHX`wEZy7P;rSsjJM+u@=i&Sw?_1kT;B9N{0`4Wd=8aKi z6$jUC$|nyDc$uQL_i8;!RlM{wM8&hH4puPyZyTQTkQELhLxmO;OGgr5v#OZDQx^Zy z?yu(D0ZSeaG!-R@V$Buc$Z+_D=;rVr+SO-p*?C1Bl;9Zur^Kl;KYkMlT!J|{LxL=9 zFT}*gjXNX~QfVCJpulwKW~y*lZjI)IE!u&!RsYIGr@7DhnM{dth40B)`o{QJ;D_C$ z@OGrH$_S1sfxF3yPYA$kXE%6^DD-3ylDHwnE5Dxu{L}?)PVC0PHY=`;W_&}d$2b&3 zFN`iDJX!#k_ksax}l%wsU&=n@tkB zk_jf_0j7Wn{6#B9fl4EGI822K8h?UZ71?0w>xK)0tT>QPcninNFI_}v(!gD@Ia|5k z96vA^SpN=9bS!>B6r8q&#_5vFdujgPyy4_)AW+^rq0~jgZDkGMWu~6&a2wPAt*QE- zUKxK+rjWDrm!KS;^TN#1veA+p{5)-4luq!hMd)F>dkYa1IDR&-3bY>XP>#Unb_l7e zDGOK((Zy7CIN_J1FQw(~f6GvJt0N9vI#{q*iv8qHaSZ6PhgcTN{PMg|2L1QE8#ArF z{p8|ck6KyY$`)m+tHO{45yw-rOiZr_VH*2VA`R~&_5mrS4+WP_&aLU^8(}%JTrwr> z1rP>jue{+WX1?Qn!f%v<{|c}LHmjiqqlCqz-Sg&(fF|V5Ga^tIQ5lip#KV^+KmAu2 z*R3>LwtX-9@m?{@K5lD|2xOEOyDGW8C9v}AVN2LuxZgq|5q@v`xNg1-L z|3?@+Qx!sZ#S&Z#LL*Mypvsq(-M#SZA<9%TmNk46K zsfL{XW_;2IFt5*siDm`>)m^;l$6019=Z5tM_cFJa#DRl|p`{jL56QV_dGE$Ck*wKH-$1e@dNq@O#OMMoq)=eIZas2n0b&1&>5r1GB*vV{@te|{epXuRUy zt=&NT;lT5c0R(3WgG_YanB7%}9^e(}U+@wACn2Dcc5@oKUF?}bmM?l`D{Rz-UJpPxQfC^X@6yBjk1buMtoQE=%mvIH1YNKlKqo(o`OP6l8aPT zfZgs{Ewu7dY-U}$ny$8BQ+FlPnD)BXt>103uH!8tjgAVrT%CKh-dV{}OG0O5=D(CM zoZL+74R^?iIe$)Kdpu#e=VT`e1DE%1SB;Mzh1gJ{-1q+Hqzrzw{PC#0 zRJ+%}zaCw$%qrtC_r|)1#XN))pcGSUd0#%qva$~WZuYm^{UFO|qj}dKtSh2{HnrV8 zTsb{HHt1;Gh)snlrD&NYhHlag+MvzKtGn3^m~o7S)h(i5`l)MbUqOoV@ZyD2X~)R@NoP^sL=gEcd#nGr`T2C|M(BeG zl<&sH!~4UvLfE!tN)W9L`wQSE>W*8jy#khK0na2Q*Q70`VKlJXT3<{Ph1jNr=nbz9 zeQQHn;l#i3niBB^U;;MlAJl^%@J4C+hdaL~CZ2lph*1_5-)giVhjVTGY~{unedbJ$<$S=lmsZlfOmI$`eW z1HEsnMUUU*GUuWE-tLa(@mpM<)2gdTzrLL7AXY)*(ZfQ^@=Z%-_4rCpm*{3PBkW84xMVbG z>~}s0(VTK^+Hfuk17(E zxH%-A0PPAD3cnc=!6>7RcPR18Fj7Bb4^g8{ScigE`eOE?;s+9?vWA1oP>N&b7GG7D zoa2Q<&l`nfDpaM4ggSF&?i!9o(O9jL@DM(?l)v=K-pWr4{WWi!peG@|CR zc?21mDm6>$Lppd6f(8gBJbtiG5nN%-=$y9P$qN8QPA?exb5V(54B;If z?SxExi8`rYrW4(6k{|&gA^@6qQQCxtyq6s%4KaUjdTjn^|M{-f0b>jn03;Qa_V=)n zB^+LE;to9w?eyf3uP5L|Scq1+JR=-kXk74N%Eg{8R0!&dMZxD0 zEVcEE@rsArJG4LDul4A64nT62j>K7WcOldDzSnC{k*EtAUd>wliY`In?(Lr4tGo?J}6+UQJplnNY5IRtnle-cja$?rFIAGyNW# z0<#6r3>Y${Pm|wR!s<(KmAaI`fiLJoDt9Pb2t1!&Y%{c{e+F=650 zGUkg!Pp>Q)pKUP-^O}A`I`Fl&)LMt5HycU*_A} z2ejHH(XkP>aK!ow#~^zWlRqBZ6iB{c?Qw@-wZfbT6SRq_Sz=dnXHwl6V9(o2JtD2( z7{f-UlOa0jEg=>tjf~`xOx<%3iRGHkl$03rYZBO)-H5^#FoVEN(1FIIDGO)O;*N zqC1Ii0`G1N9q-Q$7b4%AAI<90y0``0@1oPw=qe4RC#P%V`=Ok~$*Ea0Ea+kXnVw`M zl*E6zecPTgh_>{o1yMxyahy#2_lUgH&C3IPn08L=j7=_o4WQTll@v5PIN0oZqt`Az z3^ycd#q)7ep~on%*I_CICx#w%CD8LW^^ye9kY2L(DT>~$!7TThH?vDD|R0^btukhCAuJ?!~$E$F{vVnFq#@g!3OTyfjkLI9`H(kv2)&0xL6jwLXB7RZ<-vM%0| zV0h?KUJG7TOWjk+KKIfljs6?5w^va=fWDGDLka|d|1!qOQE8NhmUVaf88MiO3&dl_A@)O{7F%$K$g%S# zmuX0Y%&xHN4HlQ#Sz){}mO-3L2UJLr0zdb=bP^m5nlbW}>k zfl`L>GJ+f%K-VYO9j=jA(9Qg|US9q{Ia6pLl;6&Lw7YuXUz=~+^UX}z9A_RHJIu1VLzumKcS~?vYkr8&b;Dne2U=?_nx~_j^P$US$4l8+-Q^GloH%y0D6&yccLcH?Dd(0Q&1UaV3al-|Ck9*i= zh9o(ZB4-;|rf@JI@|GlSrY53=42*G=7=d<)xI?^!L0OjKN?4#hm=l6c15tzCgfEY~ z5;RLAW)k$*qeWl&Ghy&`;o?hctWi^~@i4ju?Nnm^Vciz(Tfk|k0;J1KpUfn2vhrJ$o2w{MEQM*Bpi_aDP)QY#7_?83s&;VU5B!=si1rj>V&xL z3Qvu@5<&;jV)2ANXjV6fv3sTKU#><{gNtfYgEPSF;P!g)Hev0&v3g@5S{8!{TpuKN z*9dIR`p9vvlJ8Gtm=zsC5N>G4@;3a`0F?W&fdt-aAX(Mir`6}N4dlQ-pm)XCEqpb; z2QA>#f7L-!W&WLBZ?h@s-o34uwjkIY@M*j{g*SPU?I|8y18yp8)qk(es0aEQrSsW4xFpK8R$R={D&^j(=R^mXGQPhJAmK}c`7vXpx)S>x>BxT z-{^WvZg9#$5!FLtNXG$vHXN`voaEot%E^g87u?F=?YW58OjMd9B(Jz6s_rQ8;9fy7 zDRWe~Atp!jjpa+ejL#90*PrJacVA@BDnAybPK*`n?yT}szqovfnD9|C+<%Xe+maOM zbJ)#C{zlO=0AbS65ImDc(Gxh4o~}E~tE=z92i*^C1Bo^2nlA-LH+F>bHT7P}pF#WW ze{dt81VeA^`NwYLy0OQZgCAu(KwmY*NXW2)a<(m;2L(HbzKWuS?k0q?Vsb?Msc$AN zoEHps=#=Qg;{<8^=cnuIT&P4^R)-Z^W``+OvfU-(Q>f(=iCeEypvdZ{Q{=H^>XCqv zEq@R<{)fi|W^Dra0^38J!G-RtDhow~;l(XxV0-#2=$B??6JPPSPm@;FgvS*GV_zmR z51Bh3%+o%Jl%@*ESka@;??~EJQcyAuc~r*-bW!)7Aj?B3-e^R=Kh`NrDVmh#LLVvk zUn0?N07%@2fozCka^Bs?2oL9s>r!;ph*Z<{Ks`joQhXj@Ixc5AXk=?l0Z#5h@`7K% zn-ROe!6E(w8~5J7T|d+D72kG(dp7oaHfz{&r<;6OC8c9yzBB+NjGmy%GjX}JlS z44u&JAJn}jme;%c2|2EP`kf@)Twkk_a|RV`{?<3x>)v(O9}r^#kw? zlygL##=RmSE^d6J^G!78c@2U{J=-kK(;U@sfZqHeBP*-(jZJaQlYXxtcb2S)o#Z2G zK4s^BMEEvg;=v_qkbhamTv;Kb*nb60n2+3-zWleuDa~ynoQ+CHG;t~Q9RDa1H%XVr zKy?j(2guW_Qr1hYw5MA2a+nVe`7K!Ij$x^2vS2;XhGu6vsRJhL%2|!w-ki#E$oKQv z`L*5h<%zu%E?=K3PK>&c(oMq|KY0)Kg7uuNt`f1da?l>1T~(`1U@v>zx^Y z zh_OUv*@^spJ2>@Vw7r{AL>ExV;N^YI$b!2-CuRZcK687UC=T3^URJ|AoD@sGE(5J* z6K%?g7!qW^)N3Neljv-0+U=MM%IX@v%53bY^D(Vloq5>8#XEMy$y^xxO&?I}0Q`kZ z+%7IPv+2fPXEyc=RMmrFe_}nWg3_?G{0v(&YK&qxuP&f5*h$s8`zLRVqcsetK?bCO zlS_Cy1p>9$!RB$*(2(HdF=g%c2yP(8sW>2B%XGmJ&`E*$pGi3uI6=O4xu3$glJy)C zlut3gN>#Uvmtm*_+P@aF9EnPNSze9zJbAB$fd=Q_v<|oqWeMUodQf4ShmGwpDn5SigN7ikYDn;smf0rsA!>lRl7bG-J) z#ki0i9RC4m+-rC>LJq*o6gI~e`6i#;g0(|r2J*kmBVI>v4lYrsUlY53@Z4;SBy5?} zJpEY!S<%Nxc?)4wDq~>p<07*#j>>`43slB-BWqX2E|=;{{5M1Uy@%<(h^0t6ugE=|iMU0yYr8lBy3N7=CDUR#>u8=0P=P*y%MMT}00$6o#S($aTxi=6 z?Hpc1O!sD_dRDODu)1o4eh}wrU-CL!nxjZk7GTZ+Nk0X32FGOZH8zT;4qF=0BJvK3 z%dCxs_a6phW8o(c2BS|AVxI0tWcL}G>9IYe!j3e zOq%Zg@2fH=$N$%m&!-%FSgFBDVJ<Y!zSiH?9e`U!W0@wP zJ-|)t8(TnS7E(MYCR*sl%_d<2AiACn7a1(yPu>Gy@3>Sk!-AOlwQY^k^WvGfE|gMS z3vAj*U-Id)wcS~2-GI}K#|HVaSiujqY`C!#!EJNpj^eUR&w#XQcfUK)dOn=Ya@-pE zd=eo7*%j@za5&uZ>9{-x0UFrAiL3elTWkK1<4hJr5Ojr)G1+IgiQU+zme>3D2}a;P zYEP{gqBW>IJ)#93s+OJmvCDxS7_}A|Y+kISOk7wV!WN$o&dw)huiYesREmi(sYbupUrBh#_c8lIHD*21L4O;|Kw*t2Y33 zOdAeYdNv56Nc9H6e#y$o0DGnz20aNzn(lhSb)ZHuJhX>Q3n>~Ke`*f{A8};=SseZZ z*%2O$HyV#MEd9{?yf1iB&SUNKPV8v+YC+ToK=d<;Ai4F&6_aFnfUx%YKOYkfDJj6eP95IP z&-Z$89?$m-*FW7qM^LXP_fPw4YZ)>EGhQZ)^NV%N`XKUSU)+My-R!=+cG0+Lg{6Bi zhPVof`z*DJ#QW!0MKq=~)va!wd^xbsxdS&zb?kZuoz9eB8_?n6SkbarSkc7hf{|9;k)!pjYYw+yNslAab;54La~)u>jO`;wA`a9UK7*^AQ5@eh2AmF6}aYX;gk zIdPM)Ao0g@hkqA8qq)YsueQ~$j4-(11c(*l)jP2D_O97&%9MYtp?0$pkL<4cu&;Mf zb3?K+GR=DzW(3zUEYRkw9$?cVNGGRosYPU6)th=9#0>DYVaQk!N06j4^nVVS9BLPx zjC=Lwml!K8kdRMQZqy|-fg#*97!}k^UYs3*rj~GI%tBZ<|2KrDBQ_|CVVy#HWCpPq z;09TlkIOGm_7BZp_bbqMdgYTy$8vG zKvKHr;6{xeHl3;Coej(~F4a zi%Y~;lgN}}43}NyFc)zomFeweo0O{1J?ajO4k-+PG*y0-oK$`jKWk8~xw8=gW620p zN+V#N%}#$~A*~a%^kHrqw~|5S_G~_)ni8FY&Vm-9GJEXZBqM$4LJbFJTv2f>vYG$6 zgS*N6kENpv@1fEWlwz8F)xzpdl4JgCI*bgqcb45AN{%lv*>aUzU?5oI zPN1TjR--E8aaDF@GB~TLSQY@psmyiju8NC+VwZop_fW3VmUTvSUQEtNtih+~VNfDi zN=4n~Wj}g%SUU489NJ#D49n@<6B7!_GVILyUag$Ko}VswhW)#P`X8$fBdj?Lxm4N^ zObENSJd~&nXh)Z*h48J4ZqZM$2UIWfnY#M?*agys*ehbvPFFY2W1^e%z?tht zxY&QW6d1zidf@&fKA{Kxy22i~02wgSJaav85QwJV1NWB`%5_9g^ftlW+~%5lRn50a zlIpaWILh$jKI`Vb3*%4gyFkT(zaEyA+~ER|vYyFszIQFaB#t0`KgG|N05SryI4#ud z<77ROc_{IO5(#*+4nDZ-o z(k`a|&pm18ni(edq+t)iV($7~M;fIkEQZgY)Neh}@viR&-E(f9(gOb4?)ekj+QQ1; zxvgzDOxkNi1;@J!OH9n)?W*=*yBYGoHm==Fhk^lkHP_pp>h(Gv639PKqbj1=xOjhn z9p>bl$jV*uJe92S;=|NSX|Megvp2UUcV@xOq3HmLi(o$-Gd&e^9ayNXs1f}+usj3` z%4atAE~vlvOnY87n~SL0S>bL{dSQQz{R=08Ia-M#N93+KlAFlwp1HQ{dLOl-)6YhY zePR2)7<8$LyS|)gOMSo}rtgn&M_PYDGGeGxFH_aqlWemh>??DNwK=z7g~zEFr9}*kt^t&LWRag`d6B$B^FE>8Y)9$ww6A0n&$6El5CZ^Ggy59_1(rm z31OybueaL#6z#ru{p&bA_Y#3Z&LhCI!hU8y0BOCp>S6{nz>i}b_wJIm&Gvu4`GoKs z1J|`r4Na0O<)2-Z_^ECy&wB!-EChLcc1V7pFn4R7je~?WF|MZ|4%m=xi3qq2Z;8M+ z=`sTn!lZjJ`?#PdL4Xa)P1RL9Z?B~8g+jh>nYl7A+w9B8ci_LF%`AwY9!6RAfF zX&O(Z10CD7ZG&Em$AaZ(jX_J4BmG=W|4(iyW zaGftPSFvya%?IKH2Xg=O0^*O1YoX zxn#Jh9}>Y!ivWv{tsD)d)jz@qe$co!QbNY5r%>YuEDB_ll)elUr;CM;RNl7bZRn5< zi-l!s%=Bu7RjMEc#lnBwm)mwa78?(Sliw`R2PFlBz|NNxx*%pw*b;KMq#&;T6vIoD zps+!~^Ld4Rq^db=Li&8}#fY;)3H3X?7=csE=PQ`gmYsSq;x*j-gAxB!XCmTlk!?Bh zvQ4?qMlaid39xUJ*Iulj_T0-PX zJG#Q~UQu)GDFa|}xzsFR*Xolj0-d{`((w z`1_ETfj9yamslkNRDVWtzR!z8fcpmn=R@Q}hGxIBad#gqoe~R|vlVNDz`z0mcZR#m zXlA$~Ig)k1KGn_cs^+j~v~nCg?s6?SG)8QXX;hr&7NK;nf*^h6&bq~2HG?(Go>;HQGAFp1x z$C4Gg)GR#z+smK)yQ<*Uh`5{Ih{5k`6*v0n_4N<`{^Pf=zx!#DR;v|bg;k0>Y1dqX z?5bL=xq&kT(SJlC!;YokDoXMKodYLcNlOhOA*aKrd76&hYgfiEpnT@)DJMq!z)3IS5C=ND>3!3f0_()4iI3E;Dm~K7pkOx{raIDf)|w9 zL}@>^yPdZka5c;4ZY4nviqG5%mSv2KnOng#t4en2S74wPmEu%VkH^08T5*18C z%YhebWjH?d&)`kN7fSGuc8dwdaQ%PTYrJS-bN=ewu*|rxdAD@^6$!mmsNbX zy9@6sY4NI>!~OUWkidvarfa}I`eoLlv;~8UOzgToY{ThQX`|qqZvR+^vjcvWh@|mE zU~v*p)cid5^=1qf1PZV4SkCOi0i>2u*!sS1qc;I~SBPdeH^CFVxC+49;MU>PpkSRj zHGg=eRwxm!<4#^oE?qg@l7)IC*MPa4;SR^JgJB3t4|UMBpl2VvZ~*HRqMB(nX@rO| zW1Nfxa8_zGh$a{>SRmv0osNeIhQv#JWkEZ2B-fa709;#8?i@(+=Ys3v?E;z%Lt(60{Hu6j(?&N@&z$q%M!&Xi$L)B%0&~YCxRDWT1#L_f!}#{ zCmd1502jEYsDOK-T7Gzp^sYiK*Yx$+0-?yVN$ai)AP#6{p=I2yU`sanypA_!N*mXH zcMr%hS;HdAI`$`-N$DT)Wh3QGk>IclP%0W&Gz9oB+WPT!H$f4^9BWH`!GGL81yWsV z1ju@K-}UYIun%EFX-0-yk9abq`#G_0>j8nw3N-S-IYnU!wxc%~$Cl!Y?V-MHcat>< zh!FVpr|G;#(IL=aI7fr|J%&%Fj9u)+brO@B_4p9tFu0_P6cJt~NVaZaMDK3Ic!#^~ zyKpQ;`~}EZ7f@aU=+3Xpz<+&3@m)|4R}F{4ZH9Jiq6G*9qY!OD|HLtlhj)iA@IfGn z@n9bhk>m&@T6e$);Bx=r&D{GGm>ytF-1Yme-`BgHSF!|hgHTDT(+Op2|7mmFO?Sir zH86Dwmjt$lJ5PdxzpKJ47~TE0Z|Zj;F9J6f77su!K)fjjX7w<1A%9MDhH$uP>p*=V zGpj7(^v8CL(N}V_jHn4DPXQ9RvZ(L^$L7B219eim(sRXzV=!PGNO&Qz-|m`yKp<&# zytmuqh>RJ7G6?c1k^@skL2Kx0Xh~WQ6=)3aes=q$`%4hF02ljbIbsm;9Oi|YCL=z#&AkNGmfI)PN-vm(Z&6m z`*y-u&|$?;hxwa1b6B${Tl92Y;(a=LySTnd1hAsy-Z0IHH}0_&H@-So0U9EDW9 z8{5f-f%`Cncs70&))2%cFku1Kdm0&L`O|*s{eX7uBLr8#&xryWmxZBSN7$omV>sTf zUEqHVZ$lCqt$*hZuyz6{a8j*u!Q>>AEUpDyA5f^8(Wm?!LxiV0#(-@oVBb#%0<}~~ z+!~732&;A8ci{J|#B2JOoD41vQ&=y!d6xIVq7v$&xk9GQEau!dUq=^LYG%Tq5KR{Q zl-+{E+j8!w#u9k^F00#_Z?K!M&ur!rSc-@5^SenwsDE&7Hy|0wZg^{GKo=5GN6aY^ z-PDI*^_G&N99~C`NwW0~rlyc=8Y32D%u;&2+w9Nj1cFOxe&rj;?&NqcV^Mrx?2@i} zq}Asy95POe6Rr zOSDUfn}0F5&v4IWI027QNJjHe16QvQYACWM(_?=@^6We z0VN<7Q)&Az;ZcevG1=$jO=P%=A~uky4@j3WJ%6poNK%!=H0X&*=ggM1;|vR1<~n1` zNh0?PY?*)FmZizqvM3j|oS7)8DaUhAbrO3BO+Pfj)^t%x!jS3AOSGIR;f&3fzzHIz zUCK*yRI#K)^|ue$uu6BHh^hJWf8B3#x`nZGX?&yn=9vG;kJG<3&A$yMv5_ zS}CD$$kP-%&(t7~6c{D{9JFhw{OrX7F_c9yGH-o<#-|h0KgT5v^~iZ7&BQ>dF@LA| ztTA^Sr@Dd!L#%XC&j}nm$t*YR<3rQCi^ytV&8_Qm&(gXVXW~;O(6`Q{?n~vtJCHep z7aBmNaOlca;o%z3hZa*PT|yXH$G5%=-KwMm_N1r~he#O1H2+O|*i3c~TVj;^{UOd( zKq9SVwa~oGN9Id?!w{LlaX3T7ZGV1#3^GZLPTd_sq;l0Tj2HQfb&QmPT(%eBtiQyx z;X+m}9lJ%6beQlaOL8fM z1l(PUjNpDg6Xi)iH(R82eee2qM^ge)oM_4;WhqWH0mH|@UN)qUtxu|iVAoLV`e%=xlD@nvuap!(LN(H1=#aDM60s{B8C^uncq zv@Km4(vNrtZtN+5W~EUHp_!7stMz!mBID32HA)cIGb`tMaiu32cC$bm(12W!|CpbQrHGZJfFx zL8Jsp6Ag@2V-szRJ%68)avy)h`cUsa{bL$)0@G}WF zOLKjh+H+H5hN3Rj{W@pIMUcN_*pGd+ZDK=w8CF1F+|Ibkl7A5Cq#iRobjRH`Yyxc2 zo>z5Ja~G-B`fz)a+|(YGqRTSq-cXi+X|y3FJ@(CqpkxacFe93-*G@(^ zjgPuI1P;<{+rHVv@iH(Uq7Go1Lpu}!qLbR^zfI@Wg61?sx6g}31B^8!(qYU9QdlzN zHeVof+9uFElYhm?(b0dri|1L zLmMdjd;%`Q(=xe%*El=jbqi8tHCS}aSw(iCK#HbU{(l_sI-x-4io;1UAq-QxA#@z3 zywHeqiBj5#8)B8+pu1CAyB5rifz237zMXUQw+aa=)%lxsAGui)UvpDTxdDm*SB@b` zjO|ZL%toL_ZM`dEG^3$+>M2w-KeF$_j4F7YOj0W<1S>&>;N!iUX+^UXG=`fU%{<0z zUQsFXu7AsSmRxBG1Mh__chOB(9_k>5HJ>xH1~UB#0edk_gm`S5X;IXyI{F-qJJAgG?huV4SiCv7Nr~ZBW@Y&!Oz4- z{oU2!ix@~rDl7wkNgb&5qjtzEh@?L2-85DoYKDLt$dZ|kl2cR}-XCi>UN*fA$rsc7 zlA5|hEPins;=4T1(jBl9AY4KVB|?FAlj!i6g=}c+>aqvKvbk*#K0vWRH#Lu zQh!tiqM%su%m}rTNpbIS8mR-YuyX4tIbQ~G))9l@HWyUatZ)N?{(tMEa#m|t3|(kn;DG3XZ=T=x^P2+uIN6uy z@flL&bkEr9mR~jzlw}m|GajKGpo4G3qD}tzGSqj{H_xrf=L=@fCBqBpi|1=le(MvJ zE`|^j-gA+yz&#@1Q)BqQjcwn7I5G^Ri&F>|aV&!C#D|9>QG zjlq^B^V{f5?n^m|p#0`I6{cMcn2|pXdAD&+F6`%QLYJkUU!gdw^7O4UO&iA}FPHnA z%~-CUW`~0RYDNee)~80;QoHu_!-RCweO{e1teO>ZvT2knGnQZ4Jf7@MDauii2Pv|! zFZqPb1ti-X^H`G9eh*_ee z+=tJ0v|}UaJs1i#^|^54A;c1cb*rZ;_%4sg`xyCxN@MPXzbb=UiJq zJsRx0#2os3Nh5wOfZ5_*-|g`hQFiQO4S~p75GDBp8(FMcew_x1ArjVKz+!lB=JXnhV!eaB4XOKSa`YJdG_zZoPNyZAnAC!rv!;}A4 z07`GDYnuIlB_?QKw8kt$d{Tjm#NOpr*=m>Ovk?eS?}q@gNl!nS_0crzgWq%W^mFiB zLfkh~_X-Xt6^^5x3k5E)2+Y-{rO)R|EwcrZe(+Ga+ilV0vG`|m!LQT zLl?DMS&tjX5zh0%KY~ymA{pjv-$(Lf$(Q;#0v~@Zj70FL*Ef*u$gK&==ydQtXchw9 zP^yyfPAM<`HXgfh9Vt1$1uX(v{IV*8oSnQ5IQWr3-wHYae^!M7=SsFqB13Rzk=+*l zs|AR~{1CL@(9xQtnRg*@n6`iEw+~&wMKBhlB57-Tn?x1X9%u`!OUyCcT7=t8Qni#M zh4ym4-nS7|DP=mVwQ3^N05TgXQ7=I$U>jnk8af669654~fkw)D(LC%@dJ&LNHG)U^ z+b(*#P?(Rlby*|!@FaB?Z2;g1NS166g~mYCvcDXz4Fabf9(EPrkKcb8QUsu1{Qe<$ zhtdRd_k6vNrU0DaMxl3w`>8@@x8Yw!`v3$cMNpk0*a{28!@mzPD=ERu zbYFEVuMk!!rBz?hU>JY6mSnt-n~=U2WmKXxsGF*5_YmZz^Tx0o9aV_uA%$+Gu|5DSzxm4y7?l; zsbwl@{Cyjxl13g|R|>Rlz3mc2359k{fxtLV3(Lf*j528O^)`Qg1TK(lQ$&TT40*HJ z`xu`@VRDLeWXb`fjnB+%7|YsXEZ?U@0UCiFk`v_+2cdZ1Uk;g1ayG?}AftE8ZarTl z&;g@pw8_`&bvy`I$uZgJ9n>PlLN2*EPCENGX`N>eix><^fFXGaKUKWPj=E@Blf7tN z&clY_+{B9H1eAZ7XmBDi#?K9qk1q67!q6%h*K}>y4Ac!l7`43 zDLclVGjcilA~L5*E=MtYVV*M%;?V1!2O0uNrAI?JAQt8gkS{SLt~EV$4W&`M+a|!B zrupXEO@@hN9zZFP5}y(WATbCYL99An`7R>T5!IJqaKwMa*$eNaz@)$-Okd7XP?&+iJlHYd7DOhuz1`P~L`8t)D5`SGkI3q*j`mv2J0t>9AraV= z5P}bJ6QF-k$w?woIHyCTX!do=uoAtgt2Sj!r<`Cq1V~%hRPu_RilqEVF6jhmz&z^s`Wr=(qndw;0!K4n%J!$ZM_99wX z8gu9&t|5W|cG^3Dy;}5+c}f~k-B3L!alfdmc2zE87M21D4AMT=cGAcGL&>N34`>$n zb6RzEi#{bE+2R2L4#uWVu}|CL;R1~9s$ca9kO+43PWjYwD#*+bjXgO(0*Ro$9wg4I zbs~Qwh6$|ayJM@|R~VQ|V_h@fcUvIJuDDuzgDcnf!4kyS=l5El<_#sD$H{bPx!bJmy1y@=-+!02r&(onj5F~~L*WkN=J8%x%+=s=R>#Kiz zT>#gS*iZ7h)vlY1y102gMhL+v6)HQD^~2M_p*8qb?h>8R1f`lg4G1ltR1-9^2{?ZT zHSw>P-(S5NyQBbql~YR*bVIaNhyFxe21@?)Mbjp>E0p}BVQ^e>VLf1TcWEBtjOFrt z2X%X-(~#yc&vmIppsu%11GR`)j z0<;#JS7QnD)pa}zc1>H{#0>2k`>KDRp?7mY#>}IZkj}6tmgW)MU`86fXU}mZ89FY+7m(^~r)X(V+`xDJMWdrC z*B=#qKRp`F0+v(mb_HV58_j=mxA+mG+1EjTo@gTpL;X3rkLK#CGt*i?I1VA*o7SG5 z6!vet#Gy>C7@DXV-81QZv=gVi|K)%ZHSeQEghe7a-a^jCqhe%~k>}|LrMt~jgp*Un zDb)hpaWaJ?W2bX$mgh!m;J)2vyPQ1-Xz?yK94~eWA96>0U$@m=9T>U~+&IHpkeb+8L4QQ4%>q`9WPd)sy~g+oX&hOL4x&yQSP{AHW^jjH8uSyh(jhW959 zQxyOa>kU(HRv~eKpBjIKz0CD?zD#J^YcORFz%oj`169Ybve&ELq?O#H%yHX<-sgb9 z%w|>n3}Xt*k9nf)oZw@O$ex7GRZ1GVXxCfLBa>wnI>_8>|6GtSqnMiHv0$AN96ur! zgPS{i4(&2OiAKW(zDym8A&-3ZbA)XdwhFD-?l5a3hbR}-7iE9@RU`+@@+3qvui7%1 zMKi2asuDPCt*~jhHo7tVQ8?aO5?WWzMw5PKhQ!YdLbAZu(j;4gK8rY$2tr)SbH9gx# zEOL|Sj72GL5QV5UI`I9ZcN2AJU z2Eru);Ve7I<9?i!#HVG%&&W}yI}i~=2_F}fO{o9f zNJyLW)hJZBMsV({Q4{JwSB;8Dc|Yl)@aw@#uCot?Wg3kG$%|6~0VOn+2Du%lk8^ad z=jVSOzs7LZLJz^-rNI1vFeaI(X_^D3U2U80n2xs(n@!m@fj|f##snSr>?;!^O}~_h zAbQ*wG&~1r8ZNkU*!Iw;&R0_h7ltr%4@>0mA!Iomc6##=U z<<2SiCpfEnyvT+xvmfCP8ME9!{{xvWV2PK3I06$4IUq0~Z(?c+G%zwWm$66!Lx1gB zTW=e?5$>~ph2WPaM$PbkL7$S;XpCOsCN7Eq0)nlywzrWbN4s*4|9yvCa!5%lSx%gD z`cN2%Y>GP^&gGkLX7hDK2^&%W6F(=nM_-S=j#yYrACueBo6DnDADA6E;xyNCba{2u zKfp#zQDXSW2uYkBUEUtOQ2OQNe}7=Vl;wV>iJ_dsGndn&7jNIazPLR5;5RBklw&%6 zVTfO2ibz9kT>J3xwO{0dXfEU0#XsNt_57`0mW*hsSzQ0i*{85q5$=pgr-g$UJg-$c z=+njJ`#*npeev#7udNfMwx?XfU&@Y7xq;R2L^JP#XiBW2CW=|M)#rLXS${suI=@hEth~-%M_*WjItTZ@P#ff~j;~HGdzlLfb8tb=1}}T4)jWf^jL{Y|`A_)XT2^rHj#Tn8Hg(1370M z8rWxclr1y9?YFSz!xpv-FCGNLm&XD7r6PjU6cU%c;y(Vh%C7E{Eu1UCh7JuIjdCgg zw*_Nm`lYA*Nx^xVNR7%>z1bKOn-vtx~rEV1{8w?!3#e0 zu|h>IfQwZuNyed*zWF6U8YM7#7pqyg59fqxC-JN{MVg_Q72P6;8PoWGF^p--vIRd;II0M_I5;u@Hzk*5-krb8+l@?Wfw@WKUp}_wN zT6u1yT&Wd+#3E(ALY$q};}_$XWRS@Sh#d*|;K4d(!cHbLt$!;flL~OL`lB=kDpP{b z-;l$Am;nxhp!B~^W4tAqb7;wR4g<-_=m3ZDj-;C$#(!@%!yG0YBOuNS%cQ3)6v9K8 z%wSNTEbBI&;2~KEyhuTOykg=Y;sa)a+Rk?nA7OV9A7zG!k5b9qi4I7@vBQbE7%8FS zI+@uMo#R*(n8lF6iVGEcpyC24QMMG3%AkP4#6(Kxg066lRdp{ha}tART1RTe!D^Oo zun&MDkAGUFlfgZ!S=aP|2n1AU)NxvMRn&wDlWv(wkFk%D9wbdtsLbY`i`eX>^VnAC7e8n>l}vU}BFkpn}O@fhzbtgqY70E^Wlh@!9y{vs+? z94heS7$*?@Od+j!2aF@EN+KwB^&f##Ro!aYcl=vCfkCuN>sgcYdEP&9+su0E1~w8l zSKLL!OlI*KnGfV5I^^+(_^6{Ic`;5AB7gT#fRPTl$B@|G+{_z7T8!6r5sQ;En2xKq z&z8`P7`8|K@p#%?H(fQGJ;cICvlvfDk0bBY40XG$+qSxnJb_w2r@$Hq((1MgiV8ur z#q=8oLRhyEB_NL_l~`f>!XwJU(}x!KlYvOos!20z5}%a-F3jZYiPVnzl*+_)fq&_U zg?m!B?Y6}d8UaA$sms-3He1ByVovofk{~~2qGFRrwviA}hCKDAibYUl#&e%zB&l2X z2&IMCm|PjHEmk>J|Hh+6(G7WudxAsKix7Dm$vpn=eYkkDp7~8Ugx;a33&~~_+<3wkS z!=BATaZKQQ@$qBi19>RCKAlNBr*(ozhiN%TR0<3f&~ym=;wBcM(3Q#Dw|~T#JdRKg zL+^h3^ypco>E?6juem9|FVo^|HBoNI<*=!#{26cPIev zA6Tv7AFwp>~DU)${};@@iTc}@5<#NIPv^CwyMoQVC1U)CWT3X|4D^Sw2d zPyD?H?pNTuhHhRR_L|Zoik1ye zqmkYN?Uv-M+tpb2oV;xJhDz(<=j0J#(QFUaTe$qPnxr9se;12_i;Bx6R@@$KJDwbYqtc-zBZ|M*S`)1X~VCUre+Bf)j~g-^yU zLG!DPje5aNt{)czV6;EdB`^NBOfdsgd~*i)1H-p4S@u8w1@jfOxR*#%0vrQ1H#3)K zQvyYQ+iv4F5PkPoxGtJ?7BMYeL`i5aObn*!9Fu{m(X?yUtw~R%7~aw(0&f?hHqSbR!T^L`iqN z=*R`I8$}=_-2f91h28O{(+>avhvUCH2m?faq0f!R^G<*C;Y1BmMAX>j)#<1j#Xi84 zAT>NbyS(@yhKC~twkffuNCn>a}){eQA#J~^xw>gfSQmBD9! zF$#SUAje(-2C&|X<@r(NfdYs;jcgSct7$U-R89E^AdH}z+UDtU$5hUW?-d@-f=>;e z`?N@wDVtXmP)>}YV4bB)+x;3I*{5D3xp_o@=VSi`o6lBpZg0LV|AO?UazHpY5K=RN z>Y3I?**#z5A#x)TK+4xu$1~jKMLfNKWsjO)Y&PYCa*-Y$@B|bS!}mH!o<|IU%cLk- zZX*z^4@FdL*53~$C`dpUkygMLwu^~zG8KDH`Uk=$B!I^(R5rynR|{!m=$CPV9w5lm z*J?Vq$5=757t1`2K)_klxQ~x*bOR_YdE`Uito|$y7$QJvXyU%jc|tEH{oZMRo@cpY z-V5*(E)xly^2I))^$F8uZ*r*OiN#fE$CH)!d0MFh1wMfq;OQS{Pma8m>CvP&El*14g%oAFU0pMh7P*X zo4GcDs^}IQo!6?x8E@a7W5tnw?|WLm7fCu-^!Eh1>O3KcFxD(K@KQhsZ4e<9(7vU+ z{K%Wu6Io~b5qW6GTDj&Y=I*&@V0~bhZfxRPW(!@M+LpW!4uq1~*p+&Y;900j{3=0ymmfGt#W(!aR2c{xAV8V#`lgM%g5h!}j0Yc+a$nRMl~TLp_bd$kX4I(f9asCRXwk@=MFSC?Q&3mz0}=B>jiQc?6UB<F~w1B zx?*-z_GLSY5YN>5zN_nh$t4z>^!-MQsUI5uKac*r8c#2OtB+PEk(5-P;E15084;tZ z>O$D}fL{??9wdB`Q?>u^ik_pDV?wQ`Wi~BJq0N)NU2J5-(XJu+$T&mIkb&8b~m==LsG6B+GvN=nG&vlOYjh@ro6SI$;d`V z6fB+FmH>dAcNP)80S=q|tf39z*oI#u|FVoH67N-Y;Sz4KS10n9&}^1gPZrbcwo-M% zV_@fuOiI5A)^*e8aTz_hZO^Kt+JimYVZWn`aC$_FqRuXUUfDQL;}Jnfw~#5aA~XBmU+N>vTI% z&$#E|ty#L1x3sMvnImCe1SA9`Z1wZKF)PZG?N%zJc#C;vl?zdJpW9-v-o|;nv0*MU zZQQuf7Azo}y*oL)-WwX@N*(Ex<|n>Jzo%BBr-{cALBtS2*;d z>I;?KDLqfBGiCLMuU2aAZGL#u2-`G&jsEA!lTuX{yP|OQwhKz>cn9A)-oe!=BOWCK z`$a91tFAF$#}|>jCZ_gjYOl{9jTFA|n}X?*oZl22T~eAoIP{8@?;K@j&UO?WN%_>3NtV_ATS_rVrmL8G&VJt zfms4nfA+=e)rk)&%2Cv)O;aNsQl!X7oW$1<8+$3`PW|s)uf2}V8U*r(MB~|co_S_= z#`jLrUB-*_Lw!O08)Pa^3PpLyYGP#pjdI7Whaf-)onFT5EX z^57`^SNk*8_Ln{qm=Jv?Tn-M;K8~j0cvd=ce~P#SzkVT5X#WloFPI3 z@0bW}H7B;Drp5zoX`C7pMx0}tT9N!0r>ps4rpWy0&+`2-@exq$d&dAM2#i;!b*lwe|gp$rONTk#(Y^k_-$U!6@Jjg+9D( zyj!b{$=pYrfwiYA*Y`TfHgT@vpC&yne-I4_eMEx;Vw|@H*X0*%pt1eLlK z%PNU=eo{2~W!os(HS{{#S$aMoDfcqH-M*CDGqInNu#E}4!8{1#LXEQQVCbsYTcIq< zqZ>E;D$QL9)Fvt1gt9zc*D=aVyT9~J)pTSc+Eo)nSM=Agt7vq6g?pR+c~EiTf0lfk z?$%GYx-Sp}dqF>6PA0=T1`$n+KDN`@=W{o1p(54OcNR{MG^&S_h0F5YdXX%D4(m<; zc=ke<;qJusu1p$c|+t<57@3!rmQ}=e9&Gcql zeEC%QcSpqkCUT$`E-}~4c9I?`dSM;do#L(%y$ak_viNQp5zOu0FbP5VEzmIfqd4f9 zZhFzB`9h_OLTUVU-vX<5VHb6Nv{zz}YxgW5L7`o^JXUx4&K(Tnzc0eYU|*w)$>nTZ z9o8d|5!eg<%b@806I14Qk91CYx+>ak-Fn`~JLRT-AJ@L!38~zmr>Cy1f0;EOD1E0} z)WILRy_i=6u*)U{ikB{30v!Q2w@h6EL;`<6 zH3J;_vq{|kSc2+krJ#TCCm~HbV{j?LoRI0Y4cK~*CgDt=Nvhxv-cZ_^S&8rNyj8y~ z$}AW$nkD_*mt;0xnuL$;yh`9dOiwlheFI*M0BpiLl1Qec zSO{V`rQxiPWp#3hWy9C*UhWRPfQEm-Vo4|Kq9_(3n&al0y;QHq1ctlsLg27M;nENF zzHX~i-P=+M*wyG+OKht)L`N>*wCFP3`F@EWA~hT;BR2Q}1!qD(Km?8fcWBok5iAA7 z3d<$ngr#78_wsE7zXRW)NyPKMd4H~BXb={G@FBnu+?uE5tL-@)67mV)L63g~ywI(W z6B;Eh8qd3?wGwsPyYSKqLXGnncSHo6exKX~qeEA(+WHh#AZ3!}nUOa69fNd)UK1i2 zBocvUsUJhggQTK42Ht&e#y%X2Bv2XaV95beW)Mt42^^&e4sBt_u|vZ#2O;RoGEM3H z#auUof_Qu;h5Q5vD3KgN@DzXEar7b}qKf`9yNp0~@K6jHU?Xa!f{>xFDO>tzq5oi{ zz>GW}DJEbR0)i*RgMlN)3=R5oc~@X?yXaa%iX6AsP3M6g@*~(#X^bR?hpKH(n_VB) z74_bcG_6)Py`PC=mdiX$H1>kb&3D{-J-UA|Z&f_8QcI zlemnnhvq}_ICSee(Fvt^rWo6&av}k~z>&W_m2JWyl_#P8I^(0tIaKRIX&Er1B|@ud z-n|5>^I`fk5()_!LJRnP%;3iO0Fgj$znFJy0ZKr}t{+o!w(f$E136+srq7R68{#K$ z&7A*BHoxFU8oV*{qqgZ{S^!jkS(ik4+a404*#$Km;qNT~Fhvw$9llx(}`!xSu* z9ihPG57GB*k4WUNUEOxEu8_{A@4t^I1XHF*(Yzp#k*LSps2QU$>U{+N!!w$zNvMlq zoip^2yO(7@^6Wwng}aD#hJXyx!x3^Hjg{16aWyZ815*y){9B0Xasax2xqaXxVaNLv z9ZeED+9D7o5A2-&idub+5^m>|U|i3Izm^ha_t9Ub1jQ7_pjG4<4(Ky->Z@)GL76&q z+bU#kC8=j~wNkl~FRB!B zzGC1UDHBKZ2~a0cOUp!m-!Ooz2{BMlO*>v{3BK&R8H6cs;aQr&z(w_f6UCn``@B!M zf$X3^I+7)|G10`>uH21}R%!ghk46p{{w@ zSH3Y4s!HR-;Ut0p@s}7u?t|DyIV6E~3O)iqUDttfc>`fRQ*T3i2{a8Q0+v3Zx#WvQ z$CKU?HDQqMGIed64^3!?Ed?yXZ0=8#`fMTYLg;2`ucuJoK$XET`yXPqg*wxWmDp=n z0Ug5zPA+YMrOB*+^v7y<+}0rqOP~=JX~emUEVgeXNi~!W;=N)>hz6CG^P%*UmFA^y z0=1yX(29w}cy*|8SIz-Oa#slT!L=R%ePZ(#G!YtoU?YPCOD^t2ZpqDa%8|rZlM`6n z2lG*<;qd2XU-#&NtimX=s@$4%89iOSk4+2k7@5gJvk&lph0N;`PCgU_-UnS7#!)Y) zz_ms-W0fG5E&Ev(lv<1|e;LD=q8j@?SjF4y(oK|05RnP-2wvPEyjIaC!BMi4m!&hl z0f0(Q(gArI#ePEt1iBRaX(`jF7=E!p{*q#RoNMNE)+dH9D9Han>kdi>Bx6N8ontvu zU`Y@yEYuBuDY|_fiZo|2B^Vb|i%s;*0W(5QiiK$kCX{N(ThB?v(IEfFL>!DV?5E-& z#^wkg-Pe;|_9^!TZ&kU~g@M!RnM7hs^B$A?6uY|Xsz}8l4;%c!SASvZpncO9>-Wo? z_jGJl)pn+hAv6#?oO1nIQd(b~CcKpD-Sc)G6SJXzEZ)2BR3`&y2zFvNe`IS$KmqPCMALkIZsk%^Ai{ZR0k2+-b)!a{DvS=_^ zS>X@s=ArIRu~f3eaGe%E$C(%BVNyCmBKITA$vB8VCy~IHK+&-2x{pXS3Y#2-)w-wM zt_Dtj)hC4|ckrvrglg3sH+37RnHuue*Qc2Dl;YRMOU>?>Anx$tp*;ms2`Y!EA%^z% zNK@*fD+A0-vP&~iKA4ln#10rRMqZoi6~DhS6S+29lDSz_?B)4Poz|I-ZZyXx&i-(U zA}KoUM8Yo0(&xDuKy2VZ_WkhlJIcLqAk;QDROajiZeN& z2~Z#Vgd2VKYNMOwe0klAF0l@YouOM51@w~}fdPo5aPIW9prfPQK7@xKAC%z%B^XC| ztGLr_Hw!UCdz2y?a@c2NJ_JWiF3Gw-I$R&y2fWeC+S#Xw-bbSFq~EWfYV7 zMWLuaT(YJD2aL0gzPBUH2)*Nf%L5YuXIx|I8C{_201&~{W!@gpukNrt<3JH?kwMv{ z!kik3gfe%JpaRyJLL$>-6q)9W{W>=8{KW@-_fj9reytVaFyhKN8J=F?(-pYR_22Rv6{ zHfYji20k396*k*8_ifeotVRIc&arn>MOzJ;6{Y@5BCy%v22nqOzphhukk}(x*UK0w zAh7gTRe~XX=QBn$M~pC2{_n#!9{dFZ`gRd=uUQNDN-_7ilC8 z>ezrGGAT1fWRUC$#04hQSE7hxF%m;$I&9_-TrXt03Y|M6i`^=VTlX%JT_(Sx>I`y^ugb!&9^;+ z4By7cPF41!PZsA`-ump5ZmIcJjbuZTFaxtu2Ik6L2GBtQ${sdi$XIv|uB8>f_c1kO zJ6M3__FC4o5?@DC)4v~%o2Fj=T(_QR1#S!uX~)5+OF7RoFyEb1G3P0Ve&GN87o5_h zhh=VLb98cLVQmU!Ze(v_Y6>$kH6Sn`Z(?c+Gcz?X3T19&Z(?c+GcqxkfqMcIx8Z66 z2Lyj@*eF9&4YF2N);i*WZWX1a1?p{n_a69d-+yTDr$FH9_Pyf@EL(B3MR#!x#$Jmt z(Qp<`XT7lB|0-Y(!7*hOFa8Z*2Cs({$5Wh6?;C~h1A*J_zpeWQ2LVcA5(^)^aK_iZ zusl8gTM@tz5Rc8NnRt?kiIn}O(+`39TH=4fo|5wbYCs!oWMS|!F__De#}bYnYrh|C z%y7gY>zm+$qE7j(^z~%~D?*^f%y)}jL`mTMk%8kF25_1|3{%Kj!8yU>2);IWFMvoZ zG%7a`Eg8m*Ykw(K2BFl@dc;8iW@GYsz3cndCqcM|VL%*0{udUAM3dX@Hk+UzC0KuC zd)*H{w!jGj!bP+pE8&PojY8i}I7BBLVr0NEA_-}TB4!C!2tq^f1_;1U@){x-u!<5s z9{R0yrLP07h0wnVsajB)kjflmAc7L4lcxZ7Ja}-hA`Bi!L=>zLP?kn3R8j}pGw4vd zn%7>Kpk~goytwWLuYG`IR?4GHU-W;w?b7D|J_K>NH0nF~1C{6xkBpYZ@7^@q!CwRz zlyieXW3taUtRRAtp0G2l2FS zv4~LxX%6X zX8yT8e7C!aZmbcfW+@wEa%?+@6gxJ}Ho$7D2rl!OdIGjM%>nq4BD#OY*Ix&_R5dyr zqvug`YEN3WwkyUQfw42iKVSj1>2;D(#vis#T4{<(zTU++VN5DX zZ~V>1Xl4#&d;p68RPD-niwM5>w}|0IW=%zb}fJ z+#&@GFXRvvmB@c@Kkk}EKr`Ghb;4n2k#ylYl9BPgEJT|^QwbBi<4_8aRSAE>QOFRO z5!PmjZ*=OWzl{)vf*2K=o6}Pj%vo`4zow9;INJVov&9JlQ~YEont6ahGH`si-g@oZ z*$P8bDM>oSL*J7HtwOys=1wM4xCQjLiKceg1dyr8z3zYKZC@6=L$c&y!5;*yjOb18 ziw>J#7EI!M{zeIv6S^wg69fD9J0;y>E6em zXjpf#v92_xqdXdc!JNE0HzO#6NkQif1W)K*eUmePA`MtG#K{j@zOAG)K$3+gqLDW= z5TFbkk?wz67-+_ZvqwhjyjCogyti1%X6VWDm9siOJPoan)K6}=&ieb!(5#vT04+z9 z1dS0yv3E^B_dN!}As}YMwqk<;OCTuRjUL(eW9K>MNkQuMZ=2Um^(wHB!A&>{o|>(n%U z(qwhid6})3%Yem{#_+ydb+aap^f;Ih)$yZz;Ck4nSKuL5oHk>f?$d*T04r0t%Arwb zgn56Tejej>O`}L>;1w}o(K_<}0*v*mpe|<6hQqlY<&HY+ivR`>k6E;<(8E_2<`i1^ z84tt#rY+q2i2nTrk#_b8=TjD~?wFXsSDct;>y@8eXa@KitLx)j9uZdOIUGNIs;s(I zl+>8VKQg;uc2xypc4jhHIDLZ`6~_N3gfoAOs8cu_FG_I8DTq%>2lO$5bAeFdKRX=G zDW1|=7fWX-A~EuX^qs?$yVwP!6!Y(N+HYMDDhz*_w6iGqD+C0s&o}&K63QNT4+IZ4 z`#l!7r_ZL(&x1}h=V`1G3sF&HA$p24+mp5&eQwS;9IuqhI15?FW`ux+|4>B7=M%Ns#0Xm8#fUtAr0BCQDkY6KT zcHcD-yQOq|tbw|>>rxnW-1Kei<<@_)KAf{;;JI&>358*tDWvfNXg;y@!I-rr``2~? zKcn9>yHsKCfqe7e(ueg5tZQSBmqO`?&Cu1Mx{g^@ct}z|>Za)yI8IHAXuo=g0lbZQ zr(`O{wTq}pus={cRCl;E^(1u=C8P^h#C%qD5P(e*lA5h+o~Vx97GQIEX+nQk-MWP_ z+zR-#?&8QOOXrZbt-z*P{#Ler!O7Xl-GdrRIyu@s_~s_fAZt??1f1GGe2PokaxA&@ zvDAede3W3|Xbw@rY`qE8D2|47@81(9p-`MCb7@XC;QL^gIxReHcGnAEs@fi>z!-CC z#$Bg@z|^bT>w%3%Yyd(bX2pLmzxzJ7Xlu$T0Yi+bYCWME{OJFZfX9Sj0=5uPz%{_A zv*>sKdiBHQ>yiy|uzr&^h(bpe$QId@Z#oUR2fl@A@qQC3nwlp3bv}I_f=sr8^vJ|h zj3%pNvu?XZgibQ++qg#rhJ_uaLc|$uFJ{XZ+ZN6kLdi#ULb(wV0CImyychG*8lGmY zlWch5pV~Dvh7XU14qL~$_T+=>R-Tvlp7iOn!!j=Jgk?1~x4 z)CMJAmw`<&+Z~NYakSv@jyC$D`#6JkPcEGvTW4Z*aH`Hc7EY;xz@kQ?|0Oo6;bNjv z`4AWI+-8p0+hr?cGs=Ic%VxAz;&Vc8${+%3WACZR!^w1qmpx6IQpX9QopolVO$y;9{08cG!SyqXm>IiKA^wDjS-v(}67lhL zsO&IyKONQ(n)X}WZc{_3Y|N3TKgu4F{_MtDVdF{CV#H&r6!CvJZZw9$hfREGlWB;> zfe!d&S*vi_ z+Uw9we$y&-KXhS9)orOo<}PvlnbG}LwIUpUkM!iGfV6*$H2X~fVmI7yND-O>b|#)! z%_ilHlYM)&iwk;m&mZ`G%E>W-U^v`(S~r0ahHcmqyT?}*d4hb2Pm@e_+brX-Od3>a zT*z@Xt;HW>UmZ_3_C{!AY**t!Ll|G!by&K;i94EYm0MWx_YEvz-u%}zN*(-~CLf6e zcnpB**w257jFJaoFeB==jV%Q!>-`9DY)w7e$-q%9P5G-pRMCcx|5$-i{TTEN#J{&> zh0^-~J(oc7sao7F1TiuG9RLoez%+5R?$)jReDBCY@`L;RXm)};uquzNV~tl5`XBmj zfMkf*9$0mdCM`)9y#T|INLyl=*0IZw#`75MDufAx_TT>iBu@W?m$82W6PIdx0tx~+ zFt>Jl0`>xby5Y5=f(>cUnXLOsBWbIWLDW;-M%A=h#3YP$GfTqj*Pp8Qg|BxJ2F^(P zRi@A5aoEgVlvxT%Dq}7{qv zxu)ZG+fH**KnkJCX6DTy?%-)hXwRaq8$c=b1@n=A0j*5t(xKU;br(`zkckjbuBcA4 z&2*;eqs-~=y0R-VfACL$^;F9v9V z)G(Vyi1UNjtUN!>_*td#86oLYroH@DD#0u%uOh_~f{0<;4JhzE^!mz{(H zas%G)HJ1~G0xEwnLO6`fX}=Fe@Dx0S*v8!Fp$K0m!F0x07^7Ga!NMdDnhQ9LW29Ip zDMPUelOh-@M9?Vt77&Vvz#KqH77VZMX4fW438FHRZS?Jz+pFZ}?)I}uO=nnjD-fv= zjvRrYEe0qRfCNlF~GGtg_ang)5{msM)|TO(;f8 z9z$5zMu9=ZhamLimCAI!*sX03=20Ya;MJxDN8|wh@P_-Rrw>Z?sTK^&&nQG1p9)F~WY*FO1) zDVT}R3td$8J{{((GMk%7Ivf-kAEcvk!yX|escU?fkJ}DKbWrH$*q;R`JodFb1B0Za zbkr_N%#_Q#xb)w0HT(K8ncux@@JxVtsq5rdBMK0OMmPsiFam3sMBONR(t?zi%Z36c ze?Dm-sk+bDIueDBxXWOM-)iCUI)X+F+ zkA(DCj;RAnu|HC@Rp2M}tm_KwnKrgN4+MuFj&ysmSv~72w@G8Ero4l6s&rY1^`rp_ z$a*}aPh>DXT|1NLSQqqeC6w?xS8-P;4Qq?*B>WVZ^9Nh`h)I`zhXNb|GdY)>hXO-? zy;|FD+(r`JXCc^c82DvvAw&25viszV91FR59Rb+@0~quSrQv!mGD+D`zJ9CO)zzFC zjx2AYz<>p`$nNT@Q>RW9^>M-qK4IY>{+zE*KAwD>@O~}*n6D?#FHWAmC0Os2xZ)@X_-M0i;7f=Q7!d0VZ^=0n?mn{EoB z=uX>Bf1)caS02|cmQ`<>EtFOq7k}B**VkcL%EAfSxay*1yMCT>YYSn(GT2#0%YI!} z{aL~nn#tsbE}q40VUkpLGFdq9-}HrL zif*`whf3H^Bumx7>?eI5RL{^kYzIDa|$+sWB^zt7juonof2Hk<=LBj2^v z{HCdn*#*D|QG9T_Bmma!+J)IFgrO9i$JFOu5*v*{rJFsTJ$Y0hQ;JE*EM+27N(R&c zMogtBf(<=W%07;8G-K(gp8-gHb|?eSQLetM|6WaBLq@I32tF2nk}u)pRm6!i+9hLd zHuJ9DZrX8j1lqO+j1iD4(U|iM;>U8GQf=ETqAkJ{($dulYH&H?13(&PueCmHkds0> zN{aof7}%Us3SOe&y=Nc_+$0yotP9lYJfXg7HsuOQopF_JKf+?$<^!-`?++-t&hcdA z>~U3G6-Y?T=e@~)c+JT8>!w~;ZR8sWuaP^1Q*IWC!kAC4d0)0w8;MYaAPl{OL)P=Y3#$d0DWpoHQ3Ca&2 zzo*i4&!*~bnuL3(@`K$&+&%gE#aq-&UYnFizrDE_GE$%-;v~pmS%A9IR;lpwk8{$l zb%~QCq&AdVI7dR!={f1=@5h`4$t$%aO>h}uqrH=dMQKofdpsf%peiMIWb9f;*v)VU z+5!gHtAJ2{ZTLt992~Z)-#2A*O9`VuKu+OuvF61W0FctBo#)%8speguj}nThHVN7w z3gZg`w4$X{CoRM*X(5zC0YpNk#Z`$314Jq4Cd+DdjjIDa9cd2|8}`(DkUNqE+7}Lz zbAa4{bM!M8q}?D5+WL23gp?)5f&?LXbGq7o{uaxBJES|^ax9}xm-W^1SSE2OARGm- zklv#NuKQXhpa>ZX{SwQ^P>Xik22ld9JE}CJGN)aGltem`;rh-VfJzAh)v9c+($jz- zL6^Lz{Oa9@x3HE-+}L5DM?ig3jbmKg4-sOqT!Hd+K_e~ zDL3(d1g<$wY8PuU>c=@_tWALU+CcU8!K~PgON4c-O z)kBwqBLt{Uk}>0WVk{byHN!9U8VW;$B~=OPct#Zh`4aq_OnUpvGvsz4RU+_J*`dUh zg%mb9>vE`R0vBsOfF*K+1~Q@eWrhJ!a-VH~Mleuq=FRPOhhA68WI>T1PHT&b9tOH& z0rf<8?d^J9bxlk_1%Xsd-v#^@O?N?{qNr=JkpoJB>a53LDtAB;x?e>UczpxSz#Nr` zv&`Ie{$b*ktE+8OcguCc>pllsC?0Z`agIp=bnCkh)$I&BWCtu^6ACto)|DVPb+N*K zIWUt{Zd+e%B3OX$d`|KCvP{x-K)$E-1`h1`6&fGoDe^lTSt#$c(P~RBA8Z7>tg21F z5nR^>#u*C1ueNJ@(|wB&)0#Bi@omPfIvv;)l)NSIT{oMnchC%WJyLWKNMWQ{>&c=#SA-%D5-kkC2UADjq6!-rKmf!bH!z933@t)?)s|NkN@vT-#zmb(GSq6J z5BnV@mD@*=gx-r#)Q|E(6L>-C`SaU<3`L^G({|5~ z0G2#Mzh0Gd^p6N(rIAb?j#0Zin?Zi`gcSPGENMsbG-ie6d5SxmEsl+3;i5W>JfW4) zg?YHqr_`Y$_vaM6pE3-8lx-#_q>GgS;K6nlqv!KkVplL$E*f@FYn`2X7-lB>ync)zK!sZbK zB|;dc?iW4|O@a4+2QQN#L==zre!}yDaebdDaJcNdU`debQJL?E_3n@_kGE%cD|0Aw z!u>hQ9JH(9N0s?~Y@!~I2e%$?I=&#wVVfPZw7#Rw)9g=Z^9B#!r*D%CAP{=bFZXSq zdgu}u4xsQreH%RfrAQo`0We0bLw&UqhcL%XaR|8X?i1^OFBnP<^scwRc3Kg(AzMZG z>yBRj^E<DAA9{AKoYtw&w$*LP(?fgd{&0k)qN739B+%H|aZ?Rc!wwr-2efRc|O)V0V7l zH$jgiRHjLPOj7Fy>bTxKqHc#0fSP5{F9g|YbJZ=e(E;{TgDv29k5CA}kzVF+M_3xe zw;U>sm)mCDqEDb1r!QNv53&P6hQm=?c$bHxG#|IQFpqxb$2)ko=Yh~m?DYo)l7M2= zk>)m#iTeOwN(ep!j4AuD!W(pb2r8U|7`sbqj2UWwAa%@NV5kAT4Uo@<4wJ$0BgtU$ zpArl%X7k0qsSsh7|Q?yP5u8#l{Iba-*nVr*GBDy8XYy1F!nfy6sF<_8bc=n3J}}ui0P^bN=At z3@H4xmTZCEkkNz56wWgf)F?5+pE=Uk-?CoCX1P05R0(FGpyw>-{k7ez~|<_T7?fApwsLuwW6Bw7hGBjTKbAG~MT7 z8SyH84H9GaX?MDDcs$)0>x6@~i&cO6;hvmsydO3tz%Q5#8H7V7GLf8QPJXcS43547p7nBD@cYi>ug%4*&9O}Ee>tkTqoRK!E?o*k0 zSNi}VATB{sLY1;-=Ez-_@}w^tI7VxZHX~meZIerVUwv($eK;alsI(mMQ8r-!$dxh4 z_~eaMD%44pZ%{`MKszfi4ky*NvRG|5eT)qTsbc~lI1re20auRaJ)NOn<2dEo4|~EdprQ2> zB{OwYD0iT^IEn+ka4uyE8Tb*jvP8j2GrG`!(=53yveeP4%^bu8>4;L(^f|lvF-!BkfO$=+y4{E}flBM*xGo*bQlS+J6l> zS?GogEpx3x^xT9FnJbJ-Ba8r6%L)2 z>o#6j5y>(x+wwi2c(wZ3VE0_Z7(d206asp}_a)MVhEWqsbHn)Q(-~4!P{k$B{H3IX zhFVFPYq zA#&WXnC^U$8FnRchs29=?0GRHq<;!kSfa{IzLdYT?wHI6yJ~wE1VB<07${i$b5m%3 zAj>L@+*GHZnAOiKoS!LQ(UQdyN~C#)`Azz4*bs3Q+jRatS_)T@Q4Gki!qkK^*>zOcHrID>BFS?Y>(E zR5<7=O#;iR%{Iyv{{}OxlQM}IX$6ETmAi=TX^Hz3ZUI#SJDBX1+FmdKqgeL#&Hqvs zc9ta#@4C8*&umapI3;r~sejU7LUNUp5k>^Q$N1`a9bvA7IK)EOn%20|eqIs=VV)eZ zT?OqT6S0^W{Z{TyTy#r)8Udm#CZaG`Y9{N{HVUw_8@Ymr4=e+$)= z)e0GU`Yv|Tj9OnS`f+4_2>fRlWBU%1<2b1BcvODoc^?T-<;L&);|_@EQl5p3{#@Nu z=n2n5*1s)e$PV3pIqbth65z>kc71(aFUOMf-PQa*v(Ix89+{y>v2(#GBpy3wPH7*? z%gyZVhuOu4f6YN&J%79S@0`sp-ur*v{`(SseE4<#!|dIMQBL{I`iNM<7C1)$D*Q17 zuHhf8i}(6-v@3MU$$I-f7CvxYj(Pp&q#};fE2AhsaUGw$1tg%P8kCXo1#LRnirxZ% zIh=E*po6f-po`uDtuS7a_=H)51X`NoZQ{7x+RANs;eVi_`O0G^CXAo6O-C`! zc8H1H8O%t4l8>NK{qdoGx`r||Og*3sr3mu7j}fzz2~a;&kxZs@raDHKv&hFkfyld` zV~j(N&u=_Q8LLph7u*cKk;IJp^YhAs&Yrc$Pe@3B8adxz>mh`U1TQlzMSt@5eDk*= zV?a9x?VCIrUw_48Ctn@7zJ7=np&Bm~R2i`>d>w%FpFpGl-u4Kk2Tz!ofc#?(JL%je zUmeIFH<_Q#457laF%)CmV6|T=#tOkT#IHPn=N-Og`L6D23B5lhz89}R#xnk9A;vk3nFeIP-|gbrMqvtSyMH0_f+k@3gWl(8GO*r9<$cbz z$6szRgb8e&IQY5qt?~e$;($!6xY1ZHzU>O;ANQuEqPDnu~#Qljs=c}`iXCEijui=mRYVzvl?8RGZ zCbqDODKWXZI}0Ds36-SKY@)d+teM=b&Ymgt{N`Vtgu5Yeh``rYNqMJ>1%q?I!M}1aB(mUG*sn zB`izJ%U#q|F^-GgU%H^yDqOnqm(HOABs&lJJiMaZ#q)^b=w#VgL-l?-=&u9i#OsVM@rskZ?^&OS`wRo$YDa#LgYDUnbB_+AK!k-6POUr3qs?&>H$ z6)AQ`?^%~$x(EUxjqHO!09Yu+TRw#)r3u5OS+$&fSo%XbDWvA8XuU3rhy?H?D0)Ge z|HVxZ0Z<@`?1g_t7lTFe6oF%rjvDBKsieVX*34FAS2i9@k`_`JaU3Oe^AOJvHs!2k z^$>9)g~i1(;6z)V5C8(~Vp0+`S?jir4zL+y)jEo=r8yLziX{GYdb@C|mp7BYLpk7~ z4qS-BOt_V%P-X(Ussb`JRE$?wXD_aPnRLyzJbUrmgq|b4c;o)_>iRYOxcX`GhqKEo zf6i0N3Ws_DD1mE0FkeyqXH-ww_QW3t=AEmWRRb30#JA#C^->g1l~25sG|Zs zf5Qd+YD|G87^nvqkP~7x{!~{eA!P(DTF&S1ok^ztZx7)XW5DPfl{kmh>GMC0R((oH zL7W@l9XdVuE-n(4GVW-_F28J$_b7Jy^Fs(c(z<|&ri>UARG~R$ zO?kxTN&+o(mVn$9@(0#SBU5d5W(Mg&f7a=Myu9(Lwt4m~@%Y%S{@Yg9|etHw*7w*TkInb!+a;7*+3IqU{K-c>8E=0jZqIZ9; z){yLia8R&78PskOC?niyk}5s+e~br2_6+QYr=V&9B}jKcIU^J5M-OOXiBK#xMVsx1 zWi^k^GCI|hN2ZwLat>JjJW^mtV=S5Qczp*6b@tv!0`z*{#`sk-wLEP(Zvs(g@PWxV ztGdN_&SM1Fk+P4n+DkdWP%a&BYYLpyt3)6hmnoD0DIjlf2-%4ruqbB z*~MhYY!H>gVFaCgJY5C14!-oi?y-$0=bry+sy>!Zm<1ZgL){la(BBpjpzs?d&^ik= zn9U8(Xr90Zo@$zl@AoH)7)myGF;7kt!J5znvi);iZ{8#44ha4f;6hxc{-`@jhN;xf z%|ZjZ+3!e(K~Uf{6QL})e`b#i)6_ZdeuzpbXtA*dwb9TP`0A--(!_5exuN2|M1;mL zxqcn8Ahdv54oLN>L?-gw07;sG?3PFxSU#o45i>JtxdSQmtjzuVz0B-d8`mlb@TxZZ zJqOz}v+F7M%nUtkZ@7_LaQ&55|IkdM-`1{fMxF_|824`5xC%ZIf4H}e^AR_h%Myja z)l|xpSSX@`(0pJh{k0BJ09;H_mZupr94NrnJbS2cAVySjGPYy^Km<&zQi5%}x``7& zK(9zub7VdQMu-UwzU@2Fs7qoxn-Sww=yjr#>$)O}V03Cu z-vuPVr>Tr2-a}=N_te`Z3T1P;UCi1=q(eY7>E84YwIeJ;ciU~YUDSb_q(dBCLDe8> zbah{1cLsHPulJ?$2ssgX9(yXp3`-%FhBn+9d;FGF9jPj0e~tD98}DsD2rS=B9aE20i=*xQd0N01YYPBq7_AIfdlWVPn))N!ts`b|fgDFd!P%LJZS( zyvH{H3O}#=I&K|0rhd|l(>~mTdLExbd)rL$Z0)!X%6z`8KaY$XN5wc_RQHRcu$Mq7 zz#Bc-pJvyDzw_8E)E)4cczCD!V4!D}clb@>Hs|ZL2h=B1{~zq0x#URQ@Ln-#0>? zE${25>K3bZyzEjVA#J&dn81)f{w@;?f9vLc(`WO8vRfm|?UmhF4F_*E-|#GflSTnK zHjiZv4??St4+r6t{ETC?pBtd7zkOZ_d`zbL|KxdPPax>i+-NfQl$&OK|Gw?wBu=`< zIVF;F_sfx2mQm+@e#&Oo<>FHp5Q`o!9u97Daax18EBZ!B`$k(?}y_W|Y+V^*tPtha+h$ zI}2nHAO<)Tc`o1i&V`?*l&~rF|Ki`pX7XwBY0CPw^k=b|zP_2fdMoAB5vRG9)0_KA z_yLZeVBs<^8H`O8-%CVuXnM=ku!m=vUzfLejKc zK3v2_?WBo|Rokyo;+V8?t*HAoNwh#|t9rNZdL;~zM)0`YK5RB+*HjDtNrLv2e-4PxpQ%?-ku7u*#=FyBF5PC>uwc<1=BLBlBR;k-!qAK z-v)8GacS2>SGFXoBt*LBs+|REb4S#4#u%|Ss9M%hdaX?|RaX`3b*~lIL>T2zuCguT zGG#h#Z?^lcs>|Ny!UA?|^24Gje~YfX>pv(WElW}se#sK&7-Q*_qQ2X1`mKggl?=Yy z->!or1SQH*{R~GaiH?9n`$d2ubxEur!Xk$QnHeb8?=-|no8(*-?J6SQS?LbF3r5uL z=;ytKH6Urmcrfs)Xrcu;7!5trmSCK&_mmKXT9t&m2?v32M&jb8Y};a4e?|){hXUSJ z%d!m+b_7mOw!jDwIRX$?V4)1FfB7XtnBy$T_RqI}i6S#1nL=AGi>eNn0XJwV*oo2w*W5M9d!e4t8mwlMW;pRDvbossU(!TCd}MRG`r46laf}0voMH!J6{ZzDhm; zXIaGBUC|ZMK*AVyY)Wm=f0Vm*u|N}PrEzZ^<6bD6gqY7EK6;Ykmhfz#k=XSsj&Q&< z{bgH?JRKa;bxH>w(bO@2572*~5XySdJnXv11k<3XfBpjm(+X^FhJuZ< z!u)dn;(|nHDUNtfk;XjBro|NT5Xb^@g2O-#IEFY8BB5Zljr0lnN`{Wz1SnHsT>|Gm zgpH37M-y0fP09!m>FNHv{i2K*v|63v%R@?VYMc_JLrN&Rh)v6N;+1t-#H~PZ1_`cc z<5nkiI(A(&%ap6Af5Hqlwsn+BkCQ6XPbbxx0B$q`Cp?_)-0oBQby=v8Rhb5SILxZe zLsc)MU34~Nw~ZPwigxK)JMfQ&56&L&&rK>&!0*On1CQNWtlMqOK-M9r-0$l}S8eOw zcoK{!m_8PVXE(LgvQ8O`D!dPKo5;EC^N1~*>ON$1?&F1@e|U+FCOn9?lY}QSw?;^E z!x%q=BnibI(ApqqXP&L7FZ6sa=8-MCsFgD`DFB4`!R!0Mi!#4l^yaXVaEftPCq|YW zG1LX_w3$2iwLd1XwA3I8OQJ8pyRnR6oTk;6RsCZm32t%q;1ozW7Ef7kBbuNXqPV}R z*JU_o#thKkf1nijW`Q7YphSj^>h%nX{4obINnuc?T~jYVv>jAwJ#Ksk=Lrih{l_4H zhMJ1ysyVsMDskk^~T^B*p1HM)T^BVve>5be+nYajbHH`Nxf}G{Py@cdpn5C@ix;ovyY&$xFP^r8dKh)Ek3B**gjT$#ia6y8vUC=NU; zzh5;1buuIh1NZn&u&+iEZI4N1zzXyakjj9gAwvzM@@@^~D9{tSA!VdkPe6MoGhzeb z_I(59f7p~hK2jy~AUqoDKjzJJp5cRnZVO!SAZWS}S zFjfwZfNvL(Tfo3ZVUXpl33ny{-EW&s8*Ks+oYHj6aav%pkcS>lqA7O80t-1LqOqc; zi)qvxTL8KichoS1f|V1)(}}q=wE9`l=gtJ^e>47FLB<^{N`SssEr9G?88X_-sGe57 zx1_@R*T|uyIUKC-2$13r+lp7qx=+>VhGFLR3rvBl{f&p?qX~z#nWYN zf7!J$&Hx^Hi09M8MGRTxP{COB`tBX8-g;ZlzLud$lGHa0*k<3y?!XXDb1^eo(H>e= z_QHne@Bx0rF>|suR;8i#A*Db6=-Y*;+kNb_f@1y z1(_4o%0Oh9+Jjn9n*e_&XPoQ2WFBZjlhrROAOvJlWL&DIJ#{h+Z z$eE*Cg?1M7<2i|iQ4KIVlO|nsTP>Gm6P+wG<>NHWpR2?qWk zIQ&dgE`oeOA3!R(NNn~YHZ7nIy%XZ~aOQv^Wi^J>uG!wM%T2%{)PPE`)43zh*=188 zXtYjf{!+#Ho1aAD%)Cph5DwYOU;Gl3AWG02T_01F3OqAoWborL7ApT-F1pm@FnP>v za20(t^r^tmKd-~g=LzXF8hu<1f07W$aAx^bltD#%7A@hDsesuY zKRolr2uJvgjgpR4NIH)je?a;FnS-E2DtvEC0Dy2Z z)+FnL_h)SWB8*;@@e{-2(d%iJT35GC5eg6A>nr5w0n29`)Y~+Re^>aLIKuBmQ^##O zKN+0US*eo(3hLWuMa$r)n_}#dJCsFg0F7={rTTg>{oPbhUw@1Uur3eI!U0kUkr31l z#@^^@oTBF1H4%*!5`9-~b}4MVV{jnhx33%9wmq46Vryb^V%uiNp4d(%nAo;$+qRR5 zPX4#{-uK*l&bO|v>UzI)b+7kbzx6znTnV&IeNSS!M8+G&zk=tn>Cizi?!Wils1w(P zGSZuzmZ$N$zd$yc;!fCw%;@ASa@uyd1Q}L%B4@a z;^x(#YH5F7eYPj<)}&lDd=-ye%uPs*VA@bXK?cJiSms1wl`4o{ki_5cEqY-NO>AON zrGZ)tnjZFNrVO?vwF1rUXeIv23r~ zwZuf~gCdS$u zV$AUPHznxWf-)u89E{X$3Ikm@pB>;n%LkA7OUiNj(}YmaH9gn~>u z?5XN*8^y1ou3V3HNzNRD+-InTUJB%N0o?|-O2;m86_AIWNls# zD-pc|8-B(-tTnawu z<_p*(cah#wbm zfm=dG(au(hxNmu?6j)2|3gF}-WH(DBlrHh2pTz&PUqdjDt(%cReX^?^1*}41Gxw zD*I&U34g6SGe|ySN*3R*W2$N$cT6ivT0CKTa>JsYQ0yy&E-eE8s)63u{8kST&6%sb zpoQJn$LX#unSRJSbXs|^9r&Y!SWrH9J$@nLkV@re^hGri-5?Rq?!h!~dx;pd1mzd+ z9Hf)DvMln8x(kx}y(ERf9~QUcx_SL(1Pe`ji`mI!ed$5Q_(CDrZ<<%Qh;c?YZh*4Hr3)Jmj?~4f>BTsX6yWSf|Db^|6BQKuW{ZFv z()8>*vq8MMt|_pyf~N)Tg$ljS!GoxhoP{vSx<=u6o`D@ZLgO$^6XC~-Pl;(~d%`2` zU?A^!3SG`UOdEo9CMg9aG6zidp+Wo8Tn`E5Ko`g*oC4$G9!j{!zoS)e*-9p@F^s`S z^H12V>~d41P`x9vyh&Mgu{74!7nHrm|0m$d#ILj9CJ)vQ55vDXLxq zA;~h+g=t+%_aWMDjMx=lvZ;QtXl(||eerN8kD%q)3zk7eiWlGmx`uvu{Qn&G{=xZQ z!`>_$?EmkuH#_rx-R0$Flrgb2Ytrcj+XV&GMyUi%MCa%?z_v+_%0&@w@SOlya%YI*c3_)mqO(!IUZ|^+XADwoKA_^pMPQ~NnOT`q?7NlVKoE0K&h-FY zUEZ!YTXyHR!`&AFv-{nbrpp{g;2Dmep)1?R@#c1R$|(r-k)41Rlq~RCswEgkIUD`o z;}$a!hzSldrQS2hyeYfWL+R^1+fn4n=P_; z8aEkS%X9z)8F5x*DqG6&k8c4Z!j53*-NLa2*&&pET;LxT%D+?I|t{14|el--C4oKf#2?hFbF~Ev$!u=h4X+=CYAus?{L8_5G zkvi*E6l^e@bZK@Z1YbFQ`mvw&iK_CjQEg<26f@l+XnD@#*?(xdpxOsAK@%v-86vbm zP;5{jMMG=6GF`-3Ji}u+z%ULhGX!_`Ema^s}7B;@Yod`%U@_PbQM%fr@+h zuxClg$ULn<0zDrjH~I#n3wAf0ER7H9HPBl|-lj3*Wx4^`rUMQX905EJ0u-E@-D{^G zGj6z)vY~qQhma&3wQIcUC&pu0^E|>k&JR>0x-{!%_#0VL-Za@zorWsXwpOnwZlz^9 z0iqyG7;+)S>_?Fe#JGXqqV0=)HP;16vrTJ*VDX?p?SioxI?krA(kkBh=2zw?iPmS7 z5ulMJ7sT%dcF7lp(n6AveqZ1I_l`*@qu|%ic#rS|>HnRw0MR7tq zASVTg0@P%;e!>U|r3RaH(BeZxlkY1>`f<_7D7}n#!+P&)^YOhu)a~Yz7`3R({V3*~ zo?Hfw_sJRwW7IWR=3;T+g}}O~G~SAE$k7k92B2(4A202d)#zXev-zCRgh(+n4 z;U8s6e-T7%sb;0Ov!&Ol8Bw_ZyC zq{s4pErXsfI{1(@iK2L{?iw)qq!{t5r6sTPgeX|jCu=rM(SKfq^CpX>wEop=exC&{ zDL1n_+Ta@kIkGa@+_Z_gc{pI6xlr(Ck}~Tx(wo}YBixa)&2aRZYLvlfMMuD$R;(*K zb!<;Tqb{*gS81Q_y-%H0SJ0Z;CVsbJ+-abpMcCb6!xGd)2=1hzn=A!c;$$ycB1>M= zV}=#1T~tOE%_VJ9rlx|)bbBEn5>5epM+&|)Ao7+vGM-`3pod69)8EB@?{JS=?^4(! zCXr>)M5w^v1b*M`6mqDjz6eW(f@N!2as0Ng+x>TE@Y`R*4+_t$x<%h-xZ74H1|AM~A~EIuI&X4Dm6l`qRVpg-ZQ$)L~NKadlbf zC_o}4tDj{%{x7=uhCH!SEvg#PrGmWR!Nzc5+bFZwUpiWyw3WYqMYX?udy2;1?h?}$ zZhk%Wp$d$s?Vau~YPiDNaWD)X@7{iaE6KG}7xC({+#q}uLAWSQFI_!(dEGdBsf|>R zchVIaza^kA5!@A|R=z2|WA~*4(j{9&{Xnk=d_3~u%%R{PbEFzGCqX%{pL1FC8 zp+vVn(4Z+@r;9d^LN}q!)Gc$A{iID?m+zH?IU5J<+i_hVEHVGhD0slpbM2;(eZqls z-$##fg_8{rHZ4mXSPej6l5hg?M_!xhlXd#r>-IKD?XW)Ca|oVP(dLa3(Rh)n1i)gOLg8GQyGErwx{E z2a&I}k-O8#Vw(8pValJ`GYT}3(8Y7|xEddd=qe+A`qv;H&v`Lm@0>hw?9Q5a_K)s* zIJ{15`~7|JWj!CtYcEzi$=mO)wvk&5T*lw)XErSGvriqkg?EUiN@H;k6>2TAgjUGY zA%Ej8;j>Sa;&v?Je%E^wyF#-h<%dlEwxyAOfoS+BB-q&;RV>Mxw+(R@Ot|`u<@0_g zGS|=)BhY0*RJHR7Y_@$|ghTk}7|p{aOR{g4wyyg-y<>?3#2my31jB|#j^7RBANe`vPY>~tH zZwf~5Rq3UKGzCTVd%GRlh3c{FP^zl3DEUQtq?!LR%#DcvnNq%oj)NV)!^R#4V*POq zPy>&Ii_$nj*9RW%TcynDraHm49?P&B4&-dUWuZav_{9<_LgXLWvtwall^UO^I5YX!A0X`-d|Z8a?FN% zVZzmE&N;&rHN*XbP~ho~SWDPv>3=J&2>%PD!_M;GARXo(EdK-2NpPS=Z$h2|vjzpF zZt|W6O9TVJ#c3#0s~)~WI-iF}?Jen_@E8OtG(0f%PM^eKDtmu)G^ZdI$J&=t>LSO0 z@mE{DDF)x{x|IRFcY&&{50EYfAoJ7U@z7Dj;uky-4q8L5{dynBD+q8cgxKlh_Hv~G zn5(gGg*sV*>r+g%ryXKfor7e?!%*9wyS`dN_W)wT1oo1$RQE%L+9i|x#Aa3-g(~25 zV+gFI7ws@oDh13CDLRPG9TABJq_uG`U;_vk7Hq98r{oWy0T%Zpc9}C=qe`^9tKNmY z^KYUa=A_a=yplw|MAwmEHyT7C1%zXLt|^PVn$_MlB!MSWn8pJvO!yBt#aN}(jD7Yk zzk$JC275~P#>|In8HuK$rL@LIlzM{aVByNb=N#whZ;X`Gk3Pw85LE%dcGx;?k!SCEA9^etj|MJ+a(KTS0Q;(z*pl? zP3RRxO*=7}J&*IoEodkrFNqJw8D1c;5CDiT2S)T;a^JV9DlX!V3%yVE=R>1umWK1A zdSI_NT~~_lF*6DOp*?TtcVC_|VY0ELr0My9bcUIME<{3FN9Jo6-_>+uf9z&;ZfS?o zAvpddkWxV0e+i@7uO9ZNBG^xIFxi*Pr5aVYTDXOxu!O>R05ez6b zySATj7gke)2%a1M{kGFjfo7i$PSHLpPC)|;>pl%*08)8Zt9Fg?Z5tPJf)0-~C8JGZ zh=g%Atx1O%9!~wQL4I?fgxSi8ov*B3XnfC*o(*?!0Lx%-3xP>J*)i&vA zrQlf%B*Htw=n3QW51w)P7Y=g-P-ju|s($@@Si>6#FeHdEZ2$h~w62PnGywCO9!~^P zkEmV}ttCgaZO++a-DXGr&g9cxo%%b<;M_g4(JxmtBNj#n0>+v4U!k7+b-_T!pLjUX zz>8RFbkQEjOu`h=Qf3;Z2*LBYIR;*PF=q{tYGDyUB6ei)SMT*tX6K;fOFkIFIuj`{KHv9|V{QvJX~uBOpdsF6i=SIHghNp4U`jORwT1yC$cq7Un z=%r#(oO&QeJ6mshNhm&^OA*pQDB=(K9L$bp0~|xzc-Bq24zjYoDY(Si7&b#>JDV-R zW}oo1VFTP&fwUOiF5;)k+}OPtPZx?Py`d%edDnAiU3wo(E`k!@sjAajN|nD)s!z1) z6dvN?Ll{B)L1aeqKav4Db2h5ZFc|cqg7#_NsPMxC*O1DFeNa>@QB+k+J;Z8G0>MiZ zmz{-zM`%nx)WfUVDqk`qK*hp#Ga&D#5L2~CS$a1|&fDIH)-+r|?LrG}S~?;rKr9C) ze~!=+96+bAD?t66sB;k69}~@gsEhwj5eD)tSME0+SaCyII!QP1PB@TeJz4+nbm_uyR`Ns5AFSWt-Zw7UJ)HQVXW+Y%kA z!d&UN)a-M=Z^t)4LRS9V2D}N8SFLhdPOc5`vkI1hA+ z$4UuU0mA@eWok-Y0W*LAs0U@N{NF%jpOL{dF$0KbK=oPYDFjQst{xb=LbvWN1Juxv z(om6M(vCHA21TxPa~M){Rw=cf2As_}(JRlbOH=GdAMd}1Xy31|CA-{cgg7VRc^kx` zG=?fnlYF%*)1MF5*=G>?-4_vphNxJFSf%`_5~Ifn?rty7u1qNbX~Fat^9moiARId+ zG5MAfI0397^22C{8s3Iv1da1X~V-+8U{@Aww-bsto@0&m3gdk&aT>kudUi+lIil*v&Xtd-%wNc zkuiwLmGfMga9|AN2MH_fp*5td2R}q98Hszpnjcrv)Yr6$nIM|(z5az|kBPMZ4tIcN z@BfC{lSgk7*Etb?Yx1(OgWg|lV2pc+<+G`l*ZUpWj=uvA5rcZG@ z1pC#dP;2l3n9uUsBOGnp=R{Z!d4u=FUQxrHU|Z5{)_8w|P?+=~rO?!{^=hGi*e1p{ z-BhdY>0)i5)1&^ddV(8_5n=o;H4dS4j|YAKh}=n3eoeq69c!`cmp(4{+d}=SOtDOr zk1h$(yeSVs#lYYGYlY?#Er9zx<#28wT%LnxY$Bix6y-I68TPdAjq;ty6GKmPA;o6o zP5ST#G0dCAs?EHS>T?=ja<*ua&Q*K(X}FeB)A&2E{;qz#ZgEnJqM}O$fkIzs5gVDN z@^>6AI{svS$DmY#i<^bhf~%r0DfBZapET+kFpiqFNGIjbU>G9ssp0({-c~+>;!CL% zj4A62l+IM=m)K9`se)Fhu<=ody6kadB1S{XJQ($eDDFN(xb#PzAB|9Awh0%crO<)y zb(l3-)u1WY;8~$LXQBpn4i*Q1|JptohDS=*!^qS>)LY+Ylo&>@;9BxCL4hc&g7lws zK2*Rs^+X%Lp_Ro0639uDg|IDUs6ko^=X@ zNIH2l3km5tG1}Q??IjIAe`)BZ>Q4#4+c;}o(z3lLp;M9KDugpFf`4vQpQVXzb@_swt)AmMP$*Zq-xFPgHZwuYm!lH_%9o=6oK(i()p&jtRu%(wW;F+vo7C-g~y!frJgXTwTVda z`n1@mVR@5PA#{rOex%tY8+M(~JJ-5@7lWU#_;ArdM*s66{C{e6)c-IrIsV(+BJ%QculR3 zP^!x@BKy$Xljw8uI{ha<#np!lA2ke?k@Ly;XhuBAPamcO4-EL;Jlvk263#>-n8ZtU zYS>P$!y5}hh(|DB?9t3c9(>iDE_4!Wz1YUzh6P4V}TKK&_PTNwJ#_YDzeg}|N zhTS8>2${wiQZS9Y?Z!ygLB-VPk5_fP?cle?k>!gnKi_U}2&Aiuqf7+BRed`9yf0=C zFwdsLc6B;?MqjiVCzAB6?8eh+xZpRLsQ+rg*@=QCzbxCBq=TwTsBWG(dziE_4IAk2 z0_yTnO}Y1cPnyrl0=MAQ>~Zhu&hl>@3l)TVTT8E6%Un*f9Uyi8tX!wLgbG94khTjPdB>Q z5i!A7Pq`qq^ExAedi@bi_o1B_x=Ajsfa<*gZKn|Chc!2?6idv0gd{G5Xi$KfNsRHl zQ_Nv^SUm{Qn}{^OuI{p#vd9FAGAJqv?bhK|98A)jzDRuBltLT|7}&vmYy-wWnt$B?>Pnh3Bt5R2{LvcY>fRD9HLk9y}PRt%MT*h1PVeRCxawTPMA?D>$qxCIb z5R_Q~CXW_PSGxtqn5rmeq18j+_l^%&UGfs^;={yOb;)6aTN*?bn7JhnK+aEea2Q%^ zG6^deq(=D%z{nwfj24rdaS|-5e$r%2{2rQ~Xn`+Kl-P4%uqk3_@h67Z%IH?QNaHfs zX>1BL0@^qhplU~wNs;Dz!S0?8vIK-p!L1<`+2RXlTw9&$(k?T-)`|>6oRuzcInR0> zU}70(Mk1%Q17bR!tue8Hx*mb&!?2LgNwDR4PQ{_ zDKdG$v1WJrD+{WpuC7drQc#2#XYzHVv!ZwI>;5vaawh_hi)8=2`|xr#ZV}W!NB?U{ z*NXPfV%G*?v3MnsXHE#Yd0Vx>?%3YpVbRB~Vfr&lGKfUHMZW+rMeoG5dVs9_{!!Q8 z@y+aX)O)q^cK6-cWiOu@t2+F9ABZ}C2kn8xuu!a7lsv6~dsl|?!*nun+2Qg9k)IOY zQ01OB{o1QVi0Xz+h-|IJqv+3PBS!HlBx?}r$z>3N9}fnsA`*2~#3T@M#hQo41oJ89 zT@x;Tai2~bpHxdgmSIcd_>yutWi)>C4s7&V{R9E>8(#9Cpgx|Fc0KJB1VnybeS#0! zDkSB^dSjb(8zvBMFcCWxw+lrQ(M*NA%C;v@Dbn7-BA1X}m3|k6kF)kWo%{f0bEbzR zi~5Wxzal;u;F>!E@^3;~Qpln!9{ZTV4$p7`b9Fhh8X8XJ1A^_VRy@Ae^QS#*ZrE7zip3<-7!IfzbJA z4&~O|p(1s_s5>tmf-%^Te>sTzQ_|UU4?C4}?H3%r=+VO{fGX6($O;D`T#%yY{5J0n z?v#QGq3>{!0zNVrkvo8&=br(*h{m)C8P0^rW9Nqx_D<~b>?>Hl{{#8Dpy4qm1JAmj zRI1oL&w6*dF{iurAvdYpQ7?^tg#XbE`&Ktbl=m!9N^#%6GrQiC$-SPU2qrbCf8oTj zt0aL)Fn8$=Q;qT~x)*MbV;he8(e+_MP&b>Y*5N@A6|D;5c0*^bH>lx?ovRRhc928$d_qw8%aa{ zPIK!p)XbE=)wv3+a&DiJi5hS&k|Ti7+!DS(phOc{KoXKd=}(T4ls z24c*##JPM|aGu)xX6!(lB{Ur=^zzk$J$8(SAtfSR3t{<}e=Gv~hq=u((xheVUCw{6 z_%}4RW9976L{UC^B)U-Cc&j%KSQ69hPUQOw5p#mv5rsWDq*1c*5sI4EQocta7->~- z6&k54G(_cCy-psmI}f%~dYACdcfU8ei=nw;u^QZ{VV%L2#3DbtvbG9%QjK0fgQ9O` zZ}7M~Y*;TG$)ASLCcFjgkrG8IaF8BHO@_JoL;%&?ws>3rha=1!T>>w6FDS;FTw(e> ziCT!DW@*+-rB%B_{9m?0A5OK3oK7|r{nj{Sv-qCSYFm86@8pp=+^mjZa+{p>vLwMO z8B0U?2sv${|I*Q4L}HzPxSaC=)WU#`)P5M>X{<*eBjulF^Xx)7sv_3ha6Y&SmOX+D z0yuQ|eLH)}OhmtXqCQ)S?q}N%EkvB{UxD`(rjJfzJ3ccT5nA>fEueoFFYgow5ru-; zpY+}~Z+Z`P|Dp<~jhi~v>LX3(yv(ACZiINn*`-7ZWTkBhfTn~A^qANZ{{J!Mod4aU zW?^IIY??g>BLxKud1`vN0GogT)Hv=A4@<|AKb;we9&F-FYt^*)a{pU#UJ8P03q#_$c?Wmt1JR&2deJ3z`;8xh7#Qc;J11@faQv^SH}C z{J^#8GVcxrPe?c=_wB?dKGy7@I}GG=e04)8|Ma_@n^^J6176zfszJzs#2cFobQh8wEn0-Wk)AuJJ6?IaH{JuUEXB zu3fq|ySfoM6$~ld>CPB%(;Mit8@#8oa|u6{!4i)%PbJiJKmLemYt*5Yao^ zBLB-F==28${8~v-#*p~3)8uuqJ2RvsX<=~a%QM)PJSS>v(!X=gg7X`6WCt(Qg|WI* z>+?dRXa7t>BmLdPo;L){Tvvcy3=~Jth!aO6$V1LFp67CE-mC|pur(*9vuGBjbPq<* zz#(&ietEvZ3YHYNYcz;2Dj?(1$1GiN7^$y@j zXKeZZR^|UG$~pfVOwYo_!tp=n>74(aVEC`Bg0ndZYf9HM7!4pBGslF{ex$xH-e#@S zb!6v2cP>SMl4#qkDomPD=wDzlhp`OATzm!p>V>&P@uo67i0kBO{S#Xm-y*42s9!O7 zu>i4z&WZRJIA_bSI2w<1KFVS+2_c1iCe8#yhPgHiACZqA<*hCTE&1+#%?8^~yXOjA-bFB>!3M5$w?TsJgbdE)CBHJ_=XxJ~r zm~nkcM>7>hrdOZHQTE%`y(%{FC!Z8Nf3>RP%J>oWGwA-VLngo$T38n7< zg*q~3z;Ko6t~EfBBI+lk{sH!Aud8ysdZfNJlC<>=(NcTeq ze0FI2qnWrQh{b(bqtQa-fh&2NQCD`fojc_q0$Ut{I9KP?>{R&c2UwK>q~rhP_2Bxi zb_*K^=YQUgru~0lr(mEjO;hh+jnEL&VR+do;gH~N0OWGzZ~9YSJi9e-6cl^P%ZPA_ zN=dp5*_qExo<5$G0#RBdf8EnW|^hQ7>lc`9Oc620b^!WmrM4w7*Yf zx4)gg0P5;hok+-*X|!XAAKhYDP>_M4Ekiw1j9Z=F4~G+XjJiHAQ%xKDdlT9)Hu_ks zZ75jcd(t+T*+DNsOjy*bKg0;?)0`J~w(l4>bq9ag6wR{h4i0IUmiNbrHMESa-Fgz5 z`H6V-{rG5{JX_B%JL9e*?nPEI9<8fC ze=pVU?|2@^$uiY+LHD{6ot&n6V$9*9xIMOBQ@<#S$Sb@e(xkZgu@!&jf>J!gV5D($oG@&A)jsF1GES zuXLHcov)bf2rzbf!U7DR?5`6mWn-LEjGzz$#-=1L285gzqCo~^1zC+TNOMjf#+u%> z7hq!C*BE>o6CgtzOkXbhRc&WQ=*2rJq(8O^O=Z?U1g54r5Lh7f+J3og!cw^b#<%|D zQH{HSgv^+rPi5_5iPy8muvgMioGDysSh}ibl(wO`U@`pce8tNI0WpaJ$o#S)G<%6M z0@}7SxT8vBst;&!aJ|9bSVln9=Kk=NJBn4O+o7WAQ~sfij2WcnNDpmhTNO$7X@A~_ zB8wbyA<01Abwd8te3e(Yigio_kQ(Ey6Lhv(?T!&tPqWB<(5$iOr3eggVT@rE=j`rP zt5%4?mB^nKy<_;JBE=eZ4%rIDU+vYtte}+u)wi+@(c6y2VuN>?2%0XJ9HUswO&GC z*Phv6-?oH=MS^t%6NlpU^C%QveEuOQ6P9KtVaOgdinVUDNi)@sj9t8qAgi`y<_tB> zPJ#P9%X3HJh#od^5`q+{sTfy|tzFpO72Eo}9e}L|u*T`s<5O%+udG5HlKoi+$16jb+Lo6OS4DQKI>9$hYNu6 z^#KQQaQb-lGhIB}uR10td=8KhSwNBuI&q+>LT9Iux9?or+|O{-Ib=@9Bq63IbJA=4 zhTwgTn*?8)y{Y(MP1M*-5?guioAH@io0x&&q;UdnsaOc4MRcVA#aJFuF&^@ui@erh zNHlN>lSFD>LVh)aZdoSKyc148x~C|KR>HC&RbU>+6@uHxGE~~@4ZY^UYQZ(~_xI<# zTgoFZA;Uly<|b&J#*avc&GGvOTr+-#=Z0@8p?gU$g1ehQQ#E1*uKX zzmxUwNn%;Of8Fo~vfUK(IH$n^;+Y`>r=LW7PIosd&kd0a!VSe`aN+%2Mm4yVZMQVY zlQ|_1FK@ZGFl^{*@L(FH86rYi(&pp;`Yfm-*>f6f`&F~{AsGSH%SFp7G<3$)lGP z#eCW)=C~o&)p-ctj(W6+s}R7O#@J|RG@$#B82|Q?*9!Fj(n$^!F4b(4Q^k?w$Jp0l zkppokZZ%LfOaa=(EIog>$@hsQ6wu+yo%^J`7PuH9G;OGjTq*ExU6gl7GpPwQ4#IG1 zseJ?p0vO{J6v}Unx3!OCscFd(UBFeFNtacr11#bpX99aOC*v|KJ1VbzN<7oFZ0%y6 zhy9|iz0K7C`&o`HZ&qTAb7s}y5<1tuKu6Di9rD!8{jnH0BAgHR|Bi@=64#3(>&Y*3 z8<$bhUj!~sQ+V5Xv7Us%Qe1qGbAc*2QC$>kPX!&~YFCFdC65*!`V6tG0On44(WVl1 z$z#sVzB|IAA;Bta7a}EkInuoA8KQrOkZ$ws=BuTE96G!&$v^-0#|H$de%lQPIenMK z!gF$ex{ft@zZr<3hZc5J_dL_%m=XZvn25%!8eu*ae4CI~51j%Qb25yJ&K!^I#Y2Y* z7D-Iv(VAt5U(=c}ZXDqpa)B?XtN4a)rdjB&;^WCAjI)!s?#O%4)lX5Q<>mL0tr>xC z4VL&oP#7_sD=*m?6ai?TL?D>d&(8LHp{Nd2yG79$IstJnXgh(qqxZ*HM&of1l0A<6 zIBqZ(ypW_}M;^11)n9sUg1a>K(C6H&G&+V#Mh1zIo;A@C`7i!4cvm-+V8u<0CO!qc zs$U;BlKFsx+Q;#ArV5CU9!M3fA1H8jv8|hbl)hQwi}Gh7{?Yo(du=_hER_nQ^mN`p zIp7H|ci5Jdt)a1gZTDxnqW|CHnS*|a7rzq!$U#jItiKAmT?I$;jjz4|fdbAkTp|R# z0V4l$+PwXfCh2x3mGA1!WhQ1%B5bT1K+D2eLmq!q((2SlB4liU)dr&*zLx`;ruu5N z+tp^!rAp?&uDBtbf7@K(r12aaUn!xZZLlqJS=)MwX#^|DDbEkp^ys#`B*v=Ez{f#CU-%lIm4;7NJ7*jAT z)1NF$X8IiYYVtzf@s@tDn#aK9ZxwJ5Xwg=H+utZMIu#h?D%ofp?VHHaX_VTj`@)croVrtbAqg7{luQu5&)q$mNBIY}yw4A`c!R2) z^=jzZQMP4=mXlxwr}cD{$~M~q)jGgE1zi!IG{a7HXFLX%WKIERR08qRxj8;0z zfq)tVtVQ30vIevv*&!Ona-*`ppL+xqIKEIgejEIVIi9~n=8J+{)|q1zd;l$9Ar&@IUIx}i{Z9}!c@QYLeF z*>CI>H!>>HV>a+EwMNwqVW8)aZszK3>u^e{nSoojE60~rO3sXRR;ijwLRnz;+DFmA zN3leo`UIR7@OpXN?+$kig>;120n;>&}Fm)L6E+M>~1_^&bHj6($ zPCn$V=c~IPbHuKuw^!mU!;5bX=`O~1Y(DLU(Vj;oy57r9$cyP1%rgr}d@CP($3|7I zt)yLx&IE)Bq{g23H*h!8-{AVYSv(|=D9Ptn)Yc-M)30e^jCT7S8V78mGmsG-2E;R< z2e<2vwWZ3Dxr9nJ6jZ-pmvsHkTNtGo)6^~Y%I$0ZfB7Ca;QBLu8)mV=85!$H)htyx zSYO`+XSzqz(pBz!c@p;2pq~D>?NZ7i8n_lfFcg=p2kon=4+sV_esf$I7;SUJ_Kh_k zB}y%5*~ba+0}V>gPESL7HFRkbzpvT~<0Y$Wt@8?rw}wF}JT2wjecp{6mherV$IO_2 zmVb6?OKOid9vUBHZEyo>n`)iJAo0@7%OK zRq18}oS&~+Z;~r;zTtYAT^;TZDe6}n$SwoHVF{i5pO5bxmo4UWgJJ|{(BA#0qZ*UF zf5xh|+IhOXBLv#rr_#O4eyL}sJy!rV&yyj|x_0P^5URR+Z+$sr>btq{! z{BcyATq=lmEr86BBuV~L+T@^c^l+ykIT=p4A*yCeq!i(kRZm0*Z$ib>uH>5;xSS~) z{M-~G_Eg0U5yt@-M3E4&zNPG52P`n1q>vx2SJD34p-&_6e7a$2vR~i5_Wtp@qs(^& zDJRRH_1YHqw?`e}zk}}{K8Xi_DvwiSa#9>w=j#k|nc&lT;!4%5@5BwJjxNLE^ZmlW z{wGLl&`^0vc{*%UgV1lQGG|C%=;OzWmzBsnj)aTqvq@cV0RuC}kBHBIj~mj@dv8+- zRg=0|Z4O`i`9;MbL0hpxtKd67Qf?G_+vAa)5Yr3q4}qR-QU1q7RzU%vx|!CBtdo9G zAV1reVD(k{Er%(*V*0s{U^5$E@#o7I<_~M?PcK5aP1E{))7T`fPJq89Rs(;V72m44 z;5awG4-{T>AB=S0y)*}TRT-2v4R5B~*jVwWR_!URpPI==Hi`Lm+t!wg2zECSNm61f z0?c;}!lyR;FEdq?`@JNRLv`kBnD`GbLtZ0h^74AucQ%bbr#Hb>y3ovDw&JVRCkQ#FSzA}nM* zVXzV_+^#N7Sb6+)0nW|#-P(oDbh665w+ni~s6S&S-ZmSB>Lx-%dbfgFPh}RaR5e(S z_BA`HK8cM3s9bs}Gds-X28nt^-X zMQ0}{Kyl*bS6mkCg?lf%)(`tW>yIc&2C@%F&H|5Rrg3&SCjz_Tea^%I*6NZ3qb_3FQK8O&#@2TZ!0Jb!6Z`V$fIG zG;1P8l5pD7xab#^7AZP3GSShG#lro;kP$g^Bv*sW$Kqi~Md@!KQLF8=;@BvHYmGDC z`Ut)H*E59(q4dLeMOVhJW*iO2*vl+g!0}9`paR*42e}kfrbH7-X6b$E9jcu4)L6_a^4TE{DskzH#(x!hyGOX3krL=KXW6FL{+(DKlN&H!Dq83gNX_8=j# zSF9fT2`k~36YJOd@faNy80&GCL<^F;3({xV)V>)6TAu5NZI9|r>v2kh!};%MW5)-6 zo6`qe`q8y=dXkphYg#jv8|*9k6q~wL8RF~JWbX(hk=TdfFn@2mkxC@tZz&cX#*0TY z1EG6&X>$>foc1p$*Wa*ZC)&}st0jGH=Eiuj#Haj5BYDe@8X!^;L{Nei&#CicJhod( z@vJptVy%ajvKn7^OxsVV8+j4sxQDxSr*o@+1B8}X3*)vf2uqLs$ok-fp_*h`&bxK> zeytLKd)Cs5=(XcJ0Oc|n{H6PF+YRX!Ih>-T!VtERfdwVJ+0Ta>#kSo8k;h>}Tn#Gh z!#5Zbl$I}<`a&r|Qww2J;A$jsq26W_gd);@9VEdaR8Xy-Y`p-V9tfEL-USzq)GsO~ z=!tU8TdAHOYypIx)Ianrf&Y#~ubfjk*SmmnMrn#&nc5kU>P z`tM8xfma{42pkP5Zkhrbjpa!c0wR>t=~gzxWyN4uz@3UWm>{;YpeC6Q$qyuWX!$0< z_({YKJst&vmEu&}} zzs|IU{h-2>WZtD4knRK}vi#P-&WK9@o%4m7)H+pXhptC~L|2%%@ecNbH2U;-Qrs_F zFEt_n$0kQx`h8G1Yu4yxVb-xc;bc!3$`~b{&Q>OcDiotwv3H^PO(KaSc~v8V`Y3KC zz29O{1pcJE93EEs`%?+wwAu&dqJ`!J&D$0P*Ks0~Yv1;mso-z-!l>2A`)gOghQ^43 zrBW=xaFKq-)wA__I$7P#wQg90tHl@w#G^j5>TOg=b6=#eo*GJZx@6UfBurVmOa;cg zsq-1yKI%NO@%cR~6qZCzMoH3p#y3h7DOW9SE*gy|QAI8t{0d#R)LeObJA4TB)y+Cn z0qB4Iv3UPylN3}d^og`$qwECGH+1}q|A%P$H#Qmx@qV-D$l{vs%;y|B9X8I>@y{-e zskY!0?0$F>==vE~{FG>fc;ajOjPl#tTVCQJmGp&E`%FAhd&kTxZxRSkgM5UwSU$s8 zD&dEZJ`Oq0QYo!>ttYN&^buq4=M>u&#Ci}vQ8kWzjv!h{qcV}7_elQb1Jdr#qd)@x-R z^hf@wNXwE5xdx~>Yc$AhXDJ)^{MW3M=pDF~ePfM^Gc4>gx!2m_Xpcx6MO~YaITq6c zyT=!T2j7G!Z)0?qG-AVnw&O*uU#kXu^lKu98ls1O*>d39wA2^5O^JG3tVIUcDj2Gw z4pnYMg-lG;e((t^QKojSHhwmX!^$d5@*P4Uuy`y{vzbhE{?c_R6oUjcmBtf$$3fWK z1~1d^^AnAvfnWudC9a91sf|V4nSt7i)l_P+baZ%V?&1{!O_~t zBDE5=;zAOQgHaR$ak*C5nJtwNlEw{4uEuC7h}9=H*qmXuf2nRKs37pxa99|+_RHy@ z(SpUGJ(v;@3KBO#L$|;nAj<>$RVnw7U%~m5gL!zxEE8~~y|5>5LD~$&*}3s^MSf&! zNY#|eL4`T&yRmjF#_1pPU;I<~UyQwFSR7l^E({Fr?(PuWA-KD{ySoGkGPt`9uE8a^ zYeFEnI|O$KmIQ}0+4k=9J@5Bi=f}WI_gYnVY0v6eU9|^Mj0NmKu*qZ7II!}Ckq0hm z28(}2d;_Bs+xgl7QQaGXYP+Bt6WGtvMqvpr_~8TM5Cxq93R%feT-k}zcHu|1Tl*Ie zbbkr4(k|4<)-tgI$|kylb^I2cZ6eS_XMxauT6XTp?p$WL^RqTJ`c>L>8%DI_j%RIo z8Lh+}R!cHI1u{vJSR6tuv_;fgxLzOulg?L3muJNmjOJ@yLLxk*0Sf;f>^T@IwYnef zau!|pUWFj_wX}R^%2u9E<%mmmpT3miA49_cn>NmIbBgzu-G zcg-uU{bTE5m0^5zxBgI0LPhEys`|H5-fz&7X?>H>qDx6l!8FYze|*wJaUgq7+_^-< z67#c~dR-I|HNu0=4ZBJt9aj7$eVi{`&Wv7B`ooPF^pun=`_*6~#e6alWywe|l-ImK z&kP_|B%i5PN)_xObYX)&L2M5cb%)B0+FAh?X39o>>8d_vZr>E>X6DNJY-Jgb-(@?K z%uPC)L^T(Kq=y$Cb;zEgZ2xq8qbaI6O~5uQ_EtskqLmfGVH`q=vAfmE<7xv!&G}VJ zKU+dMb#*Xi7oO?(G_ox-8zKLF@}Z0{4X@w4|4X{tFed5dhry%j*%(3KTr{RRNF`Ab z_7ius2#|3iLX8UC656^N3WfI=ozge7GS$qhY5OKSMF&4(25y7(6k=LkL%3f5UBeV4 zwA`KE`kF3a$?8j1jYYX-7_a8SusRat6-ExAD?=CN!+gyfx%p%-{U;!CvaR-w#kWG~ z9yKc&A?xr4QP7M{oo%{Mpf+pa|1=5<0=i**Q+!%miT@67wS zZ6)`FJh1dW1daP}i&o(vN^@u6IFSM+T*Jd9L|3N-`pq>)@b1Qe=+uMq&-fAVF*B-t zQf%y>``vFTJ()1vzD~>`2z+S#|kMxYIByWT>359Ps5Njd5XZV8{%cap%fvakv3G$A7)IWTg znC}m!%dc6^f^K>=5F)s)r+1y6(QOoLN|R_@Wfw6E>geGxT1TGGkx*b86D`?f=09lK zSG~@$4~~S)pj)LqIcty-7-m=Tv0n_Qj8fr4`VJe~8oBE$x|5d_0Z z-HVo5iObtO^KTWX_1vqBpVp!)q#?0T7<1`g>`AK{0AXqBmJ#@Z4gzlPnb1f^o8)dF z(4M`ToJO0(YCcG03{T*070Ov{KXwJ;2FW?-sNCaa>6P7;QeDxB4bWxwLxPv7K*w*A zz><{_wC(J5JXvJO_=H8FR=Ho41JeQS)f!{;Yx(CzdX!O8bDtNV=jZozmVP~A6*=OI z1q3ad+h5VnchZFR%i2Wx>ae$d!%7<>WdNQ9D)rn@#3k?(lXT<1x%J7r zkV>OWRGRzcV}BeKhgH~MG`quE$+{)s)lgu#7YF`~8dx~l5J zU~jp%sKhqGBx}TPyfMOfq=IlGvN^m#v;4Ku;EiY@!8d(KT)o|b*D8ZI#X}bCfSbb0 zzN1BX1SjBitGMaVhqzrlL#|&0U!Ou0I+e_o@@OAt;z{bd@3i$G>twpGR@M%~r{sAx z^6%#|E!s5j-D{)|Z#7tow@XyiFO4pq;)T84++M@D4r8jV+%+5FPOKolW$42_&E|&@ zi@OQ<-q422DN-q`f87ieNcGB*B;lo8Vt=>ibCd$K{g8&uk8=MgM((Pt>C}gp(GY5^ z`x!f&{qVja5@m~9>}q>pRiw)d$FpBU#jmKKcXQ}EL{{(Cmnmh*{A1sQk$^nNn1?6` z3#e2z`6zM(A8xjHE6Dm+=Y9Xa!tF%t4pXy#Q8tw@hVw85rp=9{c7(lBcro8G| zH<#3ms<~~m=+80yY~X5U%guC#Ec>Zv|z!Da9R%Ug^!*<^S z+*m#<2|_^EQW*6LkCLu3Zwt0Z+5#0QgNMytutRVt2nG_rY7v82%rS19U$Z}#6Q}r z2f&apU@mHAB&6ey9Vww}W3jHsU{izyn6DWPEP-z`C3Wlk6I=bzyJAxq0hdA} zi6O?RHRg#;;=pNb*dwMUIw?H3;>vO9>RIHDX8=89lO70!1mndsj&2KN)7ef zJX;??Ah=4DNyIXmVuyj+OT7bX7PmG}$y2l@b zVYP7KIjRU}G7kcJnJ=M=*a_ZmA43kI`}KluVPz6D#B|SvJ{jGK@!W1qGxc+*nPpsY z#h-}m#@aw1PlYP{Jj`N_&~`synf|sJz)8s-hW-MP6$yNV6^~p$-e}t<^MFgC<_?YvVJ751h_hmR;_oCC{h*1n_na>rh{b>B5ch_ptzr#?$gys)aF}|v)wY2 z=1ccp9RaN&*3|Gfs~S>B|11ePCcSqS_@U@ZUJY~+V%^2sF5cDsAcSH34E*S7Bll#@ zVfO4MD%GNq8sl}ZTj5oP3Qe{%lgKg@OCNifHD2IYcc%f@#sMw5GJ<3TxdQ=RZa1}k zeE`%K5)2{bhJ=;u?AkCW8nm-Sn@@7V4-_4orDd5l(oGWy4{dW(g%4)d%L2P|!uU19Gicn}!$jA}=k5h>m!Fv6#YE~xcy={bO{i5!>MRt9szEmZc zN27Y_>YZPXNOHi*N{Q*Lj68PF58kH_yK_u<>y zn`7kN6DLWwO@?~bpVM`75gUjV8KI1i?xg^qoWCMCR&xuRL*!E~(Fa9nl)rw2n-(>5v#fawDT)%y@R6~0Tnu802@7f&geblx2BDG! zbifu>`qA)B5V?@{%mjMzFxHP zU=lz9)iMghjV~czk8zMKRx0>gj@ke^@G}-P(U&BTpM07T9`B49vDm^+R-hOAKM+pv zM{Q@7iX%7a&KnW&okh~Y^TbeuhTN+yBU8!fIG39q)ty4`^hXOT%7R&&XMQQJlj;A9 zF{TAsJ|vcsKNFk$T!gj_ z`|;7KtVpQH?t)b3M0f8d_3_}laPFn+GS4u$Tb`ccDbwEPSUv-r1&Lvf?H`1VtZK_s zHJvPm)E50I1mD1W4a3?pfNZ@siB3ylV=P#cq7+QGlrFqYt~6m+>PUG4G(Rt@D}0Oa zNo|==q@c4H92>g2SQeOww-uH;6->GvX9F8Ypq-D=VnXHC0YvcG9xor1NDYNwGVi+sCkVZ zu3?VS3qP4mveZSo6-WRD@n`qCU$+3+EyF27h!fX}d zQ*(dib)a^fG;Ad+03;fnQKyf~NL&$x{YIqaxtQnXtpl2QS$ugl_=;m&*MyPtTcF}m9_2j#d(G*O z7N-b8I(E6w5dC&RaF;`mXYk*$q{J^(E3O_O8{SHlv7f;Uy$9Brox!t}H2IN|!^ZJ& z3I6g-!1A%lhz?bb-wUWbx=Y6VKlsP}nw z^?qGh4&NKsx5Gp0>beWj4eReV)}_h1j*a}hk+aat_tWa}*EY~QnDekB(gSU+i&q?N z>N`;6O+yml%hsT&O%^IMw=N-CUG^@T%3-U3FbXR?RTdX&JofPU?LG}CC zVNi+z?VvfsfMN5}#n?9MDkn|+C-1;2(zW7%XcoN=^lS!{J~+_qNU7U+HTrY_tu!a0 zaBZpxSz<|IHUUM-+kiD>v{F-fn0U0dLnWXI_wbz%AE9oL;>ndCsd~Q>M8TJ&@$EZ_ zAA0h%f-ojF1?kr7m)MF6@y77h>B`1uF;%t0O|$Go&0h{rTc1ka*T~$Avc2(??Fb;Q z4dM)@Ys>Kv5k^)Vvozb>;-@)Uzqy0&#@W+I6ebXp+r*Y>#%-5RNHF0Z&k}_p$qNOl z2$asskQEI*iwwI8HYv;b2Yw&Lz;Lf9!1Bn1Fb+jy2vFH?aEuk8wW@5lULE^_X((Cf zSY78*J?vrPymB<3#Fy*{E<0Xb6lPJ^Vzn5xCpnWqiZtvA|Ld(Ag=|sHI%B8`+LzWr z0Z6FSwkfSXvI0g}wA7i#K&$ZzL`6nhqWZVTZ@_D5A1<>;eZ%Exv^Iu zQ6ad`vX{Et7aY<8gLu>m6K;Td3it2y`lf0O?Y#X(xD}@EkcXHpBlaJKzY1A zbPH!-B(|Q}w$G&kvWVW*5!p57(A<@Y4V3>MZ_rcT{Q^SY;!V0Q}T*7*sq_Z}Eur$3BPSO`Zu zk5a<>yj`An0Svr71}si|)jU#4%}@eGzG2Go!hTDR4=q=J7(n3FxO1s%!bLGobo4I2 z^r1WV#l9&wnl=UKFFO7`J=+&{t)SC(OP8EnKTE}Cy}i33;K`SJB#iTyN*R=8Ql~P^ zAk(}RthG~$O%IIC z=UHv!+LEV!V=`b&R>8fwuD!lS(c?28%`IcTAqEY)8er;#WCnJUKJ-d zQ7MPo0oCm|P2Vb~Vd?8eK$_LOyJ_@pg;Zxm^$$8H~(95#eLia{&f9ZxcLL%9wGc0jK+KR)Z1 zh@Y#|t1}?46s7zh>oFg^-g_+&E90;Pv1N6WzccQ;Z`ZHgEFR)IaW^!ioS2eaEBrEx zQWS!^v%1k*F&tQUKIYx4VJS-=SO6QFZpH0^LWjNBt##Wdy zH#Pg~ts#fnIh{VU%NkZ@RQIe6BwSZHC8T%s2?jsZd*L3Pmj(tEAyg6zy0;kLSc1Pb zc)licbfcG0wV=-q5V3 zRGu1+#8|Wog|Q4@Hoxo@J$80P_iP6;L=o)0V!?2Ry}3r=Sklm^Yq>#Q`j&GfOIGb#aZD1b5j^);K8S-X?o* zb_Rj;MhzbC@hQp^N|iKsXj79ARWkqQW;BgU(GQh~gY}e@P(zi7(Q=bOspn%F?hEcH ziXgMv{)P-1bA8lVE1V!F-6C8C-9vLMUrxc-%lf<9jmsNg?q_w@|NA}y$V3}}2F1_T z=Bf=yf&y+Iu^~Z+1zVaLO-9f1w*?Bku2tjdh%hZpXrA;lFGjrW*Lz7on{X%Dg`Spo zNS)|*uJ+ZG#yXzXpkTglB=)CWxtyiXp1B-w=p)TotVfrQ)Tg7WFm*=5jk}5X!+i zc0MP~ItlmFDCYaVGVDvSZ~_Ri1)dxGHP7lT`%-v~Ox{GgZiw#BVSO&EJPb94!gqd` zqv)m3)~l@w1luufRjn85(}ba7$t@w(@~e)J@(-nK8tYVR_0V$_PGpQx_&-h0O%4Y*q=uDVxr2o!WD zik-oV8J6>546^6fHVV)8u1SCR328-K>;nLL9aESEvB^@u_*m5(+;pN9Bgt1td8tFg zdYy&cU|XIrK;wrQvf+xl7xciijwV8mQ$^=p65PPZ$-GNRgjBj3WNN@l-a+@#$Guz! zD7x2aL(rK+`gW5x1l!ovCJQi}LpC$;%x(*mB<{kT+&9Z46(B#x8y&p^QU zXvI>^Y1Nm=qij0mA%X|J7X6FY45~gknIP^R@?Od4kBpD0MRh`}5X-sR;>wboUrmbd z9|(@SE;N)461c^;0q$%n4Yqj^fJqI5NsQ5(`~6Hrp43U0nO zoAB=sHK@XsfO#D+L^uE{|sRkzsa?uGRpLrZS1U+8+DcKtNFA5l{PlS%Rxl=iOvpKB+uPj zn~k!Ay5-ROoxrS_EfbD7>ZnDYlneFhXt(PA{ES1JmVALYcHw(l(+wKyoCKei`q<&UIgLj8@wzc z^$ar(#s*E#9ol> zJB14IS7w~-E~(iFW($OO8nWhcNLr@Q2nofq_%UsT5cLghL6XRK=lyT6Wluin^e2`D z87j8#uUqihRVP`&p2Qc*ete*u!8+l+6;w(59=;XKqJ8;^$s$)xZQ2(JDCm(-{2e)C z#EsAGXVjLQGX!Ui@5&x(lu))Hcm1|dzRe6Ivq_mh#KiD32yY&@jD0|K>fQ4J@*aXY zp~}|HvBMc!7+hsf8J6J%Vg*ZK%SYZ3b99kTt`ZrThWAXeP2gIoIRfdFDkw2|WRa1< zoUro*;&--@eR2@ULevl4z-E-nPpZ4U!iPb{Wz&w&#cM4DMxvUMgT2cW%K!_)SSvSH z{szJQJ?JNrAM)Ng_5|n3+zlxx4(zSS`le&90nY{V(4tMBlUO$AMSRu*h>(FN1`eOY zyeZ`ZpZK%MIG`)}s;1Tl(xBgyy%){vf3uEr!WEBVa%f+OCgqez5mVE`>Xtw){hEWY?p$lsZGHZX&Du&)}QY?JZaL zO!u`Gr^tC6uMQQ%$HG8%L@9%>+m5?vnjd|W1ee#}uUTWf`p%Vgc_OUHNXJ9r<5mdb zXPL&|I31hC-+WdEH{+8NH=~XZ#%*_jGB_>geYFuzhz1=BJO7ssg}m&Llrj0hg1FF*%@bt);!XI$UVh~Trzxv?Wl3>=^HiLwR{$A z)iH3wk@y+EeI-r%h=M4@{TH`^god$WJV^xu_BK4u@+Fj1yHSSCf&%wlMaO;`dr4D<>=wGLb`A?zpq4=c_7m+bxb0I$7~cn(N#GHswmpRb-amR zx!pG%{iXRZE%IaS>lab?&sRdH&B+js9@scQ$^v?r1wF<72~<`AwV{qmHWXNC1`Uet zdsBD!?p~$gH2jS#n6Ej`J}$WpFc z9QtL2p0n0cqz8ICzaO{D_0N|p#N+HE5`>Y=bt^42{bcf)f~aPbE#D+J*XW6F&H3HW zk(F|SxBPy)uWy03P%nnvxzERY3sOF_KM38K{EQ{sQE=fF(Jq2NAo+d0KPS;sT;fMO zKAGtpFRQ}^`d(L1J9Ey)d`3foW@YbDyb?naCDRp~4n}ELdl8xr5Dj=XSvGx-GZsuK z*79iv`9yO~t{J|phL)TO=^m((#*Zos)A0OJ@-rCSD{0~ZmI&ml3-#lTb zKQ-9mSILXq5A(~n*mW8egy}#fvVfCGjMHR8Rm)EhkQ(B!9in=zq8wc3+gfje*Qnr4 z=8)Y|W(c_>9X7PtzAc-dA@62IQ_sp%CXMn$)@-xykFTssA^f(?E$V#JofGJGXwpu8 zu>%%eMNPL5>?P}$T_RDZ8in}+?)~iqw?bGFjkgachu$B{Qs3m=Jf1+)hKeC@4Pzx+ z{lubF0Nw?EoueGPac+Jwx7SH#QEO_e%#=4#2%XCcwU>WQJa&LoFI;Cogyi|)(%2o= zifB{w(WLv{58fC^*dYdgVrl`09;#@`7MB7`aFHr;F^%W;jeyak)i6X^WP(NT3d5J< zJG~CJd5Re4SsDrL3bt0B%m)bX!ot}12|z_5h09Y4q5M@?Zr?%y(Hp1iVhBud ztyt^2hXdLvFOr4FCj7pHH$q#^+{0hW!={-Z`%dbvEj~z2)qIJbTT29isEx`HZ}u2( zj9y8C1@P%4^t1p69hIlhxUG(jj{-GUqqb2e9ExL3sLk238MJ_@azVKVRfeXj0$evi zRNxLIKgWLhab=1Emm?_NNLraodeC$ztiTu|A?jK5U7+#(aI1%YT3tKegr30=YuiHI zM1Jz{t-^2vVSnnmMGM_c)WWG!C?{b=Xi~RhxZ!lrS&3nV`$<~feB<}W6BZXWQPc(( z+YyC}=I|FP9`ZC-+F#aVNqyNMH1w*nDPXLLPmFm<(bZi^6dK;gf`Z|X<#8rt+vVCF z6rxGzIbB){L->*J#>nSBAwt5d4k0T!GZc2U+P1N* zf`StIPDLGiiZ$D?=Er_2smRe6yZ+7-51n%+q2+uO>rxHO^yvDO&tGhMR*Xdyc4cAs zgCK}TN#s_Fxs*N7iE0bPFDy#PBuIcQ$TDMF$ZQ4?v2tVBCta0~bhmP1_G?J%tjws!QT=^Ik{WIWHUO@TR)PN0 z*b-O7Y$zqill1p17r5~)hXjNZRTn|y`75Hnexm2TSEzV?Nxi?nlY?w50l1J{ZGn~m zbYdW-i{r+ZMylG_y_W|fmJy@T5qSk7YN)}WX39Pnz8klQ+~;*wC={>PPn$oVcW!n( z0M9m8QxCoTCM@5KJZv+`S8Z)G$naj^rgatKY|}o3HCp@j`FOPS*!6WAy}$t>%Nhn5 z%fcSR`{{D_MetmNYkt*Yx&UsM*=3GJURqf=|`twc(@NU;MRclxy;1w>YnV zh&}LUCd{_<3Z#b!2fa9VEET6nV_H~IBx?25hS&uelr94UF$wllVF-LO)768-D?Mzy zm4IMpzP?-kSJyX_OyY0acTC~&_YWw5no_`T0Rd+bFt{;CZu_AFY1E?pek8opUhTmN z>(e<+?a52iB}Wj=P(qARI6^&Zt!q!*NxLbk@+FU)-}6$iSmsZ2)pd=-v+9{R*2p+M zABX!)BDajq>TqzXMrIWOnw(os)vd=}y^fN;DzaBgdp$h*s?rrQ3AnWGAyDD~qjp2B z6-b?76)Qrg@9)fJk8-;<6yd3L-E|}?Fd+^H^zph%g z&;EKC+(j9V&e!}*29l?2SO2rQwSl(kfbZ>dO|&1o zNRfxS7u}L#BhN_#%r=}zTYG6u+f($3S+HWD2NX~Di2K?$=1OiY+kT=hz#>=I#wC8$ zsP6gk69JSvRBCs-VeNM+14qf9c!fGj1eJ*q4il!}6$VHl$7| zuMLFNfQr7^GMS4U-T&!D4_sZ=g?oPYY;lJUixjl^ic+|0_fx-Ee~F?>i~3_G|fIKT5_;Hj@pDEnuH^~S2N|HdjxmK@UT@?iv+@I_XiKf?TzKp zmBC!f5$cL)7X{xSbLAfzhXm5yn$xE}o8ecGqs(bSd&k5CmXegFtl-|>pa=f&^hB&U zN<X~9?JE5B&60f>lDo`;b5Zm}z=7PWkjE>+ z&mKh{5bwYSQQHP9z6jI`S~&*w0x$=;8`heq0;X z;hoH7Kl?i2H|N4lc0|9V;4|ZH~ib{pM10^Rgq#kFI!)Sy-M&mdXw1Y}!rRz48%65(%IN)(L%G#_q3gSjAtM zwf|~HAxVOZUvZfd$6SY&ai?uni^f{39ZZmD@8zk0bnaIw#y;2tppCC z0M){bLJ&I(FZ9PIA(- zwHx9bW`RuV=}qf(=b5OpWa(04`dWrZTuVSs$K%n^`S2lX5_7 zKhY(Uk1cECL6$Q)(CUh5D;sK&utqN_m72#YQIkj{Nsb6m$8e^Q@$JvRoz90=_GrXP z4Q!G}$;V`~|qu-DqVSd}J zO4emS)+*0@llIYd*oAt)`2DYF`EOl{cDdhsSjuFu3a5;uR}NVKX`SX>{1z!benfAl zU0+|&v<|+}{{3ak>F;G&9|`G$|tc`Qt;Sy#bjYIpvq*cKYtT8wBp( zUwaKb*&I)qbHD8o^z|J$8~@#1x@jztZX3>V2%9EiDlTboWo7?lucJi7@C7d))cD+O zdYQX_nKM?MdU)8E2kd!J@u^umi~X^Ve{s7+7kGy;fS^z_&$61!4tzR;L2uBuWn&90WN~dis^JQolx|PsPnlbmisa&yUNeOw@E8Y>rQHq{j^kr0g^YO4t<&Grs zT^#$>eYJJlGK-7bhP3>I@PVLt-+WWunle}!DZ3EaVms8837 zo`0*ud)&9~K>{A}&m>gOdlDmvVQWDYu+Jj|-Y~QVew@wfr#}(;<>_LdFQ5s)Z)3cC+wSg-o%9HF^;;z(MDj=xV>v0 zvg9`Tk&?`pW1Y<)aDT;^UDfEn+=gjVbNsbyz{FhHpr zK?(npDJmJ4Saj-Sb14w`Mqij9DnlaZ&L^1Tb;AIC@Tv1k1gbVi&}}MX$#i!*JBVDi zd~x=AB6@~tRfq4eZ!JtTh-fH<%E12!rLI|gK^6$ZSatl7OVK%MsEAB__hg2t)tgsJ z6df}Qv-6UiJl_0G>_bU~oG=PEe0}Hq`ye+)@b!mJ3z~Z7(@*BiM8wh5`|R`UT_ZA8 z$fj^*2<+zbOgpLoSC}n|AJ$N1C5fr|r`o(3!nh6hzjRK5xY?w!d?|pb+ zV-0}hB{U9xGcp8uE1g+}90E-YsYK>KRx46wkgBYO`eATOM8pm>RV>`t_VJxpdPL+@ zKFNhr>E@99kdVw-$AB{-(($~6S$ul;TB$c|tJs9ya|VjN?^Ss*{G54(&~KmA$Hv?Y zCrlbjVB;y*R6G|P^>vi4(!|u)9x(u)u#yCLU=BeY?x}Wf>S*Ughv#=YRtYpT_a`9@ z%xQ!(^FTRg)QriD5M`GE<(4C(T_0i=ew*8~$Fk5a1y?&6K{prgA7Wsw{CZ%~*HOwk zj{pgDz$KyR5%&-kk-Vm;)?q`1M>p&_^U2w@-fr$PB0MimKOo(yQ6u-X=4zy^r!@G92>8?-a4T+?~gb|@|qce z#e>7OfO7Llt-Ct7;B-QPM`Fr3IHjs!Lc@ z{NY3v6PUXChbwB?(vYT5?W|MB9g=c;z5P!zAMEuQ*}GqFk8^GcK6j_Im$=IUXuFDN zUi$9O_G9zcOP$8P)ak^el|WPAejG!xX2xZX-UvHfB0$a75E1nO#*Wj)`F*Me zi|THRnwk43IfH#s2)z)vWP-8+P}FZh9|ESGF?mQoJZdl)qvOm{K2alrBYg@@(uzLS zo?IqfjYwTxI+#n6AYIMM3R^SjI!+z-t?G~laYRi(4fUva)j(qf3d2aTXy?k$)sX?V z83a+WPvMV+%&Hd8QeVFiQ;GB6OKQQh$1{fE*Tk$Qr7$9XfUK%OVXQ0;0ur9SLDjk% z)Cz0rY#F3RhBx@aW;8FI=9!EUU{R%mJA{|&V6o#vEp>xiR_3zB7q(zr*+OA9S*ssK zigT`upclK#X@x^-N5ZTz-JZR(RUTw&gufJp}tYzbIrGc4S8IG7kloTtkAU&10s#Pn-X z8SGnNj@z}XLu2%vf>$T}T24NQq!|&UhG~J;CYR%XR&&HIT*~0$HLBNUN>^$lYuh`? z%2mS5LX@#oMmoEdm z3@7@SZm;~KI5`;R$>dul*+=J0O(Klgi=dSv)3P@LJ9;NkWw0Z$RBDPhEsLAD-+>D) zJcG9atavin2QGNOqKBYtv+Ck2RhPviSVSW}K(d#2BeV0H;{%uE=pN69@Gh^g8LUVg zG8-|Y0`plW*iXEI$KK0=8kKy4;D8$KrZ+wM+As)jSZJ=TKcD$pRu_*+U+3!UEWij(IxRJ ziG%mr_{YFFzb+uE_%2{I!q#cuZFPCvC=NILUEa2kEmnrkNezF|`QWqspy1AKiEw4hOz0qy>{j%lBu;oYQ^h%^ya^xYO_2qs-svME4Ku)WYk=S^Tu< zXEv#^k2sa^$0n#Or=aqp3|%sgMZ$%~Jmj*x;$bJ%#%Tmnb)P?U^7dEN5iOt<|KSxf5$(W`w{C<)AR)DgO#hnaLp9+df%VNxoSbJl*#&pX!~zYgb$M z89h*ffbofneRnM#Yo)i8a#pi0b*8okU);?MYSWo9Ja6H3 zmcF|fG@W|*y@{*|C110YAY`NcM|pNEOP}jOuWz@WUBVft`rAw1%8N;t(u&$H)e}UpCa{g?gZKP#owQ9@ASO_c)K%k{=H5hwsZj(Y~|wm zyEH2&8#mYA%Li@{MhC#MEffU6g9cGFgI5f-IRH$MSOdTvk`F{N48X$V{XI_|QCRrz zIeZ|sL4Z9G-|vOTAIDiGT%0|voIO3r`F=N9Q%3}`)kEWgPD=qcbo~F@D4xG(f?@u~ z#?KAfE(N%QuJZsmkUVYh`G9*C+}}+f)DizEEDZklyV|Tecwige1Rw$$#Cib0gaof~ z)&ck+)e`_BIxjaO?;m4W)pg-!#oz>;mx z0q`=;0ob6eWdI^1{~w>x`8g5!Ie+tERp)0z z0}v7Z&%poSyZsG714>*5&_Hqg$sEiE7xZxh3}9gnAPI7s2H+C?i_?D+SOc(vbmzfL zYxV%Rg#Z6TL27dVdeFo?fcj4r{A=W&@WD`sLDeT2OC4_?1@Obp6d1hD)e zFlc@eKn3$B>zY#l1L)&ESZJC>u!&@s095}~XxAk$B`_WwQ2i1B?=SL&`(SpLO8_)b z{uuxfq&fpY0M%}QZ9umC7moi*6O4}SH!u`X~U#Xz) zf_X))00{nP79psA1)%a@XKk;6c^j{Sjo7mUK>Ta!->!iIs$B&T{QFG)27nZFvkIX6 zL(;#7gAWpeMA!a-4xY{i%3K3T{!MNTApCD4V097xDX-T0|BHUo*8yUn-E}b2e_{Na z2q7q86YL_!8(^Tn1MI&```gj}aPi@df8hRMJ*;p4C=MJ<8h;`GZS9P2VCU=j2EhO8 z*zb4+p>KkLpDq0N2>ZiVg7yHU01h6$KjZrk*Z9NT{;>DPZ!-TcsQ-vm6p-Q8U*`Co zD6s$ZvBE8Y%Ktzk2BB{Q#Q!rxfU%H*7#6{KGj$t4@So?wQqh6ve*5*^Hh}tnJx>hM z+5u}C94B}nuN?sOf7SHgvXg;scK%Tv*hPi@f*O1b_5sJ;e@^}Jxn%dBxLn=^D1xL{ z!K_&J{x`gTxaj->?({?KC5|8?n1$^WDT_BXaa zDLEek2uS|F+40Xb$H~Ku2!4SY4#9T%!vs6v!G9?e%$60zdIXUAw;vSF0+4@Sey~8z zNB^i9ES1K8BKSjDddC3#|2ze@%in1TEHNwS@c19D|Kn0TCje^N{~h;#7{>bqAn~Uo zuATt$F#pKHe~QS(&VvYk{gbR|{`AMqQ-J^9a{fk;c=iv1-=Wxccm_a&gw>W+R92P& zJ)Hy6p`7hNDc=F1!1MrB>_dWnZ~k_p0m)KlnfR41OW7w;F$1QUvZJJ^7|NI-Y>eRD zQQq4D5_hqlP>t`q9ih89yWODxZ8eE$Bt}|sIrMqmY97J~$sFyudHZtv)xC{V1&7<$m?|soD+%A>Pu1eY;)a$Y%DKn{LCvOL7o{+Ji^ES-T z$NS_)C1j_s2P#)2j!LADdMBVFVJ14><96qmkMxMX0XV*MlzvH9DeO0gvN#sq#Jom9 z6hn?9f7Tq+Ig3n?az4cjzKUcsw{G_~CW7F7bUz^sban)OZD4{uDZG(%A}6cbU5DC++J zSwN=0_z>!>Ojy&eppuF<(W?M+TNKp)Vz?a~@{>ty{U1EYN-gYB%a zpMTtv0>?{T{;eworcy);uBB- zgQiD46e=a7<_Lhp??oaKk@p^;a299aOeP&xPkU}d`E|bg^#Pd z@{Xj#T7i6yWutPtVn=4V9BASATrDdrIDaHZ!VSK(UF0YI%Ne)Tw%=s6>i4lbW795d z?E5Lq#PK+P8b{)6oP(nAe6$iRypLW$R1?%z8Npm-l^C&f&Js)j{R)o#1hpb3io5zJ z6mokWmUtv~Jy;rnZU(zsGC>q?bxjIO8go#!Du7ZlXXHl4D`cCchPJV z9`hh#V_JbsA-P83uz!OdFaBP9iF_RcPU!F*bJX^K9v%ex+POtojKxV&D{^xVyk9KY z>xDXS36+!0JC#N^(zc=3pCaBT9PKouXKHJ~4o&pqtzTmCOR=xwDfox?Bfmkxr@rZ^ z-w&33R*T-mY7@8QZ-Y$8>{6a88iFx+pSHCz^(f-z(f8mooKCXg;6RRS>9J?MGlZzi zA~YX=8JGwCzyGwp-fFIALAy^?>ZxpN@zx(YTG*Z+U$82#Qes7<7}MX|QKyA6dte9- z2KppH4+8<3xoI6n7r)d=LLV~piO>Z;?q4UkThE$JRh4E_VQ+@*ZJ@D8wrSJi$7MbH zB_HqgnmTl?dao98>8#SN(J@7r?&?^x6KqC*pp91RE(wmHbT(_9!)9x6uyu`XU3E?E z%6C;GK>vC8!_S742luu}ijU;gXEkhTdBX|kY0ml4qi^fx6xvx^wZmEibR*OpkW63@ zTAAh0vUc*$Fk;;z6v@wJkd(txv_U7fMC2|0iG{AXgL|oRz`=+f>m9w$p4FvNtCc%{ zvPxv_UkQ^)_`9bHG{cUe7jFwdMJSpdXS_O(Mq94aXx-(VUXQzz#gp(RMn#P@{0F;} z&<$PC51j#aDVDlE2`{E520-u^-9sYolE@$AU%`xD7r%{FA#QOiigWg$C~ynV8>}8P z=s`n|`>0&AVJWLni9fIn+Rnfk7_@$WV5K<)wba}!tm>n{3oY*223wC1i55azNh^+{ z-C`lxi4>xu!!H%4%^xG;@9=k-Mz8DSuWZ7WG!~U$s#3v@nt-VW&GtOl4+ir-vl0Jn zylDo`=KIX`76&+H9()fv1h*Ah(ghQ$ARS5r5u?y-YAHlje8fS;^+=#;i z^x>~7@FtulR8?A((K1>nF?fW3Id{_&qOIsU{^{2){^d>*E+g|*5&A1S!(ip2#Fd)V z8lQ&cOdcn6(+9PUd#aSC{KT=MPY{JBp>U)`2XXM(__+&W@GLy_R`la9j(zq{6N{Mz zj1uIIqH|?FI4$(Z81x@Hh_9`_6}D!`)q$M|IDYBsuwPTrRX{X=dFLq`uyitQ@Xdoc1YIB6J#q*QScgUw#6KY zKN)dzPay48PyhYHS88v;H5#Yl>r4{JKiYG{Fb2Pa5x5B#ThDubJHq*dsTfvzmbGrS zt%2pR4wmav$}pKyo+sQW5JKj77xuOwMS~b;Hd0*Za2OjJtW!*$tfqxEB7fmEMoo;r{xV-+Z&@RrUV&lDan~~3=u9y*?dKmZSE)~G;$mV` zW$Wb|WS%}g-ZI}Lr6w*)kt_>Pq{b?f6sfi%Q5LLB{JZH|44%by})YBMVSPD>ca!MJ@H+vfgXM)@|O~eLOrjQ-9R!lq=;xanus(6>25r zMy;Y=rIu4GC>P4fHUTA}N@$)|(|1Ku(I6AZ^x6HKoCrPpwoJ%4tIZ;`czVq*~$uTq78nvaq68%7Kk=z|B^suI?kA=wW_m3d~C3<^~o zx{?Wda!%~@Qsi^|M#jajkwJGeN}dk2(H&1w^$UY7_?Vlx86qRj@?(KfTdIZ?(mq4g zC1_wTrZgq0RGFV{e0B(zqI7op$;5#PB5LA)?(Tj7cYoMPk72?PW?RV4xW*Ih9i}F8 zTSh~ofwx>9tLg&w%H1?CMfTC-iPCtbN*Aux=yXtA!s-fjdD-WnPU`fMzMj-Y3=O{q znP|AjAkG(XB#68kPGW&<1mgY$QDFp;u@%)&U8Xe@l}pJgbd11v0sR4+o}$~-cxkE8 z2xr;qTz@F!|2w5EXjiKcVWM$xf)QG9J7*<~5F}}U^0eGDke$zyzrOgyJ_h@IByo_t zgIC9h7c#U$7mVoob*xn_*#Xs^(kaPqVJ-JUMCv5}$BM!CnD1?@MY)h$Y}A$&N&mKM zmaGO+1w`pjHWO+?W@bqV6tgx@mDMw&xO|kq{C}4=qyQZN-4&=J5h!C9rTps&?lq&! zWBR5QD`ptnBn)xabK0R6Sah5CzNV_kSZvEqdq$d45Srl&DhM_BH|L+#K?$%qkatQ- zu1PW>xAvUgP+iIQ4&AA+z-?&#=xkwqe3=pgAqfsAMQUO`Nr?b|*l*R0c56RthE}%s zSbs&1?js2Cobp6RbVa)vT!HpmpAqNCusmfXzep%>=7%$uHX44!`dJ3w!iOA8m5+Dd z=^PyF8i97`DKx1yy7Wv)W;Jzb?d|oZwp)sU_2lM7O11&T230huiGjt$zm(uXda~*34f}>J>KjAW*2IQ(_ZNM8INV z4Z_fO)iw{W%`n16;U})L8Vu0Fk{WRo*rl=UI-I!hRo1fUpQo;^ZpH2P*>C!bRh zYs#)*iT4b5yhhauUF_X&yY5enMeN=D#>YCHPG4HY%l){U2?m%v(vsD0v&HV&eq`&W zUBgr3Ltoy%^qYr^Gmp%|N*mHF)_?!V2;1;FNAzTw@=s}@h7L9Vd8x4z&auszjY&x- zGm<~}QZa{b;A-26M?DceCJym_#lb;*TzphCc(TOhr;X_Fu=mE5CZ4$O^<1!AY8Zg)(4J6xyj5Y`2eB-9Wlz|_MIiG$Yo_4`wEVyb=YR1&2Pn#! zJo+K=Epj;!6J}u+py|GpWRVf>C>(0dn93f8DHw-u;mgS4nc?O+v}t(R@u-+aX2-{+mVR-InOA2{ey^6A3fya1yx zWM*HKOX4AC9j}ZL*Xwbav40CX09R-mZL3i!SqJAYN&naFJDhtyZKdHk7S1t(0sXl+ zu{JILa87>V>31R9hJR4}^R&f$yKj7W>?@dIajE+_aV5^)UYkDbEv~%KR%fj*vV`#+ z-`s2L1NOAeW3 zNR^J15NZB*!_rkt5c?;(>(XA+V?2)#>DkQEUX5D}ENilVG|Zv3+A|GP;* z{jclpv%h`jd6H*lZu!1*-uFH4Id^QB?%fz08=Ky1mMmDfVBP3>%U4gFAbsE{4zv+p z>L$J{^CG67)om%ZjW2(V8)PRg?~lcOaeO~UW@EEp>Bf1%Au(ZF{QM&vN6Z`PIB~{| zX^wM(e8RSPd2DlB?h)bd6XX#=-vl~31$%AriHI5JI43aBakX?txZ`S{aG$X4KHeQS zofjMw5*gtW=D0lA+b3)r!>Bean-jCmYyI-MvBBOO-kulYvvGgL{7~POZ-x1-S`hBP zdSS#Cr$v!l*DT&1;JhR%&|~e==pfH^E|W*hnlf_s)KP;sy*j$rv@wHvyG|b)H)Gt8 z*T%a~m^f_aq~Xu?>1*3))3b>QYG$_Wws~%kO)rKS%M4~VGAo$*%nW86Glbd1tYqF| zUSq~HLzz{~0_J~pW&-mHvzl4ROk{>JPRt@^5;L4x!z^YdGb0#hW(hNe8Of|=mNHYB zQOr7K8S^SLnpw{*XXY}~m@&)-=51ykGo9JOJkRuC92uVJ$qZs%V4h>5m^YXKOfM#g zv1fWS-I#66n~Vd~hY4n0Wco7QnSo3{W)9Pzv13?9U=)80XVcT>IlAPHG;j1HSLU`& zR5w{SFWE@hsqXW;m)Ul+HOXI)m$LoXLY8oAxrQDu^vLh=OV7ZbH=kS9Yf`U!z1Q_& z`xyH!>-$Z=Dg83~FYN!7-CVmm#mkCd#og!C&;Olwdttx}YhHLbz}>!|{bh%O7ad>x zY~ZGW_>zC~OCP^H>E#T;N2yTOI1Y1M;COkE>KgR$djXvjBftLX1VjqK5e#OMK7}`SZyBP!CO@_ z@jB-7VRF?g38X)n58Mp7i!QrCDeh!!(w_DTD`#JLG-ZQs`ATSjEL=8)%y&69=~~MmDT6KB?@oN9tK4!gFytAGQ zWGf8&j7?yL30u{Pk!yk%EQNn`h=AxF){GnrlyKG2B@t1Pi9v3yen-#m zJ$<@TpsN~fngCYOwl&gXckTSLOXzcHfT97r;X|I3vu-L_L^s%IIA*MYY8sJUQbZQ1 z;D8dBv46Y#&V}>&&Z`BI@Gp*BNB5xL$)OVqx4|0Nlu)|Wyb9)mi+k{LPI2W&mJEMV z*#@#7=A>;@_W8x;NazVw6*k;&uCjrfxbD6TiTDEVsZ|F-A{V+Ns`xKk$Yb6*Qo43L7NSY zecNi8IE-ExUq)9;{jT~u1_vwat#^OXg@G4r0xt?9wncA=q_IoZ>C#k0PG;H@9-Vcj z^c(2dkV_Z%7SqjvD%aABt0Q2$aNSvP=FX(jSbKY zr=UqoPjfZI*1!(PHDzSy<6!i)$4MmBs4;0k>i|iSvF;KI8%Ry<28tW=bA7Q0DW2v32uKsXHTJY+Ic1A*+mQPvD!VpiDw?peKbHJVwl*CM?KqM z%swPwKl#JPSJy7xIE~1Z_fq(WWtT3%$K03WKPN8;?cJWOzLHh^_>{me$tdd+!t#=pfx8A)68lZ^}z?g>9HTh4kFMnQ%0wJ>`8w zt*T0#V3AO{^QKG;z^yz!Kl};lP5O@_HdLATzm3Ko*!%l$Q6Z2};=;Sb=JJq(Vf*1- zXrduJS-HRF;Gyys*bjgEBCFl2-C-3)jvqKjZjN-@yln$;om5m=B3nfV3;MR&(R-C$ z9H597`<>z!vp788*2=z>ntenm{*5I=pV5W{vWg>3+uW<22a=wHM-rYWz8!(`3kP=9 zS1GZ)JMmzttmss+L7Utn-N6m~s>64O?$w@#z0hntS9hS?y1RejBs4;6ywxo~mPR6m zdqx$!a$6?;B!0m+zk4>LUec*RotHj@LVlGoRMM%vCDBnTb)rVCBr`}kS&WC%@@T*_ z9m=aR4p5cyqYUu|4{$YjP=@SaKY$!nNhtb~ukFdYrxGo1GF|Qf+T{*@M6hpa^Y$pw znSHhniu4(^GK_z3o5ZIS=nc^{D{ltY$&10PFVdkiii%Jx|-&CKQLw<4`=W2tsL z7DIN*+QzocZ`1mtqrri!AXCX?;!c0O@KrJq-^OX*q7u10$WBy& zI$5twB|{u%5F6m$ChK?MF+7gzcD;)>cP5ZwW~DI!v_-&`fT>*Bi3YOPieoIILu*)- z-L*?ta&v&<2F}B~eBH4lb;p3a^6q3}OM1UGZH||Zd2fg^p&Sfg=GJu2jB9oNl;Zoj zzkQ25Dn@^ON4n4S*c=(9R6M-c1)j^<>dne_|EI#e%W&LS4K;AAGiIF<{|5U^l!MA~ zZU_ETE>dD)9B(l}`FG9_DfYSXL+Rfae;kD@_BnvEvb)+z^0e{Ng2`8^E@0jk6^~?%ZL|14a30;{_y!6%0$1W{G7u+{ zSxWN!-yQi*2eZ3V5g*ClgG-Ue=I>jXJC%AEB8y((w=pVY^{QbVnjo2mP85u)iZV;0 zP(lmz4YA+5JX!c>$rDdUvOW`R6%T6@JvQ73lV11nDXBFAEL{o?&EWw<~b%A?#$ zdLSqN>hR(Hrea7d7LqhEi4ev`ltk6k6`L!YeH+%k_3GL|0%6|>yiTq@UF#mhA!C0n zw7?-~p2HC3*6j67f_% z8ciS5Qn?#GfyQ6!lom^QtmusK9XU>hK^t9wnuf{0-t3$e8+J)Pb7PgP&9TF0hLLd* zbIELq9*3?HW4_Bi%nx`~S%o{oID(RS1EG}Dr#GR`x1sngy;j}!<4B>5y4)-jmY8m1n^$ zJ0xiblU}7sS3wdNTbNXmSC(B-npE!{wOQ@yA$T-+m?D82w_w4Wn=L+7+m(s&FU;aDEzt5Wo-RHuK{&K^PT-~wU0 z!Y^=SeJ<~8Cf%<9#&TGQjyLW<#FwU$oS8{v(4d(@o_ zd*NP3W!%b+fx<>5>TiFu-{d{T`e<6s`Q-rsBHG{4igq6KZCJ|h{pL`aKK5_>il((*G6hO#oj zXawVqvi%+h^yO51*@J)i=tR)YqypvEdhZ;M98Pi7DSuJnnHPT>tM}fJK_pDSZ({+%PC}=gwDH^R$ttZ4&j`i_b;H! z%{8eVk%_LD$^W*0m4#-+P`e(ZVcNaTHm32{rzWTXy?VqqPW@fY)B1y?&?EJAu1a`gv^@?_f?4FFw_o?^s)vwV7(e~$6@T2WdJ$u)r@>MQn6^BT7qDTo|LN+#b_>~O} z=YG03kqkErzqKov%>LF61=KsA96{~S+vHU;iFnZZI)yTB^_9=6&+d|nO4?T{YAJ@B zG1!XJ%{G6xF5!z+GMpool_6F#1eb-$^)rGTM{2mpTcnO9eIFz>U9P=+K{y?@hMg1S zzdESSbMGV?4%xKHgQlOD zdo4tnuQ`_VVJxS3P?NSZt=6|ZG>`gDZvKXO)3(jZJhE0;by9ml-=xn=1?^Klx^(a{ z+hBjp&lbR7GBupAZn@xhhw`zX@G#zatad#2@&shE49T zokP10ADI2yQ3**T$1#!p(_{W!vBhFMPKy8hnBO!wwyk#8IwuX$;=t?tL>7lW>uzXa zM3xNywb(6Sr)*j{cbewVaRG02eRB=8lazmC6gv|p;Fx#z*S=RLbb1xyVJZ1a4DSF0 z+&})~5(MARxyGXqN#oUZ?oYQOrRhV-JbEth7*EWN1M|ppA zhfyuUsl^RAn)dkBkf$rxfC?fw8pAD+Fj(*klpWP`tH>Ozl+hEz}`*c4W*Q8AeJuHRWFys-=9rL9^uzZ*=6Vn!Rr7%9mF4 zh7c;{;yTU59=P6-i%|9rZD%g1u~dJRi!Vx^J3%H+!P|UpMd`kahG(;=aBwxoN_|kX zK0gAYAw{Rrs9qsC_M|)3s|%^T8y%|mzz!-NL3$@$#ILic^N^t~48)-X?Xwb$>4i`T z8MzsGU3QiRkFCQ{s_qwM*n%az-k6>RCdjyaE-&Z&u~uWbw1#ckL341k8vSAt8ld-_Ww65>CKWs$PpWS z3E8_3P+lsS%#aH$9A04?;DCSBWBTbg>9&ABY%=;i>oI9uY`#)OTFzj1aXU>2cE^#o zWq1ll@Z&c)tyM3CGk(JHf}Pb(!RFw|EeV_FTwZbKhbtd`lCL!6&^+wo#FgycA~;X4 zzgg#_ccBgUWbmO2Yhu5JM1N%`YP-@c4M2avJN%BL*1|?9)R8pZk+6Ra+>FuElA83E z82U~Py7a^eB-eff)@us%QcqvA2h8*q+w|*o;SdDdI^iz<>~RA=+MAggP(N#Q7F(B1fU)H$v!i|lq#Xan3Y-dJvQ0@K$YV--}(UW4rB`G!qWP?$FJFY&xVpsz|C0TvN*^bTV1=u zTwRdf;A&9TG#<&X2kyve?@3BuTC!E^wQp&c1iE zwQ8N3EN$OzPn<-fx~PMCb*G`KW5BY2!f+F~cjD=NX$R)do-k`@w41(mDRjihvY|OHQVIyGV}PTCDXkES!BW@o z?niarIjTJya#V$JlpiT6@gdTrcBkPTqlI?gd-OXycMxNYsFNZ-N1BKJZnWM}^BVtG z)Aj%B9A1C&(Xl=WU(U&Qdp48* zo~G5{3BI}&+uXJX`fPQUCY6=p%?ahSH0+?!>@I&h*RP85Y4aDoc`GegYHcc|&8T)ydoo2#)Mx0jsD|x41Jxb0S=fPLccZ6t#%U;r z0zb=J_C(n}hfEb!dXqjIO#kBOPaq?`z!zQG+w4s#rsP7PjLgm`#2I3yJ-*hS)%l@A z=cj)hl_61hf^*C^V8PiI8CHo-e06M%UsOV}S}o{xdc7Vv9Ta8MXMc45J!OF;o+d6k zJtJK;eHQ7tqS9?&E2HCun`j=Dg+U_ElNunD-mry?gN=~jhqRt9a_ zq7Boh>ce$ukg8A9Lo%mmSE;h0RM;>7ym{eB^3sBBo84!Zp7mEYrdutrn`;U&Zwn7d z*gWCEVzj|N_wN1h`Lb(6%7xBefSAgEcB0`qBf~F98c!2$j4dVo(Jla20geTnyBmM! zVqffE*tJKENu4}#AyKRp){|~YL`IQ3GoSQ6MQqQJzPFd;0hg6w%9c8ftJJJLxlxXn z?tMTj!2R+kOR64H{1Qw;BM)fz@N#2yjk&xDTDdb`SIJ1iEMK@}OGQG3r1b|pAVIL6 zI8)q8UA7G@^j;Yk6BDCcJTG!Qyv={Pu`!@7D1_V{g5vKjWGes9W>M5qH~ykk^f23D z+12@%2PnR;#Th)7O_83l%n`OrR`58jHLY->!wPmyaK3!RDjryeiT*9JD z$W+P1TcRspp*KVbvGO?38`RmZ=hqc^12=TcIATZaz8?4ZZkLI*OHEG47JWU`5@M1g<2i7v-4WEWphR%cLby7pDCap7Zu zBTL8&I1v}36Ar;wa5}z>vq(3h9-lUGu|FIuRxUWmLkwsVwr^gxUL6J8ycM@mhO)D_ zuhbuob81o+M$s716*cFlGvPc`Z2D!F7xjZ=~%6b-3G*+x@V zhLB&ZMWC{Bb{gg9?AizTijHvQc7)wvuXCc~o93%gxA!0*69Xaa@`XqCmZ{0izxgTl zl%(vxIjz$U5>w01V_IyWMTR-V#J7z4dCbEW^7238*^UH@gDY;{YoRiC7rpNA;1*aJZzqai^_>al-8UIb-PQ4pOVkOtDgCPYJ2 z6!maQr0?Vj5N$R?SMf%kE44?NPib4&@JKCweML#h)2sQN|Lx zlsLUqIUIBp&SUk|WH5r%oLVaopDG#IlNtlAUMQw9Xkvo?B0B z1S0?4Apd`l?toW2a!@Y5f3<+_xz~M}7$QF5b0ys_=ZHp5`hc!bQ^tkKw-Qg9iG2-y)D8WOWr*wenr5N}8=0Eavi~&WSpaO0%v2hxr{LkWyepa4rrKx-H>A{b4YapdoNYTV4 zLnwd5CwiKSc?Dg;;V@7%5%kmDcwDqMtIU2DatM^A79iX_1)2Oby z?$qppQtsXNTQ6U^ux{RJ?@cTG1xq~tQS*`GaFM$|>GXu*ugw`3V{~hE5%QCo!>VFA z#hq2#raFyyanKKoeni`^Z~oMzI^fePM3;ZZ0USnj+MSDc}p?+zK(;R^l?*|ADO66Q#c@-;G1gE_pVT@%?!@uvG< zRER?*iZ8j3-ghMhm*HhTfF+4TTvx?98+U~W`*Z3_t>MLyaX~5Gi%xppqCT__?aO}y zD8tc0*bgSH*%;&IE_k{{c))Cq^#5ukc7Jzo>zN8FoNw}R;0l4~W18V89D$Q?sJyx6 z=f$4>#ri@T`E$n zL_fI~8D~po$>X01%M|%c(yG^KlR)F3%1y~HF%{;Ugd6ydEw22-ugFXI4d1c0l^s`m zx@8RR+O^o{pSMk}{lWB1)IRlk;sBYrq|JrTER^gXC+#3Xlboy-$Y1|4H$8um)@xnI z3W_rF@=RSperBVkTmE+*T7r+I&A#JFcFs+i=#E!-_$>W1|Bqe2nNi{aD`0M@=eU3c z=`-PVn4K|k@2q{VU5Sz)@M-z}uj?;mUZXad_>n8TH>|9R`9^gP?!#HQ02gykmf>@s z>=nU>WU^7pi}j#*bMY8Sx_*jOA+Meet!5ASdUpg5A zq|Vb!FLk_{YcHl9N76(gK|_j?rUfkF0D8lcNji}^QVosxpp7i%ZGfXJp)$mi(9aBx}f4 zmGpC=a0iiB7FnIXW9A>2B`{AYCpegDm)dFoM~@Mz0E{Ji!3Bel^W#A&0X z(X84KR+FMlgcN^B;t0$BI_~H&DEAw>s$rK$Ii?c-_8*%RZ|z1+Ds0j?D869yI%-n} z{(Fxyd9_!3j1bZ2Vcr1TSki+Umj5sSe*d=AF7B$dkG|Y9#D zNdL{G=eIVX!wG!XHsU{Z0ylr_1l|JYNZ+9Cd!6zoD zLb5J21-3$bR;(peD^1x|9PT9YKX(^YMQ2$^O(|~6mlMwd*4p#Zb3)JV)6BhkSaN&y zx@7Lvn_>PR-%X|cm!W0_6PNrW1PlQ&mkA^UF$P*lP)S-@mp~*0r50vyb#gCmX>MgN zV{dG4ZZBbUFGMd-m--|Gjel2pR8-d)e~*EAFA6cnyd0zSJ!l&%8bxq7o~S@Y2%v%( zMP(m0Vc3RM5Qc$aW@g#^aVl&}GY$1M4 zY$Y}lONbYV5MmRtjqoEv34dZ4v7J~>1QK3E5aCTQge&1h%pqnFbBSk&nZzu@MW~#h zh(n|^nM>ZZ+hzBO$XnECZ)czAu-U;XE)tJZbEvmz586O~^nXIt)@lB5Vk@Z5RigvLP9{ zP1((ka0PX_B7Z+6O%e`ta;_dY=&9^!&27lb&z4IieQ~4bj}2dLpToRCqD?vr?)}I|dzK zfiY-P3pKo21VbDOqP}_e{H05cJAznT^dDC4gbdJh(tl5XPYx~`m79^}#+aFeNfdrl zg#N~hnW8v|&TP(aZ80=juKfDU8vNAaU*Ko)bDz5*2Q<4AIo8&ef~rKLDpGM-KA|b0 zKnJZEMK7T>w~meUpDT!M5vn8a>eA$9-qUD1xpPv)N1!AIF>YUD8auw^YCG@Cg-DF1 z-TwkT%YWh|9L~f+c$0KEZAfzgjzd4Z*)`O0;$%|~48ZZc_SmjH5CCzI0Dq&yhjJtDZbXTLwg>4ii_oZb9rL7F=~T8QvL^^=O#jLaKZj@Cb3=BMCr1p8+(rty z);U-xUq#I@$Nz=$pSs2fpsNbAG83YuJAqEeM1LLHe)Zs>`3Pt18tfW@OVATux9?!S z0DIo!hvV%QWzOG@`z`j~Fy-(HEFpx;vm;#a*E= zXG8S8>e2{qD(NS2TF2KhV1SDHrp}>ZLqE_TTwH?f@pRv1uOv$w3^|;vrN9UsKf;)1 zK!4s3yREn+;%A`(#;gUySD|;Y6BaN1C4L6a{?h^^Leqy3VX9VEmMPRqrJ74$xk(lU zbkw{Kw1G2F6$VC!JU-EPz_(D1T`Ll8by}+;vsIBu$gic`tG*&HeQT8v&sbI<}5h(hsPa?J#WEJK6${>xFwiGuRjScOcX&sR(r0%(8tOkk1c+OAgu0wkcI-woj zhZaFiIh2>WzV|WVag+&#p8LHCX-(wOcaitI1H(eYksot9c@XM>{`AT_AGRy{_jYpw zgQuYiDs3ONyj&@VV!E)ds7a@K6Z7YU^ z{sgW&^=Rp-l5@oks>3<@f`%+er6V(TE%n>g|78|iu7?Uug}SmFR6rMlGLOT~R30en zswyf>&1_W-Xb&~@?;e9@pntzPJAQpEsk@|>i|REHaN$ERvF1#6Uf;t zLTmYX405$#R}_#X)+~x&xI{(g+`?TH7G0B#UOsZ^D*Hy(Hp*KX6@TjscbZw@lo?Zz zLM`+lnsr}bu?TtbQ%qZSOKN&nc3MhnZflpm&CFsJ2MNyiR&AL;*TX;3^^9<@dKibJ zwww8vR}FByJ@u$T*%qruI|<|H>bMBS^2?bW4dEm37X9A&%fCgd%y>m)HLERx^18=u zMd6eUY*jhzFJ+U0c7I*+I~V~kV9^@S7k4#B^u=&Ju{|a4=k+Mg6*iWgmUV?f2)%y0 z&#Lgi`V(R7*0beTHAgf$g~owes{Ri+)F8SAQFxlc4hC@B#_~A-*%I zHT_u8>jIa$;i$#Z($o)vwkX8?Fa;2AYs>isCc&48qa^D3SY&mzu3@I`i}P@%gIU~& zJZpQAC+G#Nb!wxkq6lR4l!Z!!LN_*ED(=>PEljHc_%n11y^g2cpz$cjTPQfJt!=8* zX)S`G3)^es8-KAUZ5BTP*6J|$5Y_cof95B7*r6R3ETm#Uu@xrq2_@9Tdesn)cH^GVe&H43j_S+ ze*xj1nX1%vj8xXN#GR1*^E4N2+no`W$Z10vff3sJrqX1VZ9HMn)u#YVh7YJ%DPF)#;mTDSHI&oJDrHse;EreG*>^m?yw*SVx{<}t ztzZHm?e!AFzJ53ZLvS9>v>ns8w_C>G4Y2I2lNrNc1r*RLB@356vGDsO+!vvMVWwSX z%8=&BGExrbwzQi~9X~8U^2clVS^vHW-?sm$jke%%!1P^+069NX#Cuu8nW_fRf`687 zkXI}At4j7OS^VkWyp;O|q|`4I>lF132kPo8pLEA)o%1j^>V%ZO4gH3Jo63*lC!=qA zo5Nr$_(e-ty*KZLPvvhRgZ0@Ia8^k`IMf3EFr5@*OAPfT`_J zcSo)vwL}dX6>E5B?9>F%x6b;wuL#=^{Hic#aJEAxPf|~3o2=_hxa|;1tsfKPsCvpW zZDKk*&3>iP@hM}iqvJ%AqZ2{=9UnV=Nla9i zATk8zm&A7jEtmY$1PGThGX$1@c?nn)*S2-FEmfsaRN4|yQ;o)Xh-fs%#1TXj#aVHn zML-Y~Wu8%)1iO28H}fR(pdtvZGKeLPam?V=#29_aO=2{ON%Y2elk6ggyu4GO8Sc&d z-*^A7Kkbk1L!EQ>UTf{OH!7xQ4@RX@*)CeM><#zT<6W1ytefntd@@Xb9-@+m_K=@f zuOgPAJxv`cHcdmFTO0~e<(={YCE_`c1V5HL+*Rf8MXUv%HG;fE0 z_}0xn!A?tjA_M(*_(aklwmYo~*}T<1GVVpEdE2);tyF#^!fB;{gnxLnzhC#Zt|2=@ zqayvootA|7`G*HHOwwF`_jz%_o7XLIi4XBxztlCZE%v#2sd6`+qEMZ)j>C6OXJ+qW?WnN(hGQAilMqqj~gBW{e2jjr>WgHn>W-v2= zv12s!0P|>=8ID=ZoL9N1tUc^{TvU6hKkhlDr^%+Tje&JytGE}reSB};pMSg8)Lz-W z{@MGj=f*yFv(LhRKL6}n+V`IAE4E+v^X+%3zeE4^{Z9|@9Pp7{yq#4uQ&Tn2W#A{m zE`baxw136E&|#26h{H9<9ge>YHVyuH$c!PUhI}w|2CZqgHf6>NY_Fbe!FybhVp`-IWS zH#pm0)&8LjNH|K87nQ4^{uMJkPm&qub33Qp|8)$_lxCf1N**K1TEe8q6k~$j_ z%hIEJJzh?KbXNJIqypsBvPJGAWEWYo-v;{32*VCzID~_jIoibQICC2$8uum}jatGH zBhg@$%{htPW|(X=(j$7Aed(gNIb7B`EYdT|Gic#_aNGq3Q>rC5qpAoR`NI*_TSJ0l z{nkmomv3LZdf|Xb_uqXliC+8h`2efkb!5>SS$j=?Tbm^4xPzw4=A-n2mkbAuytDxQ zIaJ+kf2*M)dX7k{7X15y0`7-3$3~C$Sh+4t)Z9jfBXd)2bllZ!@Y9m3G{&l5hlZv# z$^Dw>T?e8I4p3vKJYI-PFhoNNzo{|yKwW)B%U!}}tso2M(M$5g@#_irA^>nekH5Zr z2>I-yU634Se>Ch)7sK2=W7h#sw1A^eya_l6g~k%SzEJxtjS3W?qeU&p%EJVliDCIg zCR3xuvD%Ua2Z67ZSRefc@CHAa4FMDgTq(UqW0KL3o@US!2jc2LUcmJ>pGd5)egb&G zW|#_rbloEk!^vghMM_f=4Td1SV~io%7z2E;j%~5Df73i4gWF(L;1EZj9hh%2XJ(l# zI0Hi*(1oPgyrN^9DIVG=9zO5F!&n-Xp02;6_pJO2jf&ig4g%RD?@y{pf+%n#;R;kQ zvk+x8hUg>o2AXa@T*1}_x?>BRfoA%waJp%{Db5^hF`A%~mn9R2HJy)gV+zvq!Lb~2 z_GRQ^f4xi`OkJpFt(FJSOkZDjotQ9`B8)`BxF|@1q;Q_ba!Q}G6dP?;ERpOev+VI4 z4ksLrw%5p5CqE}(2`=Ium(JWc+jGe{Ewb?fGG*^vhTHsCQ$Hfp#Lfj>6k|0%C@k}1 z@zqc7J^FUqHS%1pb{ctGAnw?P9&9;C(BOU8e+O1U5}ycUAQ>Tcg9V!8o>mpeE^2v= zJW|NXH=7}suh<1~VyBu-B(63RoAsp5`ULpTSW@4~q$Gg>QXHcSp-hzfv!&=|qhnJ> zB`hTlz)xds<@YK6G}bQsW#d4#d<=sH96aeUnND7D9!VTY|9hkHHJthRW9%oA9O5nz ze+?k>c^jNAY0#D(X{l(Z0dGmD46N7+tHG0>3WOn=r%Xz-?vP})6<3_MQ+CLtJZF%x z*Tl<@Bw@)OIHr|<;E3DrtXRuw+K;VYo3(8S88!SRGK@HUH37$5Iays(r`^Ee;w&4o z7=ILqh1(tHyP66Qu?6gV<0PEhe@t83e}KOeLkNZDD%hgHz6uV&{$#^mpui`~$Uz6P2~XL4roet&7wjiLgT1*^ zWkX_U8ab=w5sg4Ad<#bv*r+guv;EoOcL47_tHyI3(}bh~qbZsmIPU)kyXBmmf8O~? zUZTlZ42}mNw@NGD;-J!GI%ui3m=zA!NUXnpCB2FdtOZ|s$QnxG5@V^MR&O#w6yK>( zOFi43n|0QWFi?$e25RycQoTN zw84JJmG3dd?@obuqjnD&O!_Vze+9E(diB~Xx(kW7;0t)ug3Md*zVq(q`DZ9d;F~#> zL}Q6H8LEKaZ!+)KcB6uLNI1+YtIlt3q8iIkNU#(d1MM}pFckkTK$*!@RMgabCaV(o zYi}+kc4U~_+C{r`aL!AcR0t+0&Bd-;w37?KJ(XK-07I8%X6B-4Eld-3&rZL7SUpM?(478 zfU;lMW9BytFjTh3(P|vsp%JP#_z$oh~{SfAyXB1uA=^xOd@` z*mk$ZbvX;+MIfp~k03A4g)b#6RUWO{R=Zo@k3{A^_OsVK#9orHK*u(k z+RP{5C_S7aqf_w-auP=sukT|PdwiH%lbH#IY;k8&YAnR^-i@*Q57k#Rw*<7!8cP@- zVk3^4tGlH@)o$=(f4WOfGq!h$?NBn5TA6yBsO;2&=LK|QX~y~Yu^09j^BH+n+d1u- zfuUr2L>bu%kGeU@(EVw8+XXTh+i?hs<6w^Ke3(tfD~SB3#hGr@C}G~&Zof2*`lWy_ zzZ6BpkSSydP45J3JkNfc=RHp=VS|pHm*PE6T#b1+fyHUCf8V8;^yMXXJEqzEqEb%r z2|Y!J9rZJ+JH?sw>4o^h>hlWNe?(h*>IKdXqLFdsZq%UdccRf4mjJ=MZ+%Q{ZGA=4 z*)_Fm-8Qdxj}$d+Xv2|L|6m#@i2oE{D&SS*w?;gDFt}y4D4C#gx zNaMpx;`Z+^DXXrEZ``<3rw`mD#ufNf%%hPQv3i!9Z@F)Mq&6flZ5u?x&WsIBLA<7e z*{yepb|1X%{9M$b+nq}{4yC^JdV{#?;4&BwVXzU>e@&aRla4|u(B<41o*8XgGiqZCr(^`3yPGiyuVLLf0cxlPqQ*f!slsX96DwSo!>u;G0pU2I1cTA zDmbpBdI(mX;=axOEl;U5PwTM~os>LP&E7|P(LB+#TrAE^v&uv2?V!cyJxrwkDQO8n zN!XITe<&X${^|oLyLB{pb*5$PbSnf4Ite+TG7?`yg_#K2Y#C~&m zXnDN0De!38?OnX)zBTRE?&X8$PJ*amVK-Y7#q^?d*adt9q(y3pii?Gm(rh#As}QNW z@3WXs1f79$;Op>3z)`I+je!TXezieavkLiVe~$EN6@4a`UAFWGnGE{fX0BV|A0-;` z0sDt~s(ILX>MxAx|J%7z?s+9KN!D-)>#SJU%|1-QaZWh#%TxB61hnEW0@h(~4yT!C zEnNk#kQrJWA1xq%==3}AF8`SH_>?RcJNy4e$nGN9LJ8UJt+0;MoTAAuqRFe!Y_&|slkmlChsf%>VmNUor= zwnpiAMvUS#65T!6FEVUrP+Aa7gK4!Jf3A9;-~AqZ3D~pz;*s{IQ@4+N3qSpPIm00C zkG0d~qHEq-T04zo5*bZ46HgpTCSm^JC+4fCD5Oll&k(ulh|8Q;||4; zkCMnJT%}`;qc@Bhqvr$uP7ZKRpGUp-VcUh9;#u7~ZedVF$O?G7O0j`+!p?Rze<=6S z*{%+qNpHnaJ-|rWLm)0n<}dvw6?LX|a|;}T(*`Te`w~v`I8VMN91m#l@eU01_HGPp zZLu~Sf9ln!FZl0PJ2eW^mr>7S|w&g zfZ-V>aB)`0rV<}`tJ)_5>E_&pe&DlBPi4*T`c#zf%jyU5g+B`<}s~Vq2-M_c4~vh(pJVB#y;(7Ndfr)3+Ol8zkbt&e@*URiv=FT z56H2<`i6VvY6H&F1U%~xyDe>`yy$&l7Kd(GHWJrmZ8dE&ZTS}euHLJ-8S6Y;X6tLt ziTL%OzS+e&eH`_V{qMt_6QXTLGo|~Tiz<4>J@js=RP-V{rVGDJW20%yB(b?@llL)> z0RDF89WqhJp0iNBzeHd3f9;%d&WZA!4>^1R@?Og$Y`5Gs4|u{2cJqJ)Z7Z0%U8 z%NuDx6vv1x4G62_n(4Jq(AT3bD@s_dyDi^aA@`@oQ9j+>m1h-Yba&<9hTuPTC92e?Q+|VNqT*nQLi0NatVuvZQhjFAmduY z4tg*ja{^s+iK|#oJ3}MvRo2ZUs~v`8zOu~M;A`}S?Xbzbf3<5FPVDTR9iNe01CBM2 zk(XWaBNjOPNDBV+8UIX{fvSX3(r?65rsyCf9D{MMpXm}da9+Pa2C@mr` zJA@OhRJ(i4#sN50scq46@7uz5*!WNJBwJnp)m6J;w|1$C;-!kGvU`92J7nxiV!QXH zXH$|xR9npAf5EJJQvvX|8hz$yw^C)FuP50lWaQxS*gx+2M^bZ3r5KNsg$dmFNxQ?> zZEieHlR2g6ltt`r7gH-bSS7$0)E%+%FG5yfM($1E%V=7So`z7`|E&c-rBBTLFG$?0 zPp1(kUY(v~s~lnTwUYbsT{D#FT}|Rw9M=A#%8AQJe?16}#q{9$)k?Wa^ZD%e(VSY2 zlV=E&=DNyKMW`K1XiG{Fln(yj+C7OWq{g5oy?Ae;DOcaglB*7Q^FNTXE!=mXpf9P; zOap@@%`q-D1_FUsDE>v))a82Dur8SMptMOW{v!t|(J!mC-8+4v!&u~Onj|*N=xzvtAWHUabkTbpty1p9o{Wx< z4FFmjsE0M5p{%Wei-vNeG8~G{%rb!~J4gEvRoH_JvhmZg`%PEOhoK(Y42S8O`3eP3 zuUY=b*_==JKYLC4|2m)hy!~oJWz6iqp3nWCe+vq@C+nI=IIms5F-(kkFv;Q%Q(>i7 zkUOvW_%Eh;PX`_q^7DVPYF(XeJZ_Um3V7mATJuoiipxq$i_3UTYidsWn)^d=?31oG zcH-A$q|5r?mG3&eT#d3QDr6krUO~U=puVKpi8I6pFUNZl%!VLxuMOm_wo6o z#}t!B`qF!f_&j~59UTqS5BP&{z2fEtf4Ixvo^zE9BhSrR{F--N=+U;C`Xd+DX$n%37~Fs2)mjfP~}vS>P!;_{$WJkHW)VC*^_jC>(%ZN?!_ z?cv;-8ffO*g6cN;1ct7g{BRixxbWt8U!D)XOYM!=ZOw?e;^&p+DtM@t`;jOifB3+n zD?T_d?7tGff_s4LPvd0lf$DwxOeVLWwYd6e`qj?`^%aOP5}Rv$xpW_H6bQOyJS(wY*@tmb5W39 zRSj9y;yJQFXbo)ie&+648yj0i8huI{l_a~B+hH>fpap?a=CQm2orQpad zZ8Yvo6v_9UZ`kOtnHH#?ikf`cHLCyo>8M`wfc~ztK!8QSw`~3tHgtQaf5tD-BG9XC z!ydX%-ayXzS}gFX$@-*pFq9-{(T)skAZ|b=16jY0OeQ^udgo5+3ex$cJbg|{%aM{& z5uI^T6}rQZ-Ke=jJC708FR(ww%-~nf;x-&k+giB@Hwwtjd_cwod+397B06vf)AJ1t zlp&+OLYtawLw=&37Plnrf66G2G;f##9%W&%A{x=h~E|FW-3?`{UF{U!bknbv%4x zJ&FDID~J|xDGqSLq4t_ibjNRmG7gZfXwBYNEuFJop-pdtzA7>xe?2Y~cJN!PLXI7) z-hcF}&sz$?W=tcQqUL9qnfqGv0%^{N5jW^PwBP<62cy%do1|~lDwyM={eiqCtcB2H zsl^HPa1%;-9B@uL{|(F?JqqTH`u$HAPoxh}Q)achMGMSgw0}WyQ9mCU^e@#HpWy3U zbru9_$>09HHp}BVe=cM>3k#bUxxf{oB#6YAe!rSBddyq4BVp_p1%F9;vNq zKC|g&PQz0nXW@VXiVZ=T;kU^TguHw(LnBYT*+?LxGk0Y~ zXBcx0dAyDdB-zy3=6zULm|@P(`WQ-R2xhTyQL)i+QR7KZe^)XD$Qa)3O~@*iGT#+X zaB$LcGF!^MR&lAZ`KkXP9u+tbohiF!sc~DmkV;gGJfh>$()D^O56St-Is1ONi`u_! zy|7~A_CW8=2mDXhmzP*9-MN%MrfIyp<`$ORT60$!26)O5LPBmx2{iCGzQ}I+^px+y z4Pje11&hbSe}x;?y5n$>|K7Qcute)NbNr@K_dAjc zFw>(&JxL<9pQg zJ|q{%bp^7u0td8P@ka$`L!GEaT87UnG#HE*geVSNe^Qq3+#2ua?X>{nAi%t%yufm# z2-^6D$b)`<5n=udPp?EZ4#LTwVlKtmHNXOrOooqnl?*20Kjvb;Mk)KoQIV*9g$Z!$ zyGQWRPnW7Zk~6dg+i0V_m3I#tIlU`JR{6{BL20b=r-J?XzVOh9sU(f08A;06F(#6L zX}HIXfAQamB%Me?0IaIqeKX|@{1eW@`|wWAnS%Q_@~Ww?ZjLS6RI-JN<_uT`&U@DG zdeME?4&b}AN=}oGQ_zgV=hXO9hgztFys#t#>`4)4uN(oUw@77?wE zJ8tkAKA^>?@5CjOm!I5OUEfrB>WokE&J3}(`e?ot_`4?-&RyWY&~3h! zY$QIr6RC-gag3Aa{ccYb{tYbc=3l@cIQYw7aWH^#<=@!%A9C}*|1WO7?vlK9x#)F# zS)~#@!jW--q_6fFQDp~tm_T+sV!yau|4~J?e&+#k%kI?e5DQ6`;6w4eZBl-ROFqfU zMXw5$Y|Q4Q-pD>D_U<{oyic#D>^^;vJ=mwOsgEtg{0|EC7?_u#W(555vw^2<5WdVPATol)`?r~tcK|rIoRie&-amNLh=aR%25kV0YS5y=S z1YyD^+aM~dY%?{(z9{Rkh#+GSh0$Q5L=%%}G#Hn=sL|*0$YNrmSF7=mmv?$FF<0Na zFTeaw^9S8$>eQ+FzOSkzj72|2B9Yj6tn^s!vBqhkm&>|o)5SNA!f=0yFruF@Qo5Gp zjQDmWz8Vf?}g4%6n&o$at7JSbYV z#XrKq%Re?GDBM4m{uAb~Dsqb|C^lh=!-B9dhn3F1*}yDkT$w4%Ym7Iuh?&ZaW>zq6j59Naac8D6W0_UV zVrCq(npwikV8%0R7!PJ9Gl5yl{0B3U@nJj}FUEzL#H?qQF$;g0IgAx!&4e>{)c8~y zFvfy@{6MlmvcI2AKZBH$21&14L|FV}8DM!{HcwV0d&n+j8#oDf&T6#Pr`FS~yZVRs zKhpodZR%}@+J@P7*b=*qb~wOkK-0jt23~q4;+4M+3LkWS@RY&E!5{ubBlNfXrC;6m z448!bCdp$QChdRWu$K3irMvAU)5&7s9EAI5Z<1}$Ooz3w6^INX^qlf>?|nz5@G)!m zi*$v?0Ziy@5PQ zfXh&;;Y@5C1VLm;P7&z!xt%y<7#d_}iL>QorL0+hA6i+V8GeF#x^WUqZVNkkSKsyBP{ks1t@GR=L(F_R zX?S@9m;O-%7k^W$P0p03Z{N0fDsaRRaMH0eIvk2a3(jaVwOXx4tH{ny+6B>^|G^#g zhSohDHwc@*hPW*v9AU|bZ>QoooOS@Y0=eBU7EX?DKf^(X@JKwS2?z5eU3fRmkOpe7 zCn}ov3o?k)YNN6eH1XO5;9`}sTK(V6?*7BSN>Bx}$=f`fEDf(H6yN8$cs6H&2hNP{#rN71GD$UxEcfe~v( zcn-k-#1YcNJudt+1g>Lo?)AIheLJU%*cK^pbi@7|(7|=jzD8!s$r^H=$68#%J~Yf* zzbJ4av42vK3FIptKR{m=tttrP=c#&~unG#L=_w42@vBC2j7!l*Dl}jukHe?_K&Fw| zGhZV^$k6V|I1Ojt{s9NciJq+B$q+!R8y)aLRg0qL$gxTjd;~4qDk7_c!3TV~IY5KV zix|l;Qp>pJgxPpLg$X_oukZ{Ler#OT=0-P~z<*I=XAlSS+7GkP{!~Ym@vy>&MYnuQ z6YG@@hZTar5=rkp-hbJ;q+q&xAmHHh^z@om#evgj@@t_DjwTp4i&2ZLd7jCP4k?;? zX7Q;dT3tN-S=66MqLCGL_kLZHtkdoR`#Q+4RS4HvsL|>6d6Z0% z@P8)6QZm)D4WNg*?8Ype7UHs=u?dz1`H5c>nP~jr9G)VGx=J`iIcy* zaMkg}bqgrec9SV&4B1KoZ~~ct8gxSz?a;a+L$@n66;iZ{G%|_sKGVPhW>l^^8`2tj z3Q!K;mtF2SeeUXm;^S}?(AK|+xa!l2pnsG)2>Ln&%>`L&!ZAjXO(JLWX{PaA;>5e* zYFT~U(dbWr!;w$E!m%iya+eJEUKby_MRAfP3x4BpZ{dp+brah7L&rPI4+Ho48E-O- zj9IvDsZv?f5hfx_vaBy`@ZFp96uhx(@UtD8C${_U&wte}~3o_{rl z3?dE>ozV%MjyVMC`b@)Wt=yzyEsTYic@hNlGyG5&3E9ZfDo}cTl zFvG#Z2+GXX=ggeT;%XdE8T$^Z$s`;=ycNXz=b=0;CllG*a8Y&0r!k;v0}vjF)h?fq zjUk&BzcWoVEAi>1^$4GuFvcjk^5`ydQVbWy@F+8p{tso3&X*fY^jb~6e1BJJ+73{2 zTbdL0)wGlyZ3}L9btcjv!pX-hP+lQV&3U>?v(!j$QAc4tQ^X*X-bJmKwPL5)Z|tCP z!bbd<$G2qo#@DwVA~We0nXBlX)OQnEqy7oB(DeiwMTuhZRpCC5Q(>{FnW{`o@;ZOYFctGaoe*x^XQ=%jzEm#jRiOZt>lR*={q2S z3o!1euQyh-o$%T3`=-jxKarLmsf^5dvGlwc4pI2Xre>VpeYF{r4u4AE2F5(jzahmT z=)oV4It^u%5b{%hyLcj^CAnD9SYDS~q0i2wwLFPa@7=y{-`*-iT|%?JGC-Z6mIu@Y z7OkV#l&^kkQCM+6yGpTRdqM~VgR*w3VP{N+S1hdLygy%zp7{FB53k-?(HLDS_pMtB zGiblC88UUsg5*}Hf`39?S;-y_`{(mBq3gZ(pzHQ+aND#A+-53H6JP%F#U!7QkQJ0^ z!-7w@o;wR=BGFDy664=UpT79dpz*ivnaB6u?F%JMB+B3rbi!SDpI)EXW8*3IyTZ*b zeaUdyz1c~=nnK|<8P0%um%YT6CWA)*cqc;@+@VPVU*OI!qRUM=5Obu8pVs08~{_)00-ACEG|S1JMys`A$qFD+SK0>`<}?}7oP z`HQ0Ua$QoPD1U1P$f;HQ+J=ZF=H*Ug>;~6x5f0zWey?I5|EW&o7pc4aP_j{N!b3)E zF%1$4)QXNn2k#R0iBdDX#drxm|+ofVh10?{<0&`oLm#t zq@r!%V!8rOs7{95(AEI=Q|Z0E6}xkiwrkUqw2I92VSnmKSPJPEc6VoVre7h9k@h;( zJh8$SY6WNK%=KQaok`xHAdto`=%N+I*CY(;D=*WVXtvdZc{YI|l*-!c;*)2UKl`jR)G~ z#FZ?e9mbj8QNN3}-2362nfhLW6H8H(Z0cc;NPplSUcM*A0>P6XUz2?a_HrkTXYSv> zy^#zx$aB=7t$Kzt^kzler)O(Z)8xtx(T4ShC(^6GHh&tCEN@UgJ$w{~qEJKt~FytlLJPs#B+mbg7v*i?4hg@`A0SKzuy zu6tdE3!b-b79w@*f)7!e-Z?43L*fkr>3^*B^Eg>NNwsX36``c?7LEq)dhZ?Lq?BFL zKcrppr|?&}CQ6l)aOWCJKNrp}BK`VQsg^c?=HiPM)Ee%m@jwfcELbxR{OKA8!6L{l zdhZhpCEKEZ0PS==fELl5=#Dr&Wf}zDB%yo*eFdrohYMVmAPSLOY5?CXJuq*Gz#KD###zW_GP^iG28%M&-Ch5w!E}# zPfaD-66awByQ#}sE;Sw!Uz(5l@;Bw{H|iEG0~pYNGsQ+uiUFd^D)A)W?eZCMTt%!iXZtrNG&D6DTC374 zca+GDMRl~6abL6r%~fn+={P-OGm$zY7vJ@__uG$FE4G62NBIevp%7~5fPa;!@YF#$ z)N({}nx8y7A#_84@xA{-=D_!Pl=aeWpE*1q(gl_9I*)1Sx2L42@U9rk~A=?IMQU zDTcyfjd{nHEIN~wbj%u;oS2?I2ke#XCwe^`pxsJ4>=$#mU7c5;16@I(;sIKslnl4@ zSIX-27pSN;(V{NyStQb|$(-9~L;2>uKWWb`S`NDdPZEo<8{I>9%71s>axYs7PT=FE z_T~QIlrFh`^6a6SxOx9;ZTx>Xu)iM!yB=YQIC=!W0KFgE*@~))s`Ba+Yfq&d5nHdv zH*pM(oP3Xr^xn8VG(eH(%fEa4WMw=3HW0|*C4R6nW~(C1cVlWOxWm@ti8VAa7FuiP zG(%5+ljP|E;TOK3Qh%R+Q{?t~nv|6^DJ~FWX51Y})Pg1}O+nu5T}j-9Fw1XEvQW(w z2!b$}Xx?;_Z6gdB*~<_&`uQ7CaVJm|g~B8=(r&Vt_A{5iBPYEE>}w#WAio@41pi^U zu-89-r}=Fags9Y+yvUz{F_fy*m}QpLa6N0)9XUPnC-=;?;; zWE65yH5y0-E;AXDvp`dopg;>^VIr;|KI=D-S;T@^CMRpPki{jJLSB&`4Ey9b8rd(< z6L2wS?y~Ud$$!geV-N=u45ZreKv>OZkD2Tk0mlPNkwesW1mkZ{~|E>6c@4e`PvW#x%%=~VG3&}^heijDmu@ekO$ zR}WsRXx1b&$ivfisVVibyvta}?f6$pb^Nczt_4HovNeiQn-e+`Xo;>}d$+w*IzQ6ak94=@4I1ZP~ z_1(5^{l+z0pAFcsb?xFs-fw1kW^g?-$9aCui^t|~Ji~bt+%sq7OhZSeqNs<^;)gjr zF88(dZw4fbvr`k|;?ri$4VX7;@ro78XRS(#Nll1~5Y5^Ue~}g+lN6Cg{z;s*B{?b~ zCM|p6tW}ALvo?G0*gI=;%-)#PjF{-Lw+199iPO_!QfF;Qj*dwcaX5q$muU8lhIbfi4#yn?jqZ#TLH#F;-fU*=pg;NPiBda#XnZOMWOQEBz`e5zBnu8R| z;ydvRe-kqI%EJ|M$dVU=xxLd29ZV~<=~{rY7D9QE5+oryd!3#QALbie2D1bN640vD z3Mvuv=xTgz0*>MPe#^aM;^2sq!E1dk&zwqyYg*|o(dm-o)BV0i!*z5FUa=}{Cs1!n zJ1j<{(Pm`bmcn`{rK%*(YBc%mSyfBr{1RQtFx2 z_|OEuFGQ-Spx_yyc|H42@4r(!#M-MY#ZW=@?{SAOjK_1;xdmV;GMb9>8N0jw^OHb1 zow}60xngNFn-Z9^3PPx*Cq>8l+%-i-45{Xl+o{gWHdur|P&?BGxxx}J$Dzyefu98``V2L&dsBNje zCkN}lsyocKo$qh$1t;|COCl-XZ+QxL6}X4FZZ3TD67QR-9uIAAw%gAFRpl53e?tz7 zAK|Bi4iwq=?#LPcEuNElmmcFb~b%wWwgMFLNQzmb1>dl+BA;6=ZG#yTb^!{1TQld*IVsWOUwj zp#$z|p32`R{%*S8T@URUp&e~D*bfw%#J^dvCUMzspTv9?`}2`7k4C=rAASlSQI~?x zVJ?Hu{nYkmjC4-$`%8k7EN8~(&kiVM(IH)Z0<~Lts;S?NCYB#$Yfty}cYz(M4duxNk^&KAfzF`Sf2*knWH$=LVK;9$ z&2ybDJ$KyPXr#=A#xlFsl9#wg2SQc|3FbtgG&0CiI1CPUKyS~449L@~^h!K#8M{(p?^&amIeuUIrsf#vHd4%Fse-@3cp6EjZ*}D?t*)diVyU>dS`4^C;gNKwzLN~#C z=ED_No8dgzf2h9L18>a6PdtSK7av~s`A<{YI>q}3ItqGi^{mxJccbV3YAyh(vs#?+ zI9>sJyd3bq?yB^<;pc0)aK{sKi#Ocp38vBWPyP{4!x1f=j6__62Wf3RTtB6c0-EeU>Qbkdf%t8j#? z;+iMRjTU@dMfP(Oow>gK5M^;D9OT~{SsF(~qZo*nGZZpYfmau2|t4AivH{?dDGX%;6Sx6k@LY7%k z(qt*Fe}PKMm0ci7P0frC?apZbvJ1tw*}Sl*YZ5D}(1oidMC>k;1vya{p@3dQe+m|8 zfJ$k+LMH?bC39remAi`%46JkRc`a^dx`a^-Mpx|l7gejt)@V0*Rf`m*@S}S!kFQJb zng%z;L(~1fLZ1!N8O!B6)fveNf~eh5un%OAe+Xh{rM<8U%BZ5eij?d`X>?S3_RX)Z zynCgBL0r$e{1PxhzMv|{k}FSBinNU1=Z#WvL--6l9{b?A`0-_j)?7Z?-Bnn~o=3%W zC|;)&Zd|z)1l#mioQIpx#HvGV?XjL-LY410mMguqTXdVy?2fYn&arshX;xYxV89(N5+ch#3`(dXVG4 zfSd8$k=q8nArJHdg=1euRZ*GK%;c9ef1^ij4P!pW(PlK2H&-@ypS}2>@G-B)$0sFv zozutS@N^fE(?J&+AaeQw;?RxeG(!bY=l%o>)Y^sHwy{Z~ooQ=; zdWw&Nq(s5mhHk?L)YX?S;HeBQ`+tP>A4I;xYfae$MC1?rP~`K$lwVBxT{;1AfB1gA z2L~hpQeB>O3#-_zl|mM^>a_6e&8DyIHoa9QGic;GCTB~MkcdW-uD-d>Tw|_d&DEA3 zsDk712X~ZvCwcwyLDCw58wFHy8{XleA~M0Z_+?H)mU$pyU*xx=x%tHei+6d47qzpl6IJ9>&`3~ILA@PQ z8@nI@&(nNoh8_Fs?v9#aP1;_CNR`DZ5)~q4nrx4pe55g2!YovDP2|A6fBop0e8%r9 zjVFz+&9qB1#F@#dmCEAEhKk1fewirSq6RLSI)uW8c*B!^sBRjAfv8*Pmgx6hHD(fZ zdkAyMpHGNu`$;it)w$Fq+9Oi`fqiyeS+-N^OoupX(aNWnyz)xhm(`Yfvy%an(L{jn z%mcMt@7-z$j?t?OIzlIEe~Z>?GnxwQjI*$=xuB?h+qr!M#I;RBJoFfv)~M=AX=YR1 za`XI#EK8z8V@fE=X@)N9#z()ub+2K~suY7to6Z=d6TYvOnrzVL$pl%+qNFgO{@wgB*wWNg!<299R#*Hi^E3(#f3HS*7y7~J;^S!I z?|GhF&lI{% z?4}l-6P-dY^`ZZ%yPr6Qt{07QRPwn~xBe}TYO*yrOw3Uf)~-310hg_Ci0e-xi4P57=LvK?7#Na@A;>dIGFi8DW10hN{J0~(dL>T!NP&*}E2OY*5XAgT2y<~M2 zbQ10JLQ|v?6KMK=%lX!{NZ}f$iLrm@7dB?<2yxn)OxP#b-WGefqq4rXh$(9=K6k(F z8Z~Hij4CxJe=sW|83f z!VNF{RA!)hYC|IQ28~`#R>b3Y)7@BB=-_#Dp5M@DJz7v*F?8ZxtH5q7FcL#y(^^y+ zsX9nw;vvRN-lHCi3>LQ7P^bYZWasRY$naOV&;KgAe>4_)1>Vr>RGCyUkvfQGqae~8 zJ$BGOz3E&9=E zLMK`}e|C@HM>qZJHsR)`%H4rG!@`mn<%N)nPzZuudlKII4;_6x$gn4n_`P3-_PHah zL6;i|F@og>*L;A+qlxGl^t3nE#3W=06BylyFP*xl>T-{xwGr`ITMd{>DjPdHS~`9z zyNsDeY_9rdOC=Zjd8h`fXfgpNRl&9!%3E*|f6&ZR9v`Ga;l;&9Bbg|h)~r@wpBM1# zr3@a2*CyhvFbjem>&ti6zTUm5nB=hhd@K7Pz*V6bx919Zwr4fZvlxZYqqf&f)$KLv zlGG_VT1J-}gP$>|SJ!pPL&9jq+Q+a2z`%~Ww zKPe^iqt&YQptt3+$5z;vK_K9n!6QCce}%)PQiB0>lqz3mbt0eZX!dOejYDhQXe<2f z{!vDH1EM}fn_Y;x;v_G)bcu%!dfukZP9v$bk(8-GSD~ubR}ynD?suP**wiMSPHWI> z*wD;SWi*6Abb+W;ZPuE!WW{>5PVq86;cw6xlwMF0hiEgIZ8qlUJ8wJ4>~&Sfe{b6= znw=5FhP@D+9!ns+vC{BIvw^T3P%RaW)s?d1v=DW$aCP_EPtha9ip)UsuZCS&`c`C) zD3*P&V$W>X=hr$(?mUmoWW5e69V|c7c(o5@AwjVV_Li{@xg(RLpSR-i%*^PN-4Wqi zfZB^brK|7MyxVumePHnLX>h@Qe{De=^`<6LCADYQwUjq>^v5;^tysMI$pCg4o|2BA zgFxaZ@dB?ULVjpAdZu6eHJ-3BESwDFn1dV5ryq=3+b6CyjwaN*?+g%CZzK*E?f#x+ z^~yqfRjs>(`R7D^1)Uf@vo#5vD#&55l5g)c71=v0zbHD3d`ZGQq^nI0f6IetF#KJW zFXKs&im6r6_;E3lyOA6YulTfBX;W{!c&Xa+jlpw?8`r zh^COw%3~|>+!Z)_v%43rK3ErRi@TxyewtZGgf)N4CIt3_VJDKTua0G%P1K6 zb{!HwkDpw+d~PrkDvsD25fZpu5lG8=vDs40acR)Z_h`UB&-u=GzV9Mq%my$rnQZvh6>CQ6`q?^{_f6FrQl>y=y`DT*!idkq+lA`?;VeJU)9geZX@YNR>xlHEZ z=xQGr6cys*Tp4F(IrADblNryfV;mS;W&*Q)I!Z^gk+>c zIB-#FWxf7AXoLp13^f|g#D;?>1QurIgI=H2jiW5kp!|^7DyFNIE&2!01}*S6sG|d? zvE;TG%_B!T6eLzj7rw5WA={1OMI72WUbe=`0-U(^(u>ooEmJvIB9hO5n#6v=k zUe{CvZJaUG;O`e2;j_KV?Y$fCTIDupxAjKpOryfE_Akq_&Eq zTj?$b;|esFi{3bpFG_&KXstFrO-R`nv~nhJ#2Rqg(Q`T+jiYnVY0|V>twyWL$cT%9 z5YFx3{yIZj@$nmk&Dlg8mJ^P!w164PRL0t2g?A9Ky<%y$SKG!#HOAB7CH$+$_D)tI7qK2&_I7|Ek1Z^B0g*cBtcRH zN71D^Yk#2VdfSLK5dU^99T}6osK@Q5mrS546WiIqYT6aa?w$o z!si!)9&)(KMA#>ge<%~kVp@+m-&S{_9Jsqm(tq5`CMD2)rdUSiLzN&7QkLU3g_|RDD?1=6qaW= z+keT1SMF+bpr9B#aSpK};~vgK%hSgzjYm{lSairym{_M2IHD3omdJYV@@{Kg;=JhS z7XU|oOy6GJrfNQOE~f@MpexF_i+f(@5<2iZ94YVd>XGsJ#X0$Z2CmYi4Ag7{e_BfR z5GGYy9n?czLQ1>^*+|-m2fnYkX;S)XCV$XM_koEJM917`QQxajkZ5Z)+o=CLw9-m{ z1T7QGj7YO=V70o@_ zY{Cgfi4i2;$)U)?Lu4xNfE$%{;eTBr?*WHne)tk6qA=qQdD+<|(s#G&6ib%;!b81z zzo!`ov4cN+qPy$}a37s>CKhCZy~`T4y85`EiXvIIwmY>IH#Fj(`oWxZPcFJ(Fkh1c zbxkQ(cN|x_b#5qLM>AtPZvq)XtRCCqRGfPBX?bZ3q(*Bq;!;(?t5-$1(ti;XwD|HF zRil}{LwCf`TG?`_+5|s9J{hdrD#6V0UUqz2&kL=6fnAN(@}3&}nn!OU;6xHaLdh61 ziFgq&v?A6RL@z6}MlXT%k_-H5aBTKG>v}ou8@j3YGjDc$()H=3x^r+H-cvX3JiM;R z2_}I}!u+icAwC<`3qg9{&VOakVTL2cS17x*{mL#2Sloy$wsJnUsrk_R==&?prq=r*XnYe3!>RDe?8MZ#_n4+AXp`)jO?!C(1_s546Hs zX`mY=nq~1N@d1xBVZn-3U`J-Ehzh$U%DU~BKqu}rVc7{u4d4Qb?9F|GAc9QZvyd#6 zQjDGFl=lnV7pXe2$$w3`IMHpY;EZKxtHkMGTwO|du2UI+iHhF8)3@KVR`)3A)Uxxj zLC<>SlgCmxJTRO$=HeV2D8weD?1w1M-MGK5&RE`Ya?1hNH+&r2Vrl!7E6M!dx6j{) zLn2zTqXlQ*yV`7&}eFUlLdKwY!P5FMK8 z6b9=#=Z{vRBffU?ovUB1YYZt8Tx-|B9IAPCL7GmT8{Y<%kf$pxEaq@f4nG$z9yxD0kxs^=#epEy+k!Hw;C_OJKUqOH;I$btN5jY zp7d4F-}@^F53?hW;vi)^w8U2jH~CO$yOLh+Cw)$N-_TYA_qU?ECFRMPar?9>aavW{ zR=rxgvDCZDCjW2l%}S7iy@~l+90&=utfR zJ&vb*Aji-iIp49j*~8t>$J4Xfr{jpRxkDh!$SSI6&i$tJFH+lZ0M7T7zLPkWrKpKF z^|0+SxQmzX$}v}TeQA4sZYWlg%@e6BZ}i11Hpw;N4!DI<`7jAPD~cG6_6SE z9Q)4w*w^Xu3xvYL{NlR0cX!-~lRB{N$4{Sr<8+tE>Qv9w3?4OMMW4;WYf?@_dq(q5 zP09e8Q!jd1^;;`aL9SuNQxp5U`w|R)+20X49>r_q=pXO1{R)x$wU+Ryxb_!$=)x}A zxpv{=^t#gm-e-x!uMC^WPP!2AL+ur~ZW45_DRIfKQqfE*ouOWbX_;LBYz=_%X&xT@6)H%fMprv>GP|&{ulK3ao3Z5 zK)r=V9!LDGsGu}5QOf3k7G|*(EXfqa(bryudN@;W$b;&`LbzH%}Z!}Kt9iAJNl~N6sg_KS5 zs-9wn#Zyw2A1-~htcJ{-+zRe_m4Ay5`XlGxvzq^7Fh1)G#%I59^MJ9pXrn^+2AnHN zO*y(teL#(;_fb2V+j2NKd^Er?sMH}Mk_6<?TOhPAvH?$YppJfkzH43ybsf zzLXZUfiB307Ks`Hr3FdKu*6J@%UT>nhMjEqRVw$Et@H{(P z+139i@3}=4!99;tml25s7JtJQ+4WN&9uFM!LTDf9e18S8TF|5?smL3> z>&XhyPw}k;#~BokelVqP&`q|3Fl0m0Z8vj&DDL0**Lz6JP9Xl{Mo4bdoGc3Erdx4&z*R zf;C|xR%IS^RhjZjn}4B+>j-FccMAw`oB3!HHB<|}`0Jy$LcS$48-%YK-v0o;;I7(# zNL0jZf%9uyk3`ou9;!T6lX!4@uF%=>3FH8G2ORwU(|6Fw1^WbRJT>v!NNu_%H3L#0 zo!g%SRYJcuAz6kWH&)4j8dP(V%tIFF_f-%xG*ja;kUm@A!hdv7-_iJr_)bbc=7 zzXq#$`0DKWt49sRM;qWghoi_c@FJtuIIVPV+Sl09P<^;O#psqNbR0gbr|R&V%-vfz z#>YkNSIwFM6Mw*y^JVpkg^(wSlx&0QBw56_`?l=f?d!XHcZ+X(drM2Z&>wkPsLH;x zRy-y#<8qwEKQK)ZmniGBSs_sxh=~`-gWfk4YCKGoL?)5LLrM(?;bGqi+Z2|_#6X^W zMu7dNh~d(Ea=eau9?;PNSCFyD1y^ez5xBH?h))MiWq*_k&4`(aZcO@Y-A3jSGopx( z*J^1B;)@_VUk`?Q0mmcz2|5C<`~@qY;c%R8{GJBAN_OfP21>nthFHcQOm3jwtQO9~ zg^uRRQ%5N+XG2lERs(5?!j9-|2^%QPT?@CDr|2{E8NkIu;(itBqLM42sz9$R$Phk9w3>2-41bDT1M_wZC?oIjYaryE^t@OjT!VZL zhjpJi_Yhv6WCO2{>pwfjA5UGz!3OD!06l1vd?aq<)5-WpETu;Cg7(5zh-?!465~Q4 znA_73deC^FrtS33cPG-+PV*r{go(c%68uvq#UF7wTbHBtR*|cJd@9a(=9=RTVhNhl ztbfqWo6AL`c%RQN06kE1;-yRhGC4b5ACjdh)D&=T%Dn`r$fHsJw7f7s=S$i}Ib5YA z)W^g{`#C!kE@>8Q<5r%8yt7R9c=L*fKonc|Ie)+wjml|w8@j)^eDv6f24Sc; z2$$WXiSCx;N4Si?N4jS|k3)Mcnx8h}KO`KCL~ndiE{?`S{BlYK#MaL%uPj1n%zrT$ zpoMD3H1;RV2A5>153uahxEb$>Aq?tHuSvlf9UH}f`d{k!{c z8)fHf)+c1C3jFm>u$NmNU}N{(22lq@|KzyuQlA6z*z4!+ZuC3S=Yaa#AlYodBd5{s zG*49K~QGby*>R5)rZ z;|gLcsWWq|SUDV)zcRr2ssZZ)*P2Qejf`7ZDpHN_+$ zCf46SGBPMJ6u9SfDQ23wD8MJ7LXHo6SiVsMzQU33Nw15JZ~(9$k+BWeIO<3`F|CK1P2j-ypUF~v+gkGfWzhY6{vnYw@7 zTj$<$e&1OxO<7t{G)>!W__OyGf1i1to7V=oF8*?f+vuSKKb_`hSby*{McYZi49mEY zOslgqm?M)g!VbMB;o%vXs@s(F5EXPrnP^4IW@m4igvRNcNE+oPSH^q6WQCg0^T~lbxTE zkpby>(o8a+u>P*F0hWB_cXR*gh|7Q+ysmn1{z_l}o6-x=4>&<_f~?bKmOwc$deAmV zZAYxgb~8E}_^C$v4$@eNHX>{%^H?wZi@5PXr}`Q&IP>ij`~*3d=VZEXKte>Yv`0cb z4qM43H;N!c`hTw2OD@rC??bb&9)MoMc<~+VsSCZ;XMp+ksxO&F96bXz%H{RvBc-Cfh%f{Xu!bUBg5$W<^sFREWP%Jyjg5wyj&A?vz|X?G6scSuio|5a@9N0i z59;~_Z7uK^8Z?Y~sYJl`;a%L;{ejvZq(yu)US)p_x=1WO*||s9zmd{j}9Ti}+S6QFP!ld4g)YLN(TL^P!@gX5 zgE;sR>mzQ8w#23rExOaSSzjfUafXrxs0HSBhkw#t8Z04;$&$T9v(C6sMK&iQ;sufN!9Z@Yoil`{X!Z+J+BDz0%@#doX zM}M-giTg*>^&9Yr>G!-zq{PzQ_tPC`l8?8v*LLYMPVOq=OdYqO5SZuSrBdbWjtG** zhQ(@>nzX!xyc|t-E@VLtlT-+GzXb+n6r1@Cbu@O3GFgwV>?^Y~?;&o?D^MqDASI0> zuikC3lH(~NCbV4Aq8$PwoP;505_04$A%8R<&60ZrBx6eNp&c$T{DfBJb#zY`M&mRQ zy71NP$-_-h1r6{G-0Enp?Kvm#ItJxwc^Wv9!R=1oneGQ$A+T&$O_nxSn+r@DWF$#R zr{oZ%*OhAXON+VkN@M3!U|zz4&pcrknYeFLq2eqcbC0EI z)diX|O(~-ghZC?ei3QzvYsyLrp9lrUppTd^#No^2NMB#VWV*sm#=9Ge8!Ib{inxku zVX$=qE~rGyoBhm~X8yS#cL1*qi1-P-CHwX9E2rRlW_V#Ip^5#v)y~_RwtqYf;fU3a zLtfy|5Xl=qoQ6)%29QB|+4+EGj(88V31!iGA1yh$NSau7rf+Q1e?n*L~NC(%Tjp^&Edu<#MZ)ct0 z@#{f&hIF5PYkGmSRHfYv;mrCdC$}-z27c(*A)6}9b%FeSb`UU|q>~IFS2?;S7 zalnjq5r5R&DWr7{T8VIIM8dXcAcFJQNJMY|m_zbfaXa)Do~>Zs)f1^)V$%K_&I{{j zFbPdWX8zVYfY#WD_T8gjp*{MJqS9gns}ScN%<@giIGnW#QiQR;P<*=W#owyRQ1s+> zHw-dpExRXtGgi(U=U8tyr|4Uax-L_sF0z0-+tpj36Z)ldjpwTEodPe`VSFSFKU;e zW(5v;6?$GLL#M<+A$-p_X5_Y(=#w+|(eNIZg81_rEJ^qg4nMJsh28ZPV)4Li}PIWdLqShd1Ojta$4j@_o==K z@rkMG$YjregpHBOTPTVe>+iERVE($Lf4;$i3xZx*xO~xy#VePrTJ5)H%DAcHUwmoW z^ocVjJ?%aD1&W$TJw?r+CQ(mQGbu0X8EO{gO^u-@Q_oUksVUSrYAQ9JdXbtyy+lo; zo~Nc$BdPurOAVkNqaLT^l!Ef0o}h+MeW_v8aB2iKj^u>uN2N;oNpAPqA)P1vf241k zY=mr!>;k=%zS=K^>BD@~Ul_1p;HZHOgFFT`3?4T4y2qX&{zDpvDu$|uJuz&@@czR~ zhIfvbJ7UAg=_8w28JqvBBw$sLheHN-hr})c@wU_py$7@Vl)fA`Au$j-B z35ryjFEHiv1&mlrdpI;;N9*k3l6na^7D~l(#}bySGZk)yY%m(NTXDDZ-}2P3=%mHq zeyTxu!`ub+aGq~96}8DV%L@0EfVr|oRlm3C&FWSL0lgiM7dSx!oFdi_f0C7MFddc) zum|?TA=5ryD791xCCpaZ7x*&$E(ZIFMeIp@MTS$|h) z6Xy#XArbtAjb@XEK+-bRfAm?X(AC7CCvmeJM`8$Fa zLQDnh0Eo6DFiIuNpp zv)dStU!|q?h6nNe5+p@GIL5MuMw5^T44y^*LD{A`Ib(`8WXwZQe;vY`1e6WV@OD#? zU7oTK-YPbi3MHf)+GPTb{_$TDOP;x)928|xRBA0jKRP_*0zJX`uSeB4#C2LefW4sD z3-7^h?m;oqX#d=*YoC9v3L;%| z-iG$tCE~$*QZ&Iaf0s4HRgv^mn-n&#nuk>A#ZS6UZcO3w;td&G45Wi0PA)!4qp?Wx z)4kiXPfRUUeOLG82XLGDWbS*|Ly5C+54#VUtviI0qo6>8=x?fD-ZW!@H}0>(D!;95! zGYM)^^_dT=f4-eQ1U1HT&fB?9ZcNsOj)A|Z_)W3OscL*7|le;-JYhvP8324`YFq`-sFiy!sa z-+Wtj=UT-*5STKZVBoZ%;g!1htv(9^1J^FkS_8~vJm?*?qzcfi&(ToTk#o0BegzB~ zbP`iosx^`ORYE}t6p_I#fkF!zmp&1r5@DD4-!3}*QR;Zw@g!Sb>H3l>*F(C}xttEh zsj_C;e~zBLa0ER;UgkwR^PInE3ycQHQ{-ErK`DmP@1lB{i$0YCI1Oz(dhg6oS^GV3etJDxG84u`_QY zuU*AxVh^HJ@8AEd<1{dzeiw-6&rHFO2YIRde!(W>y3zN?=FX2S2pft zPYXIjru4$MQnV9&z@k|+dIF973ibKK=PG_ug@5=X*7?0y7~(oC9}-3*ba9b1_#e>4 ze@(ITA+FEptEUp@=V2SPbPOg z_B-$gQJw52{a#z%>U1uf%ThJd2T(03V9s+1X;XojLU$p9wcT2Dm{7zp8Yy>#VM#7z zn)1kDhTDHY*9c+Eud~qY_hX1khVHblg5%jQAS9dwhgi%tK$YcWpnNhp(7B<9qNZeEBVa8RmSV9uCt*}8Tt1ncPn%jvrU@rX( zSc>H{SKz@UDCy9HgkVsPT^!@)f0!T?!WMN{t>?hqOt16drcICli9!OT!6ry^k*=M- zSffkjxlF!5WlYqDas}#T^P+u$nTQ8>qeVr4=6!|+s!red;^3!b?3s6;AsV6XC*&7H z@dN%igqq~NTxK%mb9v5tpAyG)#LZkP&A;Pe?Jy^NEN?lb4lQ~$TE4lHMUe|j;)H@1;?1nJ(q7H>6>#$ zXPGKstFi#J6&9;twkX|p?zA24ax0A^RQ!o`OF83`@@Q_JOW8Jp?;o4QNSrCd$H{nU zh_kG?=GOnedg$+w#Q{_!L&xY)T>Cd3a;p^BMZBBD^4{+(H4 z6ZsS_i40<$YY-8=yjL3bBd@Z(Xew-jMkq2h@K%oKv)0YJ4RXU~E_XCAkpx7u`2aM7 z;%ng$+=n+fVm4)w^h;YyYyuRT%LxWa3=yLT-h7%AT@`;Mxiwc@2d1glfX^ZRlB8)4 zL_bVZBmI8)Z)s{Yf5hqwW`QE5cR;VW2lNVba6$=*xRg=TzPgeIx44r^lJOFD%@66m^6*Iso z<1!%^@)daGz3GTSk0BZjKx~7nw^AD%qg{=)LF$Mg{>s+1f2-vzJn~nuu-u&D@>j>J zlClbTUYo7L+ni~hA~E?U3lu8aPeXIBy;|Ucuntz6)vnv$C#5M3N38Q_d11PR+XmHO zE-ZBop-ZA4+NS+dF;<+;qDVCNV)r{jqd@AD$i)#uuh;~uNXqr`a$&D&OJ+`Hn>Zf7{S2NP+s0#i81&Das*MBPIkgl!mxkb0^e+qDN?j1N=UdqR74;l7!?V z3Xfm=N>4RB$lxy-(qFXVHMXLuVgD7uy(L6)tBJvi0)KO+;96{q0%_MO(>prSRT@rb z(BKSbg#2YOi!TQYF{``Iz;>m(bE3IdNNh2%K?rqGe`hz8b0u2~wH1p&Ltbgn=i@Nv z6!K^WafoKH{>h`~pc0BhzIJ{uH)or*mE=EbnY9dAM63L&6D%15amot!MaDzqQd>Vl zQuItC8t~oeX33X7ppnF896)#2dT52FEw!n|39y+N7mNpwkDgO;Hc@#%x3dE}na1p< z=*;y6e~VxGWc4>li6|ud@#30uQ|pw-WA~f);RJK$)stiKFrOELGAdGbcGc}{-X8(E z$|EN~F02OTKu5}ol!C<(t5uO}qxn!S!^DA}*PA#a=$V3Is8fs0*bCE7sz}wf5k?NzTmZ}6)Tm`j2?$00jI!{vKKpN z?eyvPuL7p1u&_u)0w(PGgk20HFBMlxMYY3|HJ6h2S{Op^`h1fqCtv9tr^k*%=$j=4hht!v{NOKZgb ze{6uWzYO#Ae*}XXNi<)HLs>Xzyb}LOs{{r)}5+Soxt-v7&WT3>FaeHNtcEde}&ZNS$QI2THv*O&N_Tl-m7UwhKOW&v0yGK zR(9+=w*3S!hwTxsq-$}%C_h!w>%md0U^xWt%KzBPmzu1=yiwiJP@iYpybS!ZUpT$! z3p5h3gm=c?4ZJpPZAj+kC{-^?@hRK&FZL3%eg#`%$5{&d`exm&3XjRy}zPy1s;O~@JxK{xpq7fDNY@2cwz4oQMD2^c{)T158P|E=+GNRjTR2Cln zD&P@}_l;%W5QD(nLj$g@+nrRWEGSafXo~mLA?XRY&s>{#WEz%^_Z}Nre;x8hyb^hC zV-p%Swq{gCHz(IZ7jydJJJ)*-hb&vNGRSw6a>jDDF{?YQDXTTDT@As^>?uno&0cZ* zgAY$%xz*(wqkvUGDDb2NP^%R6AfCmwbipziY3yE%_ z%z5GU#j(M`q5cp@+9bnne<4*i1Jk^{e&-H#Sypbie%bttCn$kD?sO8gHWHZbwPnVr>Wc=Ma8ipH+f{{rUiw%1SgqIJ7|f8F@wFDZ17#Q|=VOM44pbI5HHxP;!mC>5K;wd~DAG=iKzDi9Bj zNLPlvq{cJgRmQ&xk4F=)-Z+T*A6K401Iy4XXkl=hb1fU|SA+Uq=t8yaAF1}w=rV*`9cMPX416h#YVk{rKZ|cFEPB(1trwF&WJ# zdm^t(_shvL8jU6cA^Qzn1lbrD&@OXw|Kh&gCk~%F2cI)Y`oi&vc+^Zhd`U!yp}eiF zY4`TbngqQGNK8iM&U5eX?gr+=ohug2kDZA};z26Hj_V5w47re_5c|;{B#U!xczX@n zQcmOWihlM19}iRx=sT@`P=8zLpg|P%Kb68+c9)@M1rwLutpp4UFbZXEWN%_>3O6*D zp!x(S21`>?QCU-$_+|y33T}06Vr6o3X=iSijQa#Umt-IX5trg;1%47YGaxV^Qa(Nk zWo~3|VrmLEGne7(1T}v!ATS_OK0b4Fa%Ev{3V58YSqWHE*S0<(l5?t7LGP(x?Fm|~ zL!GTN73X>R(QFrIBHxXnh-aL=$P&z-_E z7X=4~L`Haq*{pvF-su?@L{UkLRxgMR^4Pj&VO;ReZEF{Wcsj0I9O|`xNtpN2aG#A4 zzV?xuRz&%)j1F*fSQQiKzQt+U2h&H)=s$keg!tJL-<>mQ@|39q%=S`&`$YXHY63Na za-`N#i>cYvMCx5?JGGu#Ld~HjQ6s4h)KY3LHJKVkZKQveQB$b*D0^x-HJaK)t)Qk+ zo2ix52b2Rfof=1Np;lAxQ(LJu)Iw?|HJ;i=t)&)GvnXHcZxl-%NK*H z2i+U&G5FKJrLrqn{8q$}sYA-GMp^B$e%D$vbkxw3Lw|c)`F7RY?ZXxh^L%IKJK^u_ z5CVu<+RWPEhMt-qQ z#Lw+o&Sn(KbK@WuwyKK$r<~*Z{JjF+@05@_=2M8jYpz9Px@el#&%Crob4bHH_ z3@T15hAhxnS2w6CIV0^N-vN;j1>3=2m~ej_iWH@uXe$22%4K-qk|n@|#TS4yC#xzS z>KH>*ab$EvVt{L_SLefypYt>vS-o&gXsEo6nI_C$Dvc~m!6#?#<(mBmvPGP zBzRPkxgULHcbcOVm(VUUSVgwlsy+m@1dkSI70_8FgTqp^f_`!P$occdJ63Zz_TPV9 zIp8S5${R%R5cxb7^L_Z?Y;a0u1jv|>@@Rv;qOAVHvib>FIsuDuKRo!S zF=!AP-h}!V6eNN?Ekl_s=hC8rZASyMW@-l-gGPSVc`f$@#5PG^M_M2cZ^!?QC7(LC ze{@4t1=a${n+d3!AqCb7m>p8&hd_S^z6KRNxO?VROHM!g~q zH1Lc;1pII@KaICxb8@q?U^i1DgLn>qBaz{`<_(hUpDLSBA7GF~f?I#P&C*g73P`bz z%ZE}9{Uj+vo6Q3x$(V_8#sdkQ{e-+6JfBK#;D;LoLLPo7=HYG}0?Qk4g!>W90-Bg>w1Dq9` zg55$qTw+~;>B+cc122CyAkRa>qZ+S?(H#N2S2^ZQ`|NYlZ6T|&#Nu(7#RI<|g$A8H zVrVi-SJP;Gp1F};mYQ=!%Kt#ybzf$QdS&j44)$;kcLHbds19!q*`INQ(BMq&!K$X} z=EH_#&;cFc^;?)f<^}rtp}33VZ?naf^@r{W;u9#}3Na7>f#82A;sh&ggOS+%s z%Ch8nU|kA%Wm13sFs+A<=O&qSf>1J?z(v^FbJ!j#?Y1K;F#FA=Im*~InrQJ)d`_dd zYfIN0wgmDL)0E1@6mIJR@BJ%|ybspc8QbFND)3WQ)v@H5!lyx$#NzjAW%W z6;H$#i-rR;18+Qz8c-!#e(u}Hh*^&3>!qqxRay}+rI3G9F706eb}*v%4g9bML3bM- zictxk&i2UYY`T5xvD7_;yMvM0Q^GgP_rAw(?%a^PWvlc8jmHXd{E0T*P1^1Gry^^| zSF=?Ijy7Ke=EkKNB$enzv*!3X7a#SP%1S{6sdg#$C6W?>Li1{ffhONwos)vp* z@o;Q0ZX|zELl#k^iR=zO`g4^=o|l-UNK02py~j7cacB+NjNe0(@G>bL@hjIOSNxt=YDPIJtuS`=0w4EPJExi?K(GM41R(J5A%!=bU&97Vygu+dvAuCMVVos46SCj( z$I)our)>x7tEG7HzbmQ>Q9cXtkiIL_YpugBUts30en_?``Rt2ZUv$jbBxvVigHTaK zMx-!^?p*usD>1U?N3f{B5f4P>k_Sf)A1Z&z%~Wc**p!SoNMu6GWAwFU<@#2)I*0jF zH`{Qy&uqUt_}c4L>{p+JYB)<0`x042G`&!fzgM95C%FViw5J}O7obGfe-abGFR^H) z1Pw&}ZoPOq{2?AG?H2deu(JQ573avvf_uN$Avr2yk*){WpCrf*u*k&~uo<@d{b_%v zji`Pvaf-;RLEN?6WEMm5xTtw}IbqG%9=C`}p3u*V0zZ&8AYFjugM`2_+&GjZ=?T~f z37P{H>&oy@ra=;fqRqP>^scYCH~7y9|3u{$_Xv#CA<^|~NK8_9HAx)!ya7?)Wu<2( zr$Pi1P@SNwt|+N%@;A7ybak|k;*@_cBzVN17^%O)kQ5{AR)>~fx><*k>O^oBrQT{h zD@F^hvH|L_TG$KK*||BnEn)jJs)2cS?dr{aaeKn`(xL)m#SvAeJR<|*nb^X_vZB)5 zs?x+p*SPJOZq8g-+0IfYV8$$5`k|BFry^P!8J6l#^xIt*P#L!+!F?wDiL|Lz*XDvZ9p?q~I9zvo=LR3A}g4Ed2H6rLl zX`N!k^RrB{o*{?$cut{ANs)t+7_oFse11^A3*m@OfZg_O%|U9p^gv)$=4DxX%8dkA z#_SArp7dVO%@c`SW}%YUeI_1KW2D%Ej)&yJY?Z3KjMHlK3$@zA?(KgHy`b5Lu6^7Q z^mp8^Qkt4&pO*;%IZhRDfT^!+`4;uj&JNDvRH-@g9AHX*uLdRuF8G0eGU3yl?fqjp zC3-CBk$n?+x(olmT)6nnlB-dMG$ZOTpmyURlB?%``o4b1;6y$MeZ$_=eRmq}Gtcng zFYs6n-};MmJ!4|;AJTsn0X?`K4U&8YMz5UII)7p!mceS+(c;zWbtPwpU7Zh$J5(l(crYx$yc#iBZKJ@Vti1x1oW!>YIUw^59omTiWCYw8jI(8 z3wkXon>Lvkwl|GvmQM85bu_F&jMfTzHr9y8qSXNsfX(#M058wwaKD5!K%&tjElk;r`Xe#PXffKtce8a7wSGaN5&k}PQTnEeIz5NS z;kCq~eUzI{vbXg2>^%j=#O|MiCIQx!ncDqQo}zn#N@~=&dJ$YiPcMp50#C|&vC}a) z&s;up@c~*;g=c?wYPqZ=Ra)UIDiBK~P&8E`PfFu_?6;jR&*gfeanC9`O`C7k8tL0R4Bxr1}Ek!S0`6`0y&j&>4_#<)G)~;FXubd>>RPu|^hgCIb z0+d4o>{gU#s*)j$=`N*xAmLrk(@)Z@MijJ?LH;!pSUu@?h5YABX{dsN3QcZS9hpmR zP!(2$KkR?W_rw})Pw9U7NQ{#CXY4+8-Yu@$D49zv>Jl;(Fqb&LYWkKs*;8P!r##t~ z3-^=UCJg>N8Ch_fJSv>FmFMk~_EhNP3VsN&F6+=2Z1t(e!sgcvx;yC{oghFkl1+-- zNQi@EMMh={X%MtlxG$SA%Zig>dB3nrVw3llyAb01=rR;e)RktGUIyq(t~%`7<88< zCF{^x0dGHo_YUxfkRJ3%uO3SJ9hp2`kv4xGXIYIz`iw%-U~8=PdsNkA5j*7$kPMLo ztH2(#vogvZCSkA|g9?(`An~9yo!~5*Gl#;&_88Dzw;01ziKoMD6H1_NKb#v z_Z<{;{Tiu;v(Pd2>G-3QXD#qw5m*tcH7YS|W?Cm># zKg+Y@KVZ>TwBX~jCsb7eyLXcNY$1`5!wTU(I%Qc3L_?}PF(wXwiQBBu$FF}6A|%2i z*OBoT$9#WoAkkbJu}FfpU|n8fb_&R>gMCO7(sN>WloZBOJzVz&UkEzzdoGGdn|vN6 zvWBL*#(JZ%sY!oPAf>Qe7t*Gz?-7A=g+>O6keDHpC9GaxW&2oGB%BjkLr!*ajc~n( z+#ZrlR5OwC3aFIF*EYH}xi^2h1$qa12l#{qd%4>w$VbiU98#i%qnJIydJ?meatMfJ z1x0FYO?_>>zOL5K;9u*fiy-??gVeNyaN!6^$k=jn-7%;aX03r_ZD@mldSu}I-m|?R z;YZw6Nu0$OKBuv0lJn}IcrNzSjk=XE4xE=JhA{uv!@gTbE?&yty6Jy^u^IpQmH%`$ zLfmzu;I98EyS{Fq_g<*>ZTGwa)~`F{K_j2x0k)1iV&kOhRV)D`tGKMLxxM1BAbbJ3 zz|vg3Q+sAjxUSvl*yz}{ZQD-Aw(UHzZQD*dwr$(Cjg@z;`OS^*AB>F}byU@LpXU`z zi1!x)v36yBbbXLwHYRqdfYhnG@s(NXkv}eud~hDnwpmAmCw4#vy|4s3oOh)nXay=~cRrf)M?QZfW?F_?Q*NS|kqINw z&Fa~Jiji)MnQpvoH_&|R;hWp}M?C$JqRWc)&z(5&fwKZL^A$8k22-Wr2ES|X@ zDFOS?BIp4LIjC9Gph2GOH?W2YLP3-lGql`u6OP5KMHoN8grSvU6$6sV%6|KCG5T_7 zEdA|`yi-nGQqhAmgnR4lTnekaBJyp8b2?kfGaE%k4im58dYH*W;S+u&>%n#P1jzIJ zBp7kUp)RGr__gg1?_4K~$`B8t$`?VeJ?=i>uh87|TZY*7wzj>ua?wNb?gdKA)5aUo91e*$%>;Ms2H{G{`8WBL zoRTRya%>#oX6v|mQ<}J+p*_Dqy{f?PNn%08O62C*LiwZ%RZADkR{uTk;VZ3I%&yR^+aBf_fGSuhu*}j_ha(~g!FE7qSHTXElQxi9wtYH^RtqAU~C zUR%f+y$Qk~E5j>jE5^57rw&JusR#S(P~dt1i)J%-WH`gnn(&U`Pi##+z+kW#_Ye_i zmv%0ZI|vbcrZ_z{?kNO&wR=$Zkkg!e?e-143niHqH-r}LNifT1*Yc)0+j0t?Q;cBT zv(P0N7sUxb)NrHFz(Fd!i5$EG_J1aC;Zazfr#>k`qaj3bCI3a?Wamo*w>lf>IOvxF+H&RlH$|$B zMt0@+`U+-*mKs>W=QlmrqPRWTrk>xIv-T~$zd&H;?GxJe&^-Nt`P3&oovjTU`|Pbz zi7tqEl}N{T=)Y=OF?e*{pw7u>k&(@G?-yqlmz|=uL_GXK9w?ys$h7a?M;`GUDcOK< zL8ks7`FEmG4k4s83x4VVhBul(a|Sc<<2rP`9@Otk&O+?MdJ$ic&Y`8G@^y%_f`<$3 zbc4E&b1GkUO>|(H`xeWwT> z$`PhE`w6@{Zd7b&MrW8BrCo8$KFmH7j0M{VSgWx2b=mB*7QU*|{5-eqTWkFNvuf>X zj^7h(I8993+GZi|du&B+2tHDzUYlqplTswkW@+xe!nj#&KLe=Q7T~wSS;>+f+G}`; z)Dy%e+P0r~gA>l0=Hd4m=9NCCn^1Z~`cHgnO|{=_m*+m@hH;@jPtNy)Z*L1L7WE^{ z&7uB*@yz~UJidRa+o3AyM0?$lE|TT2-gT~rA1|4dmcL;GngHMDB%j-brQcw6jgj8} zFSNRu0D**MWo2jh-{dJJ&jo}WOj<@nMnWZJ0Ufjko&t(a)YisH)ZEIL37?HVrE(S+ zGv)jogbKj$|BI)1;ytC6T#<*bt@Ap`6Y|IB{v`A%VeRwE1DizrixRHmn>EuVnGq{zm6_ zDwLwF-H`T@jh3c*BT_mGRC5zC$#t;q3E9j4{Tu2QqL@r2mv9iePwbw?SVTNcg1iT! zlCG7kRx8jUl!q`(XJs~U%NRwiMwLLDDq5O&_Q9=Q%`Qulba;dSB47>Jy0f<%5fjLO z*rV|$-6Gv0P(|7ra4-Pf-8CQ$9Dv*dT^)fwV7WPZ)x8PPiA%N_uUG3}#%p|vQ)FUkTJevoTSdG70hTwAGZ&1MInNXM zoUarC1${BtVFqJ7(k_tF!WZ?3k5Dg;ZJZ=c!pSgwI;ucEeGqqpR-X%doQ7UGIhpBY z)hoOmS;mWS!ha5dRE&~djfe43kdC{Y8H<8d4E=W$+$@eh`LP^eU#&%|B{iwwV&q)E zAPw6%?hpgddLPVOtW{|n*xC-VnqBjZE(aKTv5@JMDk_)GkTEU@k^@kyVNh4a7=#1e`)IW-j9_OE2#gxgH=|jETBquiUN0f(FD8Y$qTY0y~ zntSW>lFB-IL%+Ls2xVvf9zC)`h~~X@QvzB0u+rP-jVQLSnm)%8(etl{_)b+W&Z(8l z3-}wdhZ8avSkpCl&Hw_Wc*X-=g%LE}l3PsvoVw?b>nRw(TEi+%J}m{dZzqCr?D#zM z*hRiku8xv=iyy}FdhE9$uWOX2?DC=zi<3f&fE@(0isHPFlKJ8+9Hn-wpUTxXv~=>@ z>{0N3<8$8XBU)8%B|C#^!aq3Ai-BukxZE*<*Ai&EuCP<2-)oLn65lKNao*9UWcsME zlXtDWP6^on5Tijbt6x^IF~6(?z>IzwwT`v~?>B(Bq_fP65Z!>#_S4zD4@{Ss*syTy za%)Z6u5WcTQ(`v>P`{v&mNp3|8qo{^B{Ti&tY!y#eubEJpJnACPdoX`H}Xr8vY}4} z{XGAuLi>~Q)>yH~KY~T6+DFTuqNTKCMLCa-nM1e+U^|)Hjd1Hr0)$xl#gXHfzv0HYM4+1c$K zM^E~R9wy9a)w&<95{*@|!a?nj_Nq}C)%a3WbQ3NNaBIw=*J$%I>asvu$|C1_IjacY zb+bhWgYR7qVN?to@JXuBmbX(bt!b8P2};@|j!1JnUeln4xq*6ow1aN2vx9!Vg|dS# z!TX@e^yl{K>?(H4;4-zTPM#Crhh^k z9pz*fuvbey;@GHNyUZ2Q%tZ_N*aUyC-p;(SY`!|>JWlknB=**B{kN5>XVd+@5|p(j zCe515^lc@rhG7ET$pgBj zZ1>UIqUTrGk7J@L(QHg(o-^N7_J1D#;3uUfzF+JA(d*qz&#_oQ)8{q{q)aaTw8AEL zfG-G~=AD|?{%Ijk>d8w4l&mM%_wvu^UHp$%sUR_u<&hq7AcJiN?z+{){JOLHdRgNM4?-a3DIQT0cSiwY&6-B=Gn`Y}F&ytgVJ-t!jb zJL=uDFefWudc6w@_9-FZRe}-aT>;LGa+JgqMYEtC#`AR1)64V0IIeZpxeHK5Y31k7 z{4wi`LtR+X09BxIN&&v7$eaYlyOKi}84}2YDWg?R=&p8CkI{oD)l(KSWoC~YJ;qTW zyJ*I25yi;E!-^@$(d^xRUjBrJ(<-uZ@i^cExeFns^JxMmJCHUxa!CFbi;Rmw+y~d| zKm3Xwr<+(dZ<@MnYNXiH;sFTY*5Zi)o4~WeSB|tG=m3|oH~MYQK$I|}^i(8pRh2Ee ze+8|IAWef?hb}plKvPJ`K+Cg9w#l9Nh618hE2&e^E-}3V^Udr(J`?~Af|}1mn!d{z zPmn>>_q_t~{ik3M+2v-MREc`~%K3H`akmUTj1;>!!Dx4LpjIwd??gMKhlhyYL1Yah+e56$U>IA%($-l*j?4jMGzx3MZm>J6^PaO znQ8usyIy$|%SlcjuQOW^*n36M?O}r7YZXE~Z~!7YSjN3AoV4fNqcYEC7vY1fi;`!i zGqfaoW*8I=^?0k}`x3zBNE`lr5P6Y1|-$&-r z##qKd3uRbuk@m67?LbWB6l&2+jEPzG~)kCm!_WJC`Q%Zk6WeEFKIj zDWDftcnoyiv_`U&p#cwyeG9qS>Cs*Px{!8(X%;d?{>jQ;sURC=nd^Bg&!K4d^BH`=2~ zL?u(Yo|ypTY9KfVOTq}}Fn4)z91!iQpUHPtbh{26X}7vcBc;MyZN{MHVduNHtgJj! zzy8_j?g7ZsRG*xVy%VIRAIr1Jn0WB$i^e#hlte+1|49!97R^lvyGPU%8jZG9h%m@$FX8y7Hr|QH6E!b z&E1}66%4ghGm2~40lK#*LdfiXf${W=>C(ho0{|?VP!h2D@!vmmkATMrs1InR#S`bH z2g#$QM=3m$O*3H4{nTL-qXp7bB}#LB37NA;xHdfJ-z@KfYnBCX=)1M{h8PnzL5C!h z<9AION6MhHnFx~$xM*w{dmuYy*uGqW+b*K4$#oyeHtVtIbGQt@8~$fOmN)CWm3ot5 zF`%V#pfw_o;~Nh+_>@E~XG`p-ak0-0_YjP6C+y>ttmy4`mS|R0sI2$~EMlgZl(M(8 zrG#m_>#%_(;Ui(D!H3|Y%Fo4Kc9~o<>H)biafy`>JnbOD=`sFu#rOd$W`yI%_uI?6i7);4TE%>1H|ciz3yy60ec&d z?dN9?#+SpH&uv|&me;64?FGuRM;~2WU%c1`yF{8AH;p078uTtXAU66d|1LBYvBRid z3J6Ma14#q-4)|zspsk|D)mW34Op;IMl*%?j4++Cv7njl0lov%CTgo!4cy#?LFGH7qmanSJVQ7?FmZ}5Q zmFKJil&dJoZ1|M%o6*_*-w`!>c`gl*7#=5Gf zXi5BaK_gB%ILU2LRM52_0UU!Q2E0mOtA-wl2|dIeN`^5P&mwOWT8809gh4FB`1=Gjs0vI5`#^-~ev0o&R z=~8Z`El7E1*xu)DW?t<1{QHvILQO&Bl0wR%S|Gi7f`1o^?6^LQwY(We zc2PO$2oW>m5??Ru62M=jt{-JuNFQ&G5>{@E7U%5kT-4w1;(N1})=Ob-v3ld!m6IB{ zMR0_!Xi9=Jk}!Z}$6s>vN2Z($N8u5XWS!|3DMZHBIyAO8Mwzv4pTPVtxw(%{_mbOL zW%lrBf)*a)0RT?BAWuS(_J=N6YpZ>(vw0x^$=yQ*Uzkc%xmQ&_Pbb9SDh)WAEojde zEu|C@1u>)4xq-n^k9!_HO%D_fvQRQx90E=_ogJo4l^`D1U_%=wkKwwOamV~}GtFz` z%qMSRfY4%B0Ssge7@;b#?gkPE6=O3JzPDVjjC)tH(&;M5$Eqo-J@+PS)){~|eI2a+ ztHHrVkjVPEk?s%xCu2p1c?%6NS9&6UPvHN2mdDQ?`kSJ7TAZWR?{FIC;<^jXeB`S- zcAua_0PgeFvq`PazWWG?_mAo~;j-2WsHWO9fUD{XQ24vsIP9|qh1D<1jo`-pQl-UQ z-fTN|zfZR)BP^9OpmW_UeT$2>m-QAT+bQ$iJfAzBc!cx7oqV)2VBfcW)iFj|Vbt~{ zTVCaZzzdFTK#@hH#WkR)+0pu5ynCx$SqL<@?lm7$8}@n5EjNsvP#T2ILk7e)?tqjh zCNwM@U|nR<9iS7Fr=lh6B!+#XSOJnPODxf+$6G?o^qk4Q?q0Fjopp&>u9U!%DQ_6&zMf@hZ$Ew0q20ECNlzD~rL9A<+%8~?=gMP3e1@}d&;Bvo z_u=0Wp=YBfv=CQ|BiJ)aj=tKr_E6Z6$lRy_kWh_w(*UiJ6jyLGS`<- zaOQv`Tr%O1STKf7L4ag{LeZ>v55&X`FgQT~&*edYyj@F;Y>0d@P-rc^!`X-N*E>j{ zKcWW}Iyw55oSFJo65xs?F(j)bC?24N)&1fpn0WoOG-(vJ$}|VxoZD|rsTV@!!D43% zSUJrOc*(4f%!D7P1ur)|4Y)$E9Eh6qgf}o>nMX=A6i3vz@4jgG+k4RSA&&i{n(B)gnKm?;2y0q)`1y>9@jq*EkiM`77udK3(14}B}j9{|n zE6jMAYmqzGV9e2CY+RPo)FTS|t^%DI0BDoyg>UaB4KZZe#~k`|Xd{mYX%lNkRJm2r z2~9H=D&`&@&0Cl{E7ZKa>i?P?4Hv({5AHTWp}ciytRFT?E_ED}aH-v+Ce}m?mqtW% zK88JUvXaIwbKeB)rFD{^7oFZB6{_b1DHiO69l~==unwC?wE-`>Bg}x5M*~2MY~>j) zzv0>ZfhFK0uDZZ2PHS~`gN{zaxXfw5KO83kt{W5?34HemHJ zHaSWDWBnt32N(pGgPD$eZ2VKvX(WvEKt42vJDANSC8gSjZ08bccldQ= zi9I^Gf4o-i`m^AS@4hi>yK(yIcn5#m-`s!TGy_ib#wo`rC8=Vp*)ag}$X(Mm`)=4g zmp~YoE$%5f?Tq6|0KoIf?H!zlEqN^Bcyr%c?WH7Oc@om67P$#8s;syt)l9m|^YkUh zWY?6pL@UKxQ~EXvIk6ErQ3S!H()Af%6!@$`n8f{`DUCYi%Xk;!DSOu3EFLLVl+C}( zK!O5KbOSkC0L@doM52ff{o+W&IyLFnfbsPdLP9#JovaH5EdXg_Vy1eS#xv%29cpB3 zq731*et;Mn6gwn>(mZ%gOAL#G7E#b`)A>`Z1n%(AqA_;#aPY8XAhMa{X#DY9)|vGL zz9G2D1}-vOR#H)KZ=~CDjZ1X^huaql`|HZutE@m}F7k6m0J|~#mepFBe#x2YFA}MN z`w*{M5kXBM1|YrVsYlecxre_QBW8KN*ZvCa+v7v$gw04aU{9w%1g{rugQeY3SVH=U zv#aj5C;M&4l?rZ|_+mY?;Kb}3x!$iG{s{=kT$5aypo_qQ&N-7*F`-yiBE(31-^Em@ z=wv0d8KcKut-KcZ9S^}W>2x;woDjpJHa*0%WLlR?8KB}+3N+=&9#0Ks%ji(l&-h%d z9Yq7XXl*>|(X1unxo(c5Ql@L_W~GIOhSjLa;m8>YPB#^^NP^5?O`cp|o;W=6`zu#B zA|xayCqyh_yElM_23%J-*raOXMG_4@!q@?F>HrUe6dL-_IelV=oJDw;Vx%D3)riuH z$bk@%3NZNGAbSyT9c4R8`cIe;qi^{;1y;!bmL!_nBwig3Ai%Jy(LRX}qvvlaXbV&m!&v?jLiJl^JT9=qF= zHse}9%cxw@MS&IyZJ}gijDus4RENhG9C%4pm;@#)C}|x%LHo<_y4lxgbb{=`D5al-Zmd)0&D$PAW1&57#XCkvrKsgdi&1(RhexjZcsBD#z;{$ zla^UYJ9p}M{A?pKZnGNpJ9|*l-r?_gf$`s;ueQ9q$|Aa?Bj@^pp zXI0+yOEB|9S~tHvy^4p@&5azUc1KJ?^c2F^kT5vB&Z~mKIUsqgZ6-iBFjq;`9geR= z!sN+vR}i#UHqvmiN;hDg9SD zQkB+do_qtz14@}W2T=u7x&Mc5Ej@)%aEKLYG?e&TPxnHaid5ZemH$2FjDR9!lt?v2 zgisQ%k4L~qF!>$$O8^8ML7+-QbJ(Jy(b>$panYi2YwpPfudVgj=iPU0>%IB&>-znh zjGI6EIP>4K&bjyYW3@N&0(2*Nn6Sb1Zk@3>xO%jn^@sJ=C=5DDEfBRUb;e|XncVX@MF>EwdsSX890{&Pw^@Vt+ z_+&w5sgE-GVva|cLoS#+Fo}0*v&0cadf-D5vEtpc&UvBi+z}dSN9TTt1==pPr_gG{Y&Gr%ce0grW>$@(cscYftraWM1cgYt8 z7#F4z^JQ^dfNtC5v8ED_Sr37o*7ak>ykvf~H#(p|7w5rZ-%?3O^L;IAnXJnvETb>T zLHz^Yhwyspdar7Vb_#I{K6vGeWHr|IRHjPqRB=SrRfn?#|7bo=W9 zZUU>m>MRpXr!+64Ui!J!BZHd%5Q?`JR@Jv8J5FtG*%^wjtHS?DiR#E+!68p|=~{PA z$5Zz=)|$bejd7B`mnq}Qdj6!0Uy!*|BjP;*+Rr!%t|Fil^YjiL-CIyHweXb8*JT(0 ztWMGPbueSS1q`QP)&Wk!gbQNajHG-Ozc~swnm|W~HkEH$Y(LeRerpuNb(xx9K@3H~ zy|99i5pO%1E`J65PX>d$0y}B?oHIbW;-T(mQ>=WPPxGKT>m_3);Uo~C9IQ*D2keAl zzhWW7ClV)^(K63Mb@@dwg7ki6DLDfJQaP|L^P(5s0-%<9Wa};4P{tOD>6u$2T$BTi ziHinBY$5D*p%81^`HRLEmktDhm2lLsQ4n(wj#e+8uLhH!J%%VDf4&aJWQbX#qE4UbMpyswkz2^`f39IdZV2eW z7yc&cm>Mz~A{B)Aql2rdZB1L3rP%<0@^PVix)X4)1hh&``rVge;wM3nge{2PnVLn4KwjtC~4UV?6JFtHgs1p2M zk`tyW62FzVh-v|sq?L9q6B!K;=u%auw4_m^@DjQeCw0y1{k9;-Za~ zXFuX1@(U@98LRqd7D5CWz$2HnJphg3ltBB1chhU-I zkV}fRm2xshbecEydVz;v-vZP5c9Q}Ay!8SiCG(MR7cxevML>G8t^ zPUsYgm%OT0U4Ss8CPc@&77t=a9?2Kz_v!n*)>o8JA~5w;1l zm0SwEJBeB6A!D}&a45Zcsmm8-hYj%`1E%V1%;>@T*vW#ZnXz6s==3|y%jzSHY{2g} zu_qWup=hHvxuod+ZEoCj9M(!){54g;5P|b`!szVRh1qW=;{v~`26YW-%2f0y%d6};%B;zJa}I@b*!lP0X{d7Kjyr%8Fi&!!J;|K>L5w)GizFv^SZN^YtK6qSGjG7S zf#n9X-N4g>$O@dzmSRqv7r5Xf!z5y}%XjB**sZz&cI@=?H|u0GI?6H0*)5+3$DnQ+ zC^b@Zl+eBuU;$~@WjtGYLi^NxH<$`8R9E5(yg!^*=&^JgXNUfB2*^Kgg&MIRu9N=F zwq^Qla+b^M^`04*B>X1nBJ$Eptp`u?oV$07wF6Mzfsu-3N{aY3vQaW|_fWNkHcFQC zCp-}lmhNeD0h!+lq++JSHl>nM)Mtl0t%~0BvA=c=F>*N!-%qzIz!xL@Dc@btt$alO zPf1DnG!2v2ZoudfcjY%%r2=eww8a!ZQ$dwMlv!Wr9ws}eX-DIWF{18=3uRliqheI* zN-3PVDfe5l$oj1?p;yI-DPeYWXDylo$*LAWg16d?@ow+N^+jq4^j^2Xt5C4thSw)D zc(Ru=Gv<|oHb0$fBr`|wu$ulN>|qCw3YJI+I&3aRuwoW-qCnz>1{eM-#4#ooB8rFc zKH`EQbJggP??W~YE7Bi_-f1&G>dJ;;yd9GA>Fij9kfI#Fb5`u{sOX4SiB)Io5IR4A zeimG6XivaRZCNgQ7!70CXq^!#Zm6>fXj6*Y!9{87fZd+MAG`QEp}R+ z>_UTjCjkF)Wh&SSb##&nzAG;Ou+I*afpr6Ib@U3)+InA29r}pj=ZsuYL%So3` z?Nlrj{*)_4olYY(h2x6HgW-dA&pkBFHGaP^rtx@DCPs>+4p_e zdB`5zyNbQ#b0_c*SMHB5gBFitN}{1_Mb3yykCS#`^wQN=Zb@FY7cmB?5@G4t2w+f9 zpf^DRfJ_^nD*z@dS?;-qV{}$r%Gs~`x%OPfs#)WZ8dqoHu8`ap#Dm1L99OEJzo%jT zfMgOq@km>GA@ktVX>&w`zfcJu@+-X7UPnwl@}ks1M=L5 z5tD+%Exwa0QZx*!W|O>jbiOl#f_8)1pm&&+bXUFb6gZd&oiYKe7>uE+Xo9jB-&~&5 zPp5qLBT_v?{9VbjxnlLW&R4;lGKmEJ$Gp8F=|}4S-Y8H z;U`i=Tr28(g)sqI7U{uiv?*d^kXy)y<|Jh(WhqP=^HW7SeRJM0$;fr70`82ZOBmzz zk!>FIz>eUsAlx41%MKsu{Bp!5GE-nFPoIb$T9&U}dX0W`gq;e_l4b^%L{ve?3kU@TDT%C{RaBg@ zal_OQ0Iq=ERDp-VkII88&VNtz$bVd25|x8>(#_d>pcUJ|-3L-z;*T7GynXy$W~S1t zI51e}Ske!iXeoGW^p=M<53ypR(4x+rmJuD-o6r-zD%8r59$`PZr%Jc5N*9@5dM$=F z4gJo!rNN5R%rk@8-wSQB2kzW>aG=eLv8$F6`%wUi#l)B1&l}|#6k?EaZ{ADf8q9+i?Csnizp+hdvpQ}_47PF36-Q3@8zhz3R3@guX`H5lG21-H+!c3u z``|C;>jaLOHh+_{5;i*~$;b6KC{-vr#yqE(l&^&6Os%oZHsqY*ae zTiQ+Eaglohz(K$XABlALhgys}k@*`C#^i0Txwt+*ER=L5leB`*`CIK4kEo)B$zrPI;;|W9$o<& zY5NK4l|gtktt}2bKN9<>VMq;MGET6Tyu5PEbJ#6FD!50*pFTDURJH5D`v^n|rj%j& z!NjPA7R#-iSr6D%*aR^Y!Y|LrqtMc11bcM3pUsHcY43z+(K$@W4$33-0=2YdN0q?E z7)dLHb|*J0twa|uo^^3J?9{h;_DTVx;;1mYYma+vBA7~?#Qa)o6fb`R3lVM|?AAvR9ir*DBYC%Gg;MFk#Z+l4QFe-1tm99<#s)PU!j~OnN zb*DvQv~^`J@fnBs2>jbO5Ax*$GE5XuUL#~BDwN!`upgaNo_{2vJ+n(a?#a{+YrFtn zJzU!DK)ZOmLdI{zi0>;i@ud>vxK%zXKB^kvOXm;7>q*H`MPxrE#FP8_yHrzyWr|aY z)4Qpni=3wpq8Tuf^n&U62PZ&NQ!cvHWxqG7#3nHF`g3`;!4PXA#OY78S! zX1kc}BH8+>J2FKD!#7qdF?_=H_F$NG@ovhi^(0KcZ8wxr)5nZZ%?mo_V=tkZa36`9jOKyfh>4tSW33N*TE`k^;lB z8A_vwR*3jhib$D=F@D58zIVjp`s}i8abVnfas}b) z4^D$n7Z7)EGi5!+th6L`HbTb^_gM(8&j+VwOD}4p1`Pl&6g08IpWn$ZZ_QOWF?(4V zObD5LG40IhV(suc)D&VgomvGh4r|@K*5%%i$^C^>JOssHG)5?m6VS|1<^^fSUqC1s z6XG;!KQJG}BfQ}xyz%wYH7^eb+BMQ%F+Lk>HbO5zi}-fI$gDQvB7EQWu-fi?8nk2d zTL^w#xC(%%BZRE+mlkN@8tjZrbHIqgMvvaENjCBwH(CSu+d~}Vdw~x!rpg=+a2S#ht{F>GF zceJQ}y7qV5a4f@?qfs_WOX``PizxaKVUX+F><@q*gF$S6fG3VCnl6^*5$*-o2c*}4 zR*s9wN^NV!@pXA3EoRyY|P^(oQ4|Vpqoo6F*LVw0s2ttRjm! zraZkwt9;+1n@%OucUy4bVFxnLKp8c<@>?YKL_ROqEE2zsFX>X=q8S8cW>V3g=H!A2 zNjX6FK`_aAD~%yh2=EoOjVLu&(7TuKJD*#ETMxF7>Xecn8LnNe%nfZyt_LGE?8!l> z1TCS0DTLbreXN9;!yd^;SkqF=ONIfd{z_Ve&A8eB~NlJD_9?G7l2I_dFO*vzZ zbSg@%n}XiNh(bazsqAB^#oBzUP{QrVhDwT|6f!o=NPKm2pOq6AIjHrG+K^Rkc>|#H zNK4=SD|?471SK!qE4A5mL-sGMR61deIe}&tu(Z3iKmkn~Gc_sm>hR;gF!6Amk6X_N zBoF(uKh XWZ7%oQh;x6nrKwqE!mNrJQy*raHM2hVoG6sx`$>}GGDo!mmIRnJRJ8yqaoP=>g!Ekec_jke5S%WFF{M8q9D`IyNc%El z+$1r<)cr!q#pDS|2-k_JIr0|tzOw@aA@5;s9h{@IqlteFSW%B1&wjU;AbV~`q9XLa zulR3JD;`jK4eCJHKEZ`TLqk(RudB(&8c!TMaaO59N5U~GZo}!c4koBos89kF;f-B9 zWVh6E2tDKU|69l(5KGM;XLE#ps1%fa9!EY8-SUuWE^^M5~(q4bJsE&ojxXAhXHPdd8y3QZip14}@Gnrd> zuA7HH+H7Y)Y{h2r$yX(h8{h%Ct+(7$-E^?lqB?0!ZbG|?@L2jnURioP=G6<_6dNO! znd23u=7G-5gPdh1N~SR*p*U_yqo_|BZaV9uo`*4kVjtVH|9RqDi9VKZi2qae27Uv? z8TWyu4K~P4xNS60s2cmjvwFIknhL?epAYN{Hbl79bM+ap3J_T&0yGLpRpWa<<>^-C z;GeUqH*yfocU??OMhMa%tJk#6SyC1=b(T3jiJNq_4+N~cX1g*e>R zFBRv3I@5}_s8gGSiG-Y_DDi>19$Ry%7?laTK)ICiNep@Q+AAs24C+a(*C?qD^|pcp z1erP1oJRe9sq!CC02jHTd41S|U(-a^b}hbKlE9eieyM-da^4g=y1)bAA%CTy{u@}E z%Dhf43zVL5G9>xFKQEmY+m+$U=^a;8F8p-8;3il}n@tUs2!i7**AF!8nX= zCf-r;4iE1IgZ@-Nr7FQGK5H8{oVL8*`5*| z_+zzB;0isT!sV6R!7=q80Pbw4VZuDag=iN-E6|c<60p6bJ@$oc!|*qn&m^F?iXLvY z$m^GDsBJq8n@q`AcdPu`ulHRqtJS~{XL_{ceyG&!dQPx$)MDXZ_m!g%GEMy;Y5_G; zv!_#jl_CWZJF3(f;uDYz(8hMCvZ_qlL50)Aay$M57%y0ijX3_En}6&Ocm#|+T%w_y z<%i{PSOJh9f&N`dP+T*Ftjfi*lA2kGv2kswE9zi$$!X(!+_qz4Ofxh8$Z`V&9$GY8 z_==C)+H7nTFsaVMvCa)B4>=KpSgnri8?Oivba_NNAc2MV ztd%-^ZBp>%UH01!G(-2RFRTY&#${dTyvM0_LIN1WzwUFpN4s~kO06-zeyrewB}O## z{q&tKZ34QmRcr z!O&R$^F01XrLZy3|1WaK!TA4Fk>Y9sf+_;d1l1srzmYiphpqenxI7Mq|7(Oy3BLnD z07R*SYblv7ccZtoUiqmBTy`#Kt8J>B_o)cf!6B28hhL!l4n!199sR?~2n^{-G1!Je zrV_A*X=+)46TT>GZMpsDedhW-n^=5LbNl+8`SrB(xpkWT_?zz-AX`a(j+>a2q|%*a z6D`HcDXVq1cgAU5z8f9j(~{&P4F9R=4`8NV#B*z1E7l)au?0Uph651+q_X-V{Z+5} z+i7iXC!RR6ye@V@?{mrpH-9wcJ>APNBX!X3sTLbBPFokFwnNL%3SqZ`(6PQOh0QY9 z%Yfgb-?{s9RCv_U*U5*d;VD*00Rs;XjOY}GqwV$V5EeidX{~aJgj(xdHI{I?0c6uy zCI`D&f7+>^Y&DLHY@MqHzE*zoU$pBRx8zhP1%8VjkN9e5s7n0i*(`)Mjm&wSs)SrO zk=yv%Dr|P0NaJ?6N>sqT-|_~WrKY~l57DObM*sAi5tUUfge)-r*dK#_?2iRYisNPO z3+)SL7C4Rm9y#ffQF%*Bc=Ge5fVu@R3zGjFkgbZc3osVkjd2deCW_bc8Ko)<)E2)F zMXQQUl>U@WCPFs`dc>p)TjwpwOO3rSc8b8}2O^8DD#A3Ty@bNp713$}s+!y80FD72Q(;5prMD_XI0!ZLJ6_EFpQC7}EtteF}nFtfX7o ztog2EYHxfGfQ=9G4xtipR1JK1C52Ms0%f_D+rG&M9IhYvF`8pyL z47ni5H!gq&<#W_V22v7^UQMpzgmL=eJ!Pzw>eu@1H8R^g15(eVq_9I_t(e2yCWm}% zMGKFLU*ej3X=qtA6>^ZUSkN_BZO7A^eJ%Cqeq>3AOI3x-Yzvp&5^U2K(D4~~gLJ78 zdrM$6VqBS}93udy#WS@=4@~{b_JB+? zI-)4YmX8Zi)KMdBpvEo&t!q{l3)jyD^4_I4v<#Y;m@4dU#FTc++b^>F=-6F{$C`@2pW zR2!hM5ELy>wxN4S;afiS#YN-b{~F#1T5$Wu<}QdyV>4>$6xW{hmpe2rgh-XEI^ z0Lt(g%CH*TtKny=Bq)|9!z~H`t6FMfE44xHmG6SZzM+Mdgfu{L+8@J|qnMGXL?Wa# zU`ur=6p;2RQ98w+V?6*)2qBK;uYp&Ff(E!~4OOe#yYCa#Tpnf?_8$r=1%^M|hci2N z2W9pS%?3i2*ih2fZ({o0#8J%^Ikd`t-B@^dRcgV>K}$m!$&liTCf7H0mnE=kx}&6M>h>LpsWhf5EF6IYY{dIE3>BU zU;~YY6@P|T)jcKNxe+vf*&{vr;sN--K>|2Bp=S(mwXgZUzSo;FTB^BZv-ay({foKEbl zSnZLThk)^9UmLE(t-W#Kzn3QhvHw{iw4V2-qH}DtI_#UA1E^PEHExNxbpTRcxr_}R z&^4%~;rL<5g{H@SnZi-t%0ZY7HG)CG!FR9musWnjE;|9+$7%msKdyDoHL!&d)T&o@ z3=UpKOo9oHfgk=ZWhunHoy$g0KK4msskj!Sza>&x#Ci+q9}DQ@DAHcy-8HAtE@kyW z4fsQ9cxTVyuh2t3B7N~TqX3k_MT^MDN*wN4NMexRmagP%$?oDvWw3&??x+ZU`VsWH zFWfr$VMs>@Da5DAdzk4bkr@?DzaWu!vqJtYp6*&h9mX8YEW`z03}6MA>;WR$PRrXY z%1lfxSNvnY@Ghsj%_MI0l*!E2P4_pT9I+A(p5^!3>VkT*LEohretQp= zkeB;L&c)G?PK|q0!!TVF_1urABF=aKfhDUMoiSZIypT1I^#vq2{#zFt(^#50hTr(Tz}+Q6FAL_qMumg=s=z^vHruLiwi znpEE_cbZF{vGXE+$iCvJL4B|nEio&K+S@zagJtTmW$h=p$}_7u9WC)L(o11i9$Nf!3T1nBKPu1$owlM+DjuM}I(#lR+oGr0@%Y>FKF+W2f@HSB5W$d4q8GnD z<$iIJ$P4jDECM!eNW5>D7ki72Zp>9wlb5x9@P|5k>_-0DEO02ou^{Ym+TdHt(8?Lh zpc-~43|Y_?T2|Sd|B*TThmpbdXJBZ-=l4E;#ejCFVe8qRrG#y)#kS0*iCvbe`Y8l( zwHquHXHk?6rTLj1u;+2^)uJ7`&g`=+zeJ_>0AK_8d;!b60tV*((SYx%X_A>SRw z8I+A!4X752n$BN|9ocHaHLk`t&f!vv`*|mSpYqw{n0EUcJjB)YmKNsI1sss0(+xyV z1k8$r2>=GYyzIBC@|u4ne^JsHvR`w#UndxjOlR}gdoOsv!?XLO!)H+PQ`m@1CTz5D zVHrKmId>MW5gB$#-)9m&vlcXCK*fOLf z7)irphjCAdb~M7>UH~r##C$P?g#iykbU|{NI z%2mo0z$7NgXEw$7ZNEZs+uY3=8oxM^6{9Jq~p%il9?1%F2P4N6^_#@BEE!Le#GjH+Q>i4soeR3SvTH zgluGil2AxGODoe}+nl+rYcB{u1knRh197H_%-w;=MBD{Wv;Fli-Nt!wmHeXl#Wys` z#{RDCf-kHRwE|`qvd$O696J);K*TJvCIC>!N6C*#OD`VA@1cW(nL13I!<>uKZWAD9 zDa@*6F|W^jm~|t7tn2^SZ`;1<4)q~Avd(EH^G0nkU)}EVQEaiLXeHlQn3#tWL^R9= z<`=*S5Qcp#8c!CiUi!%Fj6RG!lh)072X4Unxum1UIPy=D7leL{*afjnZm$)6g$Ja~ zQhwJ(==bQ?BF> zOu9zk?dss@*rb(6G~aZ4XfwXfHJ9AX9hLrO1yvQ!wQGdtEa-IrDC=oY{vOmSdwElTKT)KHluL)%=+Goyp+_!A^g6y12Lo9>ruFI4ixQ^EzO!F2! z*jt6H`3Bw)x{-}$Q7V74LoxTyg=Al8>Zz#GtA#5@P7H_1^NJRs$a(O+js^f6P16fr zh%;qmJFmSzroResjl~ZRN+L(*@Xd4H@Ym4P&mmkXjR zw#D`%+-8Ib+n~oWHclSKT~Iw(3lg49HDtE}bx0F{9a<-E{ZXE%EjQ9i6R>bo2i@6h zX`INH(P*;yJ&zzuY6f0uhGzEnohHKj!+qyMUf05UXX|B}Zk|;7&`dWOK=Sq2_~Hur<3P%ciu6 z2;Y7#b`FjkhhERRIG?iwBnzG9i#06QKet<^GkAP{-&!x9AZpa3pU6MfKI9J>@LVOc z4JXBt@y&VZ1OPf}Zffi#CS{~1aU8shp7({T8LsP`pKS*HbTAxe0)|&of!rPa+lV|y zgy8(p_2Pp5Nb5LM;dpxF{)GfrLps`c`B@vg;o_ym zA0%RlmkX@LUfp3__5I0Jq0w)I@k#mx6@CRYQxyhDF2F_==*y%eRV1BIP${T!vWapk zHHezo;HGH}^GGUo2tsWg+6p{PE>mH~-9qCG%+UKZoE;%e5%EIql0{qvYU+Xah!1aTzQ&zb5}iD_FFQ>3 ztKrnsJ%Fah6SnL_q)<0+S@BWqI`VPubzD-y;h~4#k*b}h-c%YPJn?x94G(dAOQ1oq zbUN24Mt7-z^tYf_g-x=t{KKqZ7ahlR$z>)1Ticb-m^l2n){V0D6Xo#pIB!}iu{T<@ zClo(#-p`?a61yhGY9v8}b(nz;vNGQ;`!?7_Rlq+|0A#RzaTu&Mw&B^5_fzCG9x~kX zqv9zf9LGX&$C%^FW2P{TPIgjq!RRR&0cUBApAQk58HTOnXg=u1gYrs#vMWxAGpmOvRCDlD4q))!xm$|I|=MZHZPc^ zZa|U`47F{juzctpyC!lAbQf`ZvYQc?0?7UG9&nzu<;Y$_2z5k37AFm=q)u5?M-A*d ze@G$J62$45U$(ucf7>c>pRvy#t#-`Iee@iHAoQ8jcPNvIwxk)EQgEvg=f$hmnd?^fj_1o@m@lQosUMgAo6C7Bw=OmN=To z;IFVWfWP!2bkpP!fh@7t1CQ=3uL6}kC5=g?fWP5ItWn4<{s>MBv=3MC&1*mvn5+) zcDtv3-WtRZ1cL)d0MN#0e*9r&sUXj8 z2CiOAFBUI11P{zdcOwBibP|Jm+4(F%C-TOg*XGAy<1y`K8>uThLcx+z#Y1}{ZPC&T zN&A~y#x6l&Lp=wHSX`v855R#Kd@a?X4#9$Y3c~*PdG?!yUmkc;=E(%;fZBD#b{ zjZ82o;-^Uf0NLdRa}$C<=httL$L+h-lgHwXh>d;(V#$B0KCSq)%!xi+GgV)MI3kk` z{qfyxSzVY!8AYn>L>LVn0oQ7~9z&{abLB(<^oSLqOam=5()zI9m&i zJ?K>m&BKX(8v|5W#&~`G%aMJPbjSo9(eU$7z=2fej_&iGXJ5rV9SHKl$q~}QN`w@# z0kE;>u~!35rT%VBjKHne9(`doktP4~X-HhcWE;&a{gR@UzKuK`m1(`)mkk`eTDp9} zC(06X@#V{dkWW295kOItBBYFZ-iuRG^f}I6zAoNBkqC&RqA67aI|nDlpXh2qZk7-Z zY%@NDDpM}D3+C-=C+7KNg_m0ko!jMT0&tOr+n6&)Wt1TYAjBgcR!)kwH zLSBOykI!o@g*9hm%;~yE6%yD13EpnkC{B&M3&(h#V|E_S5fDb$17aSMaVO^g`<7P| z#`foS7m>?X61iS+EC&T;C@@K6S*b!9wrcx?d{_U_R`+sxt-Ci&uj^2?_WcO^6!SpAscBJ#OW)Z&OU9Or(jUh$aP;fN~Ha>wWG@#JNu$|>`x(Wk7h^o6x{ z7mS9)McXwX5CBtZpiiQ`8kwHqEyoih)=$xn!20n@kmCjy(@z|9ci6)>RT>)-=Z1nC z$I!$U;8^b}oz5yPI-TU-l8Nv=Ve^h2NqWaJCIg+xv z&U*JF4lptj%R5>CDnFsirPMx^%V34KJw!h*2Iak_3ZM+?yv@qYZ>(0>Q$jmA&MzD@ zfR^)d-2k7}10K&G0Bcts7I=R>prkdb+q_N)4AW6d#Johi+9oovVI(-g7n4?6-HSqX*~ruFvzijMKvC@+ru zix*0^zSV{439chQ7tIAjIJF{=_QJwQ8`7y>N-Mf0%bNS?s7toFt;+RItsj8d>!a-1 ziR#_Ylj;rsGVHyb!EgH&Myng_(A+~Gt=8mn2dIUVHSPU_@pw2l)D8kTji zSiGRqdHJfjnEvq&Jgarw$Q!a#Yk>>xFok$6kRXy61V)R@ z0f^6+wlL+hP;+yGm!+0dIG0i|an1HvVZx9hmh*G2sR+V|_W^B@&|q+fFa-Iq;Cf{8 zR&aS`4iq%3x@YipJlvXWR24Yyk1BKz*Vr*j3OEGe6y+~gVvrbWu~+993jgkddxP55 z;od+}JGdc*f>_-^Sa+&zubX?-0w%WY1*~E-%=^Ao0eQo_#e8l4#U*ct8D7t1+PTe- z5J=rZYNkh91J7+F5b>h9wq$>gaz#&{`ozQy8dOH}&d8ab7Xhx9anTOpgC0fx_Mp4#`)BY>|?r!j}a(mKSuhqL& z6&OyeFO+D~ZS9%R86J=}jYKD{prIv)xVec7hN82b-_*T4H(GC;H`(0z17g@SEqLAT zs?CkI>IRHqMMRAKvhm_~-M(SDWQUNzaK|U9xnC&?)(R)YeIqrZtM*NVAHq=@K|z@p z0)-!jJVx9`Y~(}Z(R!4W;1yMpbXTWd~b;bFDFcbpVmLn3G@M1GsErih_?g;Jb8JG0F8hhfj9?>|Lm#XnuNGb0I+jSbYkVx(^ zL;^E$M3j;>6nr>Nb{VT3x0UkL$&Aw;E*GmwJT;+(V9Z9%KZ;>50iieB#7pi4?wcJo zg4N;h>c{NVMv9rk50Zy(C-k$VO8<-?e7eoX1s|e z_ANI(f|`myH$XG1{a=Ayp8ujmKv9t=q~{AZ(>*j#7_AMV>?cg;cSQ6Hv8;ypm0^8V z*_nJkvX@I-5@}H(5v3u8FsGZrI4i4m54pHMCrtr;*4x=NU`|MNT}DepmvPqgQhO8r zC7s{(dAl7XNx&Sv7;VgH=3SpF~EWMXCizuc08^S|Mys-mc(m~sls z6vznz$A7V*|NoN|#w<{bls~GVxG4>vAcz2E1?|5HrYPS!;a8@lFz7vyn9W^k2DpBa zv}x_;YzqI%X!Yuu<2ZEz@TWA^=6(vM))Tr?vH*&&IJBandv1Y9=XOxy4t1?&{ra{o zD|Q_kbsY5T;Z9w5>T64=(f9;*ciCyj=?9(@0xJF(K?u}rCFKgZ912AWHBI)PR>Ow^&?n>{KDouT>|y< zDAmi&4t0fvaa1~3lT5KvOG|ClxyyG!QrROcR`ZquVa2?K@kj$i!X<~LK~$ENp-sKu zj>V~&X%tgYcO2_^QFGC*MZ9o~hjK2bYg?vz)oOaJAe(2rdArpVJkrFIX>aLWxrMo@R_Y8 z&z;B;WKvk9Wyup3;#udVC1e1|y5!zDejyCWI6V$W7We2sxg$3rzi`ifZ(Os>Qi72L z;%ma`HlJ0g1ni|ITwghJJLKDR;5ql(q%Vf;8qU(NZP|Raolxh}gA&FcIP2A(Wn8mlHGx`rX-ctXqiaVC5D&2=r0QywXm=e}svKNRz?uqiY1)Bykir*^Is6eI>H{`?eWRoHrJ&W+$xHHR)w$yOl%~@DS+i?-@N@mkC z7p7A?gMkBe$?fl_Y;FOF0X?hRS1!P|sXLgr?t~ceG~0vDX#>A2R&f2|5pUl^3^vn} zgoXkTW5B`OXN1@?Dpr_U&c?mk{qAj zxbzPp)dqbC$=JjVh7)`1+ydi51`(xrcsKj9FbDH$w(1Rc+N=RU&B;g`(|=6Yy6wGO zap)t7N4vcs=4k-JY7*nMnTrUdaS2QgffV+baR*qHgAQ83G2+=*7$*L$KoNH`UJQQ| zKoQ|hZUw;660!so`b+~w@41DxVH1ERA9p3O=ppWGYaU}I75=<-1`NB3a3Vc)9$Vcm zCqvIeUH?MfP`l^2e^)S2xX$@|M@AbHgsxKw4X8h3NM^?s9Z`GlVkD%*LMa-IX_gp# z^E?36RIKv{3V(-BkCjFKZyRu&VmXArfPjdYHfkFYgdl;|9+LQIR%}Ot)5&>9NBeep_e^1e z%!$ki2_XU}i6lX&KMs>lLBT#pspI8ttM15n^@sC*)4?PUbH~Ty0-$jI3HRouV_TNy z-{DXE--GjNt!}S_;6d<%{eu-650Xy+37Jz0hto^qEN?tc-=p+Os)xnMR>P=nZbD0b zzUJ(GT0TUb+fuu>ry}#gJ@lc7I%e8@>T2s7V??&c`B>^vo4JTO<(NC;-PrtONBoIMgK!Ntjv$KH?hL8l?)!8i^KZ3fUU13e6g^ z3eg(1i$D^k3VA3(B@`{xC3G1Ou`m2XmM_8{VS_k@vPEn%L~tzpVBaLn9-cnvSu89& zCt<~YDBWd!o`LuxrqwDh^_N&i#?x&*?aZ9Ls{L#}vLAEB)+Qnob>0B~b4=-;fYWD$*Og>@&d2mD3lLWCMIF79j=)(QOt6j%Q}qaln0q)CWiocQ zSke*gEB|d2IGx|p0wz5x>MQ`i02#Oh{6xoEQdHzshnwDK?Y!2-#tv>v@Lp{)>)ll%(KMo~A?tx?3%xvvRbga!|E` zH0D$K7g$@foMtZdDsg2rlM-2#7Vx0U(O!3oSB{%20#AkDOmq?KqirLo{DJ6CiM;oJyJ~e6z|r~m8E4tc?%`LrI-ZGr0D1>m}=FK z>ZS%1-fc@J1bHO@0xeZ}{xUp^8?L0st;*_Tz%oaN*4DzlA@<8uxD4-Dsg!+|SQiz>;S z1!cuA(mMm$cgryKYAnSB8u&i-ptTzM23G6u~ko4mR)UkN1nElilHxP>mov zPU$lmLfnod+615fZYl=_+?Wu2f^5Ea5eKe))XgXw&GQLw&4|2p) zC3{hgsjHJbSPM&wt!#c`c_lH`pT6K?06L4j3F(MGB1`?fQb4?NgPaV7mYz)qhKV3^ zCM59Maj-`V6w9N6q?cvmwPFA=Wy!@lmUbe8p%Gq+=BjLw zP&y?reK*#4BiiurJRF-@pjWAaisj;-L1tEiRXxTI4_3PjmxudFjjx&0U%BE;w0t5c zKhPj6Egm1f^R-#^;yH*Q1lmnxLPh_-et?rQLv?m-%SNVL5a0<0sJ&);%S5Uoo)h!n zS=9!IrldO8=hWPY>tLN?XaGb6ID8EVZC9A$dmf@y=Fp*_YY13DYiP`m;vhB0-+eQ5 zHElFa3YSZhPqkELANeGUMVjE#``bYqhNiACOCkI~p~*hTq}z@~0;!o0F6P^0E|_x4 zpF9-(B2M%_U$2!jItjVD-BL1ef{7tX{lA@Aup<7%Xy$BU~Buww^ z(yC-v1I|!PL%>Q`*et-Pv}b`ZC1i)ks9Y}f*A^R3R84LAm7pBwrXT32msS_%*27|Y z%WS3}l9rVlf$v5XPn%UD`ts$moi&1!yK7aFVT}n|lGp2bk^sjFofS}W%osfTvLT5H z{sEjDU&$niK^mhqD&2MBsX_b=L2GpV(pv5$L=7d<^0WD}?t=m)g!_G9fI`-dX=_3X_AZxoN*y1M3tl?zT_ z9!5gr%DnKraot$*OW=H8^E>uCwuTs;3(_YC29@NSt@;`w{7_uwnrHkQ;TD!|VQ^Xa zC)i(i!7r3q)1`(_ueT(QMxY6on1+HqL|MSjeJ|31Lx8EJ5Y>#Vu|I5CplQXI_=f{B zF}2kS6u*bn#+dqH53maY`{lZdqmK&Ro*Ib87ZcnXGC^5sC$Vm_Nfa7o#{T^=12bWV zN{*5q#5It<0>{xT)m)r^@~9fo-P!5Bpl5Q6vuoCk@kj` z5(#s~CIB^+vO*O)c~93L$=KZ_6lhYxJUL39pd^_{G@twDUa5h{CU~zLzc9P<-q0l# z!@@=P`4bguttNNvH#P#aEl(g`rg`7&SLAfjoVLfeJ6XTihci;3xPCo}LS?lXp57Jp zTIDeLNO5tPd{E?5NK&0-7|6InvWe0y=s+N3EkHoa`Z^w&8@f}7VQ-*GX|4tMD$cdQ zV_{X=Kk<}tHw*~TY?T>a`_F^)N%Hk-Qe3)pg^q-Uc#a)@lUBBJ*YDJvj+mJWi3BD| zA?3oh<#Fw`vpg%j$N5akA_M8!mD`U#8Z*V6@Mkhs7oYuB&w!<3#QU- z5)DE*p5#OWF601;w)9oglW5lli|Jlb`T%ArB|}JP&-ocvHBi(JJ6`L~B-dG>sB1EI zjO{yIYcYcz0^CjqgIhg}8(B+d%|Nf=KdQ&JIvtqEPM2^r72q1P>XDv^$x8{RKw-(k zxoe@{P+Pat>D2vMjknYM4iJ$Sr8h~ho}4`>d{4T0G@b3)sbTI^J?rT|c| zaS8rXUYK`#c75fG^&^VRr?{SMW(*F2p2Q5j{OW~+7uc}*)i!slE=nTzXbG?jc#aBw ztkR~1ItT^}s?bt*&<{jD)$_Lb$))_FULZvx8ggci<^|ct41td(Spzopi>YOZO1w+u zEoOImP{CB%R4IHggZ-iMg^rJQ$AE!V=!G5%9Gcc@|DN5GQDV=g$?|fX zW%WF>JL1`1i@Ii9TxvU`S5=wFZp0P)ZY^&+Kzs;9`3GouOE97!q0(WB`Tz`VWo1U5 z(Vwp;Q{>b0BB#-RAkRM$HhrR??6h0}kM;yC+ys2i>PX{|TYnv1TkX`IDKn4Cfvki5 z;$MuL3wJ%l^xUHnuOoO9?A{*Zi0R0u>WX5hp8XitbEm_*(2ZiJj<~sSs?jq0ERvo; zNjdKmy}gZf^EK&vxHW{vW&vypsuZ+TaY^GZ6A!h2RI@R9eY3XTnYKJGXL|_{PC8{T zp44(-_l~+)BiFdRP=~smNeI55Akz7XAh%G{WsVz+N#z808So)k-rhsv;pkBF=TEM^ zpCyeuqPg<8@&ajv^ByJiMVF8;k`?}uL~&m)pD0%D=D1X7PB_*4-<*A{x^F@x-^P{MPk&j|T`7Mf4KS1<23Njr&8X|U?H4nirhXI@1ul;3BqT*q5*2kD+3c~$-TngpLn~{rVZ+`l- zP7T0=q!$DRW1XOQQku^k+@~RsRL-uJSQ%2ZQPoYYT)@o<*9GA5vQPAM^i+f|ZMc!);Gs)}B=I-j1=R%7)#0wG7Rj@Oqb^UZURx*`$QVR4!5XQNk(-kJ3>8SSi9jWm$RF z906Tjzv?RjmYCQ84!JkK5TZ5MO4QOyDhd}2r4IDT>vjd_s82jXfVvr0A!12eYAe^5E|}TVEzKL?CwBwcmz((apq8Co*w}D!ea>bXYk|OdF4zplmhNb3 zJMGa6WI%@k37Q(g-?vbJt$Af z%Tz(yo&(SiUj^phNVPc{e!kFF zvZ6@UlL@W1w{q1?MDNdP%jf8xvb&~U?#VPqGXR*`q$Lo6hm^nygEIuG_CHJ*^qfxZ zBWP!m&L0mN0{2Q^=9287U(tlw4G&z*+_ZggfZv?(cue~ZDyqH#PEHxDdgXat~vSvB<3{`-)Dpj;PVG9+#dY$pFmaY}P- zRWh9|oEaeXX8DXvcW~L)-|t$?X#YqJPs3kF6$?Qa?L>Uc?)0aBpo+3hq;h|62v~-7 zF}0L3n7-WA51e?=Ye*+@cd8e(%=@qZ#iyF9`oAdr=J#A44SUQ$u-DeNJ-<-0$2hYKfWV3`x zj|mE^6IIc%QT#|Gl=3r%k}xpoBTY2lNdGNSgI~znQCf^Or1Tf5b+m3%;*Z~~I{|zg z#;RxCw!{lrPszp$y#T}Vv$+?DyQ}-N{D_w~p3`_!J|*5}8-(NmF%_W0jOg}7eb8cX zzj!CR?WJvf+&`Zv7)yy;{&EYsSj86F(}ZA@X31!Vxh!Yq^D z=x4|bFD#S#JM-|-8iBF1bWe$JYhx@xF$C+biJ1xpLw*$a#9KFwa60qJ!bcIyOq+Ki zM3oskFXj>xYAWq;%%t3VunT+ko;PyzvvVzonijJKwtpEw5RR=Th>NziiE zfsh(gh-XlrN=#BvkI-MCJ2vqe1|-tlq7Qs`IhrlpkAp9*u#nMb{_F-X?R)&-vRrl8 z?^-f?(F$k=k3H`fcXsaYcXk%^hA(R)f!u** z{k;8IYbfDU1X*YqW!M(CWo}Lm(vW6$?7f0*Nq^#en0C^DEeOI}1ZDR0&F-56N)q72 zuiRsSDUG2Yn#B`ZYGQ!*=dMn+ZJAa$Jj}&(5wdHnb1r11f}%^ild4$^gk2wkE<&TZZsB zcJfg@_R*;Uogpu&yjcJ*+$nswnPV65es%>ahJQ&W(_%9yOL8VAS%@g>2qVHj&urf2TrNHC= zD^Dt_iVH|crJO2&=BFqTf~uxyCW1nO!@|ATJw7hC+$n;B0)arpAHx2(wu#RJ3JJ{0 z%$Y*N^Pjn*Qu1O_DMS|_RVkLdpy~k91na+wsu&|TMI6yLHVx1=>l>-Yj*2hI#-Vib z1NlrL$hyDn6>@=qXlZG$tn2>uYE5*>O6lg(Hzq20Xyyr_q)`N5>_pYK(PB!WrKC=# zPI{}=Uk-G6G_*#1*kvE`aL&B_WS@M(M<1Q&b41hgw_4i1U3XzijgL!4pd$eszF{+U zGe&9>N&~Y^U9;EGqpGzZkEu7WQ`%^$+g?=lk#KgJTFQmDL@hF~u$=E*FpGR{$`+|vYCO0ASn2c;uEbK9#W%7}LoZmi7X@YPDqQt;)Pshe=e-_i3)&zIS{ zWXh6K$}W;LP=obBje?5%TCD-p!OHqWtG}(_Rl;aTR1CyPhM{Vy-QC>{<8k8w4=u;| zfanz5?Vf$k@5?Phfj$|Y@8F{yle-Z9*Peu182TiS&+T6za*KE?n&KgIgoc~V8YSHd zrF2fEzQtFOns?@qxlFC>Zk$})Lr2J61Aaaj!VTmj6>Q6p7gf)Ct_*-nNMY~#ytlEm z2;X@<9&3k$XP0~pHDmc+MiOy6#S_yJ=CHs?1p#km-8Bu>6&IjIJ1VDln0BmA6v?!Y zr>m*q1F;h9>#wQ39>)l=P}CXHkDs?+4zhPR(;siDMON?2TIsMstA8oHUbYVp2mTBq zKmWmbYyY4yMTV70%bElDVTv<&h%;h!lKqi^j$MX0AoWO-$70c&Z(@$D6WgG4V@f=1ZmS1dnR zSm=@vGMsD$Iuk;Su%lrbOvaQE(cGLCNj%1+k*5$2nG@=}H4zvvouimEyMsDr0`KXy zG@K`)1PS38raxm{42xqH-D6mbXqDd94HWs+KFnR4tPe``VXHK~4xUf)EtF5f;tGBC zOJ3-d)JCFo6j&PIO>068l;C$**J$9B;I^#TjjXnKR1P@}Dx1g&pA_iA7id7G3W0g< zyCSVG(`o)N;br6F*;i(N&Jv_Q>AUC|K5}^aS7XzpBM1Vy*s< zFn3Q`XAcR!*CWl&ZD!;LIs{*itYqnl8w2;2>Yu~(NZXTunuK9m`T0eCy|HJeHzH4a!@SZ13S;nY#gHWAZ~PI@{R3w!OB%mUmnDbvx_y*>)I z=b$oQc-R8qBOn7nv`6U^@Mwg-1d}zoYHKiKv~aMHG_a)0hIdvw9@#*?YUq1-)Ne7> zzjAtU2i_@sU324z>?_JNd>)LoXE?#wKR2)8B0hKpu@0mTaKK;+Wetv^ifS%9Pv6_G zYG7VVjil|eo&nmg&DgXw2e{6PGG5D|=h0Kv@IV2?my%N@o^)?A2)x2*Lfix591B!y zXjUt@O@#LUtYq0B!@=8gbHD)lC0l0>6y~OfxcMEqMCjY(RcBElex9jYUaP+qq!R=R zRLEIP4H^Hfr;i?tK|ycv3 zN~j{JdP@2|h$EnTd)v=PAffXUJ$SNy3!|X3kE+^bJVOhCv16V6$@@~z-kFC1NHMrz zM$XF>W1y~bMj=WyoQ|EAkBv@7-Jfc@a9^V1B=#am)f>Evof5o-N>8LaF9& zSa{6XsJB=b0i%3ZzYCFe7ZDjR87(#0ySi#kB8j$%=wCqkIzK5F8Eu+=>PiZ!SdlRJ zsX^z0!NLL4KC>#RMFPff0Hjf8+R-GD2^8|+D}&9XqzNPPB#pibqtB#;3D?04jS&z= zoDb%}!p4X?YsR3DX^Lrx7Kv-WPv94Ah*AiD>2R5X5^pDb&ImuE3$Jk$*YI1}R?!S} zU-_ekx)ESD>cSHnK8&!OC@1QWw;lzgX+FYMP5I(!@b|JGS}5*d8YnE&S6AR1MHf$1 zEpahcr8 zV;@~>8G2=R>CxP`kLOHXdF30@+Rp^IRaEe2FA5+>2}icxm#!5;%t4Y6YJb~{ViL^I zCN2>dE4v;CgbB^gODqO5WUsXTVYo^(VB0K_pKdc59JK#^`0;r7_&ge17 zIkNR6xIwdu`&>p`oA&6WmuA++FNDaPoqVFf=IFGa5}iSPP+sv{<{0V5yxGubmDe>h zrW??Lf1nq3Nhl@EgoO8V#`YOX6b_Z%_c^Gg+YZnywKg}TFT3+$pda+R{Z@nxOP*56e}ZsTo0xjV zy_7KxYqIGW$wR!fq5Sia5&;siaTiHa5?2?VRIb8yHX|~Y^0DVB6Qh1Tyne`}I0}%y zrKH0nvMH>qRosr^^Bd0BHyiN9tZebv!5=Hp5O4tPaJay8*Cek5>X|19_yZplOZs@B z8#JWKNp)SrY1{_ZuZsRz)>r?sPD&UTvhKu2PI5G{pK$7kQUcFm`3hZf${7FaHrQ z+fv}mlS`b4bP`XI@i}a9e55xv?v^>YH`u+m-@6NPixHm90g}KF-C97sM)2}ssRZ%W zMTFZn_DS0sw~V*hT|bFk41w$if*hNfQ@_*kJg@G#Dx!Q~wza~sC{M9>;Q>IwONWMT zu?gfM%qQ*0D=Rx5Tw@hWrVodK98ZiKEguE1f!l@SfCbOP<|BFCkqWwnuic=B zq`g>TPO!zLxAEih2!8?Ew`tm&K%%ai!zU?{ZR-3 zX-tWrU}V2^GTGp5!@nY^R`B-TcM_o|{9|l>*;|wuH$jO)CS~NdO-@Z&1t^JC;j3FQ zEK3O_WqzL@Cgx-U{6bf_FyM z-5as2Bf=dp9s=laUl8d@6+Ak?9>*>okaeGKu$o5D%AAKEf=?o>wkNNYprx7HHPxV_ z2h-R%9d0Y#MlPW5r=jlK^(EaLRSX>stvB+bJ|0cXRVA#=sUcQ23{FNNdD5hhg^_H4 z;AYx<9ya3?pB$(HzZL7t;gtIO)_GQG=vn2lEI{|&1OPZvAglj`i1YSFKkTh0dw`AI&9CTe!=<$cpQMSO z_g^=iWu3PAoRk}3h{{w*D#QP;t?K}%x_$pf$0$i;Mk%Bc&K_h&_THONMn)(}9GjAm zaZ*BNW*VZbjO>}6GD;H4PMQDbyuI~%eb4_~*L(F|kLSLh`?;TceD3=>=leCIfB4DT zF=q4DNnxc{O<`fLi|#z4Z$}!kZ=T=#BB&N zwYHqDfwpF;jv-8vnyCG#ryqfRfxucg|9P`SJLiR?wx8H9CQ@DD z57Cw9*-h=yqB8vaaRqu)VDrXp-?#fSPdIvB^B74&5!;ec)xWCNKg^A^zD^XY;bLmY z+i-!EFL`gR{&@dBwd$__6YR<^ft86ny?W{>dtZ;-_1hA*^UZz4`Qsm@f-Lt9_W2?Uj(*%M$gbj?Xr{^ z|K^qc7unebLCc&Q1vJ>ycD5(Z-?uLNs-cXITQ5EJFmoC_%^YS^;G)|RZ6}H`zalcn zUu`)!DCjt{#2U8ANqoWCT9?xB!{*mu^b-qXtYHBAIhmT9#i^j~aW)n+y!ovjYqQTL zy1U(`^@&_VjZmi;p;aILSS<7wANQx$ns`6kmnt^oKgMbh ztL%?YQjTS8nD|yh^uC)rpqFp_gUYz(M)QzW@dxGOW=*?JRu^Y_EMv7@0+yHO@5+kibpN4@x0A#y*JJ* zq=dFU%PlS`uf0-8g|5ETk%-*y94WP-?R1Dy-?+?SSpgbTk1HrLnBHj4y^8>Zt`^s=<$9=`&Fywx0qT&E<;}Eb>3!F)hkd6|Z*;i+9t0%VeUQ_E6{S$rS_}ySZ)d zjK)3DfYu3qr&YNabw5AuwIk;qem-omHT1H?lC|*W^$n4-&~2hqYiDj_gyO{{1?F1j z!y%_Ct#{wCiR;^S5*|3xb-VF|=nOCNRrskFCz=!vCT_l*6P_hurIn;Kbuagd8paL1 zb)*ijjI0Rx$ob3uZ-OeTw-n31vDoYY>2 zj}c!+7)Je!=Xg+?X~d(f;wViNX9)N*Mrb|F6Z4j@G`K@OUP7I=C3%;b4pY) zm!DrbX!WFOqft;&=JAsQZ|OOCnMb9#4B8Q6bf}d`$%Dom`R!VIy*5+&5jaQn)AF|8 z;lT`Z3;}M;&v^<}F6a{3VDSp^1<~Jv)u)|%ZF^0pliVztsxCXZI$RH$Z8y_?V|^e! zc1+vuz0AHV8;4ez%tap#3O7IARbg=O#;U2Li@%52KDFVa;5yq$d&Z23qiNJ z5kH}Txfsip!9uY}DGU4)BHAiJwuEu{v{d7L2fKSWb}84YzV_|ctDI|~@q|aDim9I0 z6Um*EQF5{H-hw@+aq*wa2+;f1H>G|oDr|6rw}17b~l`Q766`S~bfL=6L?8Zqw5HG+?@FIOTeS&$uTLzU&qgg&hK&&4Z3&R!b(5Sv+|i$x_(se zK>vH;0*i+oG53olDp4H{*F?5*+;3s`f1$^*oiGf#G%bO`#I#rsmA{soQ&gCCWK$Mo zr9Bcku=qf^F{5+1`PHZ^elv{e? zjDX{WrB2doJN@if-=i)EP>0iV9!DSJnoCtO`%3MmRcKc-{Z8RI+a7tR>MzAh^`YR| zUA+w)PCj}rcMof`ATD*etL(=TE3yJ~V@?buRPc;jntslEn5Gw_{!Tzgc}yo)tA3oJ zWoaa@GRpFxT=Z>XnV9j+(O$z8iwlL9Rq9v*tE^A6My&Ea{UOVx$s@3WcD>c%X7wuP zSivYt%>2-`@Eb)V&DNJij*6OViYQHTzM=nk121QAO2WaaN5sMNolK4NrW|-qFUH<+JCv5< zwEiV`6L;ZQgUr&kC}kmjZ@pda!~iv4zaisKR77)6hK{->We@xv&+duf{Sl$p;$jzG z(+s*38^5HNTHWzBT3$OR^R#meMfZb{^q6~}eB{fl+G*fN;|mskzg(eG^bnfG_>vEE0Vl5^AT z4(SPI9evV;_x5FRDSm%2&@x^40Q-ABU+OPT=?jO7C2TX_oS&l>-v~41e)N3ruEsl3 z7Q&OaJ5wI=wYz!cpL{-j&7rzHd7-9B|Bj5Id2x;tkx|FwLzljgnrDXe@I%%2CWyvj zbDQ)tR{fDbmMkk)R~F~f-#tQ#$Pp8gP^0JpnJH;jfm+)@+}8MsV-I>|o798|&pq8s zy8TV#FODqF?sfAtxRG0`t!ZjGhF!BVwJu04)?e9MuJ)RtoqxCbnoEY)@mo!=c8T)( zyL{!Yd6E%FtEZD*{quRe=2eGZgk|NADB}Zky73Q6b6Dn`bT-@zw!Ina1A5Sf_^)w|HJ5p%8tdd0 zgz=w3S(hlPbj^QBhP{p2>|-rhb)_3&V}6TO|k zrnSuJeTu)L67E^eO^F3+XdAyZ_ahRI)mJ+m-{8#MY~fD45bu59ZOo}n%@23+*S{?2 zG+5Q;;!J9c@gs+&&UY@GUguyK7ki*4Fvb<2)hicTN$u`;kl{1+vj?~C#z{C(XX!e1 z>4tOU4;;uU;JyKi>^vM0@n+U7Zr)Ldzkbq?rRRyrsHW0sKS{pRn`5b091O5;iRsT? z4BmfKf3Er7$9Ue^WBZJe^dq~x*LIb63w)V{Q-wPOsQRMDPA15mZ5;k?(zS4L;>{ba zf^(5rh9s%6X|HSDq4D1BUlqd*Cc3<{tRy5Ys+KJeY@zpbdC>WxVy~uP-tmrO=gZpZ z=|dOn(9+5U9N-nbdv$c88%uBH&7a~r>_65JTu-ZJ#Z+jHxM=l~wQh?!I9o!H+~+&M z1pl|qheE*7q(WOzJm{EcX=|M+{cH>4pr+q*YkA+icYi63J?uX9F2*y@2FPSObn1F4 zXEanxl@7z0Xh=2=;5*`3CXD)eMx|AViOD>?FZ=V6$ig4qMYe@!O2*XX+|Rzb;iDN4 za)MgEHay#DIKA0@&?X9l)4Sp~mZt@r!Rh}N2# ze^2@`GP?S$QVSo_&L31a&g41t)FvT+sm-9stW*rKRaXO#wY}<0jIm+G!QLEXu720# zeBHU_X?IvshV>%D&k^OI*71VPs{AGO3&SKOIaq8OH?StiG> z$sQOxcuh9susrVzh6-9g#V4M;yl3Qju?H_GNL>68wHy_(xPowbrOI;hK;(4+UUQgq z)qa~@au+XMy0v%dhx=vXO}3x2@5@xD%3EDZQrGV>Y&Qk8&nN_%^+yK3aE;hK!olZZ zz21m;Xt^N5p>FoleJ!24d^Ghd!Fe%d-}&lFyAH|q#Hv#8L%rNPpO;29-M3^I&S4j@ zPa@p~4B6Bo2=$WnuC))0&zuq(5y)n_A5l_|JST=oFji_47!i8GLY%o#SWkD38WA;k z7SFcl#@G5QA8pU=M+6Vbm9fmR9SRW{S2%U-{C>$BQS~R!iPx~&-lz$om18>-aj9PW z908G1EF>)$wm&$6JwytTJjTivu|H(*!hS?7mkOTMZGQ&Coq54y`!g7&YglXecHGI}#3DcS29cr$QU8G-FUFy{Rbo|81=dt$S;V_0U zkMM?fPhTXw*go{acCb1;hiUs#$d`zs*yLDWC26h_r{2QuPiLLaZl692pB#8%Vr$hU zzt&dP{>iCvI9iK~*yEb#G|9$f5|x?d&aAb3J0~h4$84e-zRDI%Ww;to|0U+tPz4o&VRsR& z5UpF?g5xieu=tkPTHtyI4S%p?`u9V!lgK~7jsS1M0{XA)`rD`Zdxw! zn2}yG?aAEp)DgBUDh-UX?($cztMJ^*1u61} z6Dijy!3QDIeD!(*f5x{)ZQ`nQE8F$dQ`knumhZv0C#t_cPdRPE`?Vvj$=d(4w2^k@ zrCz3d9l;TCgME*u2x**Qr^k6V_`~~Emg*T7WKUhVlXZ!{pK5xuWS~l>Z&{Mp%&>qa zslYJTF!wWe;ANGpfV>{38CNY>O4B8Qdu3F6w+GO8nyQ{3aKT2*rILrCchTRrxnHT*1du}fw`~WVt6M;ULMWCzEsa4yWwhij3#1;C{Jo^ z3gr~3cW|Hrk(|TfW^*8$*Q%_=K2HC0cNK)M3SZ3%8B@+i3u2m0lgC}lGwFO%WYVxn zrG<1+7gO&Z=DA^nUYkiF`n*wQY2n%E+bC$ND6S~ZZ)y}nA#fG@(LwLuwbe$t-{;dd z`p}k_-RrkCaZot&S5)67hwD*V_}e)76P{(E*QOqRF`o%dxBRY1n@QjH_#0ceSu(YO zpkSv=mG8*hy9%Bknl7Jw-0w_(xVrBWH=2jNr;C>P%V>`)(*kGF{TkvHEnoUW7R`y# ze5*>g($UE`n}gH+o~ph!Yz_T~e$rc*?^=|l?h~WwX1b*~+MQc@b6w>z7o z<)?DAW`i&lA!caZfLfH+D(QwFHCy>^HnRhDKhsZFVeXuqpALkFgb7^O4!IhE^X1{W zaaQ_1wM$z2voG#~!4=)+#COf#`ZK~wRb^K;(`Pn(Ts1Wdd~T>+!#6#@`7VN3Xa7nu zmhNB`wrlwChJKLU-eXlcl8&l6Wj=wfMl6AQ7a`oEg znau<}JDZZ}iNiJ} zVMnwzIOar$EhZTq?TSTy^aVP#ReP-L?@ue5+{dI4vf>eV5?LkkJ+6%HY(eufowdie z8@J~7a0?{X2+ zOtI6O8VC1}LGQnGjyd4Hy2YCsmSoM1sfH6{*ni|WtU4BATqBMoN)w4&6QRyu21JwR zDn=YjI&nGNDEBEfcdi%T)$T?Yn(fAQzf*N*(Cv^p%Ck2W!@gHhfcSu}v6j&yIxmVR zTuwCcS?qloI%F~9DQT|FTe?>1BHt}eZxG6uZ_hUWir`@|wGl6PBfEg|>iQ+be{f<| zZ?Y;0DIyyGH7p?d`?8`SQAKXI@^ns{`1zI%hljV=PJS{|s=pggGe+P!6qTn`)Pzxu zkm%NV!179-)FN>;Ue5A(oaHWsgr}cwd1004)t)DzqHs7yDSiQq*ui&An%c=>()8O zm?Gm>+frA)s8=ZrYQ=tev~IEIhIMdg;M~2hG)6NvPg6XfakeZ-x7zHEGJ%DUTwSc& zm!F#U@D!_A$7q)@^RuT79e0QfwaUSRldxa2O|SSQEBf2d<@^vA>#BQ@{YGi^$K6D? zoN!hP z_j*WtxyUDYm#KPf;;5{_*OqA!)^h2=S=N^>xM91IT|>r+n>?4rpCO;V|42mCV@yNO ziPdCrYFY#hi(h(oi(O%f(|n2;YZ$OAttln|&5!CorkKWH7gSqNA>kNT!Kkg}>n7!p zIMCSlG$B;z-nq+H$~1LuMeFHUS_r$o6MIKuoow9QLc52C3Nzg87-*&A?jtBd5)2J? zcb66JIzGUs>`kZZRO9CA&csXH^zEcQ6(PodYY6u1dE-{c_wOAYdN~rSZo@B#)%5vi z^S>&^&`Qr+KHL8ARZ~e~_-g0{*#u5&5O7JSO z_EoZb7zBDfscX8r_kS4B461~Nz}ntV6-pj%7j*8~y(^$rI{N&V#VpxDbE0mtUTW)g z9(QJkCm&B0ZjH}3$7DCL_LmU^a+aCR>&?LnSP5pe@Apj~ht9VFo_it4j%h+l5F z!{pz#t>!}XC$NYQ={N(t8tSxFSSo6=DAls++25n2lsEf zeE+GpwQ!^{xlF?_*va6`RiQ8 z*o4IcFZy8Ox>yYp66GGo7A~7kc}8tKtn-_bK3qyD_!@sUN#=B#^>7-eR1AM?;b$~o z<~g5$o@=s&=D$QX=#%|dKR@{Xsody5F;DKX7g?i2F`w^$d~lRqa4clPsFKLuIDBRI zy$CG-fK@CX@3o?g+=5$sJ4t;>4i0DAd^XiY>EpOMUMI62eB%(9z$N-KY&ORl{cM&t z^5^x)%n3;xt?PB~!kkhJZKhweC<8x#JD*zKM_=55BchOJP$mv%08bEf#S#6a=a%SRK1Lyn<_ zCElZs7Jo=iXytTqo^RE%i=K5>ui_)6`fJ>w7E?638X)V`xFveqa>OS~{=AmoyZr{C zdHPvw0k~_?6#c6)rz|1{VgYS`dUM&4$;31;_dUb6! z%NoCp;IGM+8`t?hQLk~&j%x2;i;XlAq${G@tHD&TAtIo2jIgfy^F#mbf(Fft863Ft zy$`mnlV3{K*U)K=nOE%Jjv60vBQmW9@O@g#j+LdkUbk6CTL;hoc&USwC&ZJ$Gm*zk z|5=DemG=mvku!!EVc;QniSWzsh*+4{>nfVn_E48zS-zS9&qJSrejaaoIIitb=UfuhW!}mo zDtIq+WV|M|&2q?kXfsZF!Bynoq-jU-I@V{E?Md5wwfj$H zY^G5ym)unRE}wP~h)g^Y`#|`vW?{wTTE#pw{(ZYX{T13%8=K!_lrv;CnP#p=HJrM+ zc>726aAYKV%ZL1|PZQ$wpk@f(SCyKf5}mOFHPPu4uq&SrCN z?w+3r&BMekUcDnhVP$2LmyLb=r)B~Mif6tQ_|@hgqI#=6b2_qH8dfT?balk=ro{4! zn9ZzF%&YL@mRBc;;NdLe8qCS#ONW$sWX$WNe{x$ernPTmez4Br%xJqssMu7 zLhGoPOc#BV!!uo{r0Q>|Zm#>dmDs~m3CVpKBt663!YU&*DeK`lN{xenU)EywT!B5mPbP81GtK3E>0y{7ay!A-c1n* z5a)TE$=XgW^7v(X?qk*gUbMjo;{5|S66iTVFGv|iiC@c zF=LrwnYfx#@o-nQ-vPy8|aR?nCZtClg;)j^UHL_d3@ z#s_gqn&{7V_6NnY7xkXYcYoB_QwkrJiMSs&J=a#`s%qLtnDrW2UTd;e8l511DeC-yvP24V~%eIQ0DpgM$x^cF^&Y zr%+ogw0(N-3!GlBB+A!)vw!@#W`7m`zLSeIci~8y%tx&0$DgM~XWGE8x17=Xb>7P5 zbYq~|6OHN`PjngU_Qkqq7C4z%M*4VugMyd|;V)TZmfqw0>jS)Bw;aE)U^$miUO_y4 z=D>+u6)CX;QOPs7K;ez7tbabFq&{@3@ulvY0xBleey&Ca461TigCj)I zsKlJ?oSb_q+fL~tAb>3W1FBd4x%5aQ%K6#3U1>HM{eHuz~DsI-=IKR$LZpMKDt zTdek3HOA8ST$GP0Np?Ma_3-$nvuv)Q5Wyl$;K)ffOs}H|Pc(gM>dk}qZaD0E7iAZ- z-u*acX~_@Iv^Xgvk2RAzw^4al9{qrh=;O$pmb|vHq~~2N{jI{Ox$(YHrD&LKU&AN= z!r)fdy3d1g-%DT4Gxc`I9NEJh_~VQ}f2<;tT{De)Qzz$7A!LN&DXXyUWf%I;vO4)w zCupm_U3GuResJ%zvaYSZixMTWmah6wxpI|bbG37x&Ckg6Pb#suvB#g2JzEH#aeEnx&o>oZsMwH{Fg?ZrKB6 zm;HY@uHKOJekJAYdU?1yOp)_q;;ZD!>*Gr)bBB{J50};0x9Wa6ukAft@ICTU@2Ml@ zM0w_rCj8VvzP1MDwT1hKUurv)$(4q&zj?FX>U{yO*rdl6OEQMdmZTMHTWHj@cg+#6 zxnbSA?FX%^lC~3_uO2k)W^`y<{Iw)U!=R@`vO8~oJ`kCAvgo8b7a!ZJoFTqD?nim4 z8(;HjheZs}9UbX?GsspEzLcghkd&SwoJ17FM;i*|$6;7wE>=4}YrJVMxs0o>{4vxn zLSO1CZi_xKec*ClZf5QAnric(eTuK7GQ|e9xL9Wg1TVTic6P$n$k7iCyDz##9I>%x zdf~-s(#y=WvjwhT=cyv-}wE8@e zw#q+TmU>vVA>)W~YJ$GLqq)83c^9)|aeeo6NJD2gf37}ut(?@SnNdw&9kW|g>ZwIV zRirLR+(vC-Zw)$?oqv6ecJ=XOMyJcj1nZs?dws2j-oDI|-Rtov@9v#JWgm6jlfhLR zbt*@wPtN-2gg&p3cwE8Xitm)I3b;S7P)Uq6R&$6cJpD@K49xCif@y9;F5zJB=V>?I z_Rf~hhPS$hjE>&$G7fK$cyW!-S;Xa$-Kh%f12g(>Ta)j_{LD=cah+gDIF_Rpcd6aR z?)v8?*QRp*(_XKwjx$7@`mw3+c)6#0k6H1n-BFzH59ZV^G|?@LD6++%-uWhNg8aJAVqt&w>s%vZh0oG7lX<)5WyN3_^tI*SR`*)_yZ+po6>Zc~AEc_s zt%_{g^T)l;ryMIERT{tPV8RnTy=9!GuA)WlvHs{O-a_Lx$2!A^uiWV3+`{1gvB`AhV}*IzU8bcKQ6 zLlf1`dY?J%Y<&GfspTV+iA)-NiV zdGdL7t-3pKrWN&nn36b7r5dPvxAtW4rwm(=PfjOm_j_m#KZrf^P-9-ybdej+y!Z&! zw-@~6^tBHAF~$!sZ|u*g@rs>~d-JY%Y91aalXl%cwZv<}@CqMFWwC$QJL=YG2d3=x z7caSk*%i@Gn67FztXn5I)}5raN;mOZuqm+EGA@q^jQ?eez%$)kuij1K7SX@^p|x@m zR;aA0NvCV8W8U(be$u?RYuiFDK1S}`V%sGL;!<&TUgft*_IWl~xaK-*ltM5`)OWO; zkh^Q(ag>CjrW1$Wm09C&CuIFTlwat+=i)jdmtB|AEw{>rdJ=~b%+W7`N?8-GV@}W!9v?{qOC-@U@ipC`xZu_&}whwFF%~VX~(k!H-j z^kzSfsy}9EEotoLJnSrai+}6jZSU3S-*;TdfA6@kI1HL(9R%*U)YUbW<>W|rgJ4_# z{(ot5Fzg!ju8pviwtt97Vxcf8IumUT4O5NMOQA3nH4$leNQVyHySw2tg4IYszA$&H z_`Xp2{aJx^<)`;Gj;O?iNtMg--a zx^>=})5i1=1FmmO#|_;WektrG=P5SLVZGI^@CH5;sp`d?(`kPK<@0wEJ&gME*FohI6G+ND~j+E`r>cdE+u znVu=AP-@!fB^j!DRM&e687y8)8qa_;_||?a7jWrn-#c6*uFXDE8eAfz51x&*`hrRJ zz!hUDXXjEP-HU67ojoqez4$DvS4yqY?y%y}?jXEeH`4#2UwK#hGpc)aeNq}9Q!FmQ zs7jVwTneKeaty*m6ZT<#ZX~L9{z!b0G8}YfL=)%U;gs5rU#=Zgvi&mpjWY-7k~q(I zBT&#(Jl9Tybt|p9Ft3RD^xmL3*ryKU*zW$#?>)G%E#eKI@bvN^@tcJ;+AKV^Kcu&* z+;5}=2Y;!CnSEV5ck(oNVk^gZ;njgIg=LxU^#ek@#x{f*yR$*Y;;y+Y&X7`4>egjJY?4IHw?s+?KE!XIdh z@Dzt^CVl%t++utEaC(t+H+(5^J0UL>^^?#3qmH;fW9Y>~wt{}SDb{F<8EmF#vcURJ zt4gW0`_J6mjD1GK(l3V&i>DmO4hjmfWep~%^!h!lJ$dS5>`V9YJ1k;RxGU7St^q%X z*WR<^8=|A$FY7}lv(~WrvfM8^vaN;30`6woI=|(3@r;OK9BuAkRjR$BBJ?<}H)tQqIU(N{gT^Um!TfEVV zp>}6ddS%A8e|+!Ei7A6jW54-Ul5Lbg_L+2q&Z`R+jbT58kHTwL8p6bhBc|W?Fpe)$ zJJ5e;sJ~WEqP0q@e)NB8I@vP1v8{v-V zuo<| z+t4b8S0Bl;6U z{+w%eTVV8VJMUTU^5U*!Y{VN@n!cXX(xJ&Gxz03B@nT)JgQQ}#-#(FhP{u&)%+74$ z{h{K1_w{wf(wEz8{xhe3zITo^egxCAH_3WKXX&u(aGB{5I$!TAy^8t#49No~&c8-R z$GAo=^A7D(B>F@h6L7f6@|1Py3+g2An-ACFw+N3q4r%7Ak+PlHE_`LZb^&X7ulBeq zoA1iK^Fp|h2cB<434}Dd)D@7jPC-N%g&ggg!oekl> zN}q-&YBu`qk@zKUiAdtQqLYFCiQUulaN?y;;mfzbRPD_tK9Cww=(KKBHV*K6*tO;E zdwe(F>&=CPZ}$~N{TdWG4^$Z~_caQ$xvamby7@`;F)i+AkN%h5Bpy@mfk@|$MQvEh zTb^f+(LV*oZte}Y+7dc16tloRF;{`p6&a}PM3@Ev`ZR29yaBBNl`)by8`7FRqj^^{87hAC0+QVR|F@_S}dG{`|}XA~6_ zR7&4R!(i0(3sLwnu>vi5wYlV)+{zG=UC{LeP92)xykH7m zMf5e1cGRc3wQ%d_1J5sK8!nFyRcWntG;eHc`Hig4ipDnX# zYgqFUNfbA(e&p}7rts25GId#WYO?I9OuH1kPd3*;x;noyzc`Z!dguLyACis|>sN||-+P#!nq2b152$|{_d$k-lLD!!hLu;m zekn!9a$!c)$kIExuw68ChRW)ino6a~`7m~BQb_^qFfAGjFYPIS znbYhxHPtgzHwBC7k|Z7jIT~KTj?&T)P^8#Z*b%zlFTW)1e+A<@KtPF~b#wJnu=lj} zaCG-_^WX=s$h3J3J63A@3b3Rh!2h8^{C=kFKT1Hr#r1vM?f;<@*R*l57uO}gp&GzR(w8-`85&YhB~0*-H5OFD?$A=>NP(zbT!~*{yXn;QbahPhNN)2mjsrLhln;2c zB#=g!R67s5O^q+rS%AgS(BP22H=?egsG(v&VqPYbA}L4_|7?V0y$qY8K_E(1S73@X zq|ACC%Wp#{?Wl)k(9)@BtEy|8lzKP8QfdESI^H(eD_S}eB{fw|{nGcHWb`dS(WN~Izruq4_&zkg2gk42Ck=EK-ZKaRt~ z0JVXZin@NO>t~oQH8{_jNtg=FpKnjGe1(;Q8M>-kss^R)v#?|!(?4ICB2^`UC-;WU z!z4-IXu?WK_h9#ENS~Kr0(*Zyck`cR5O5OPGEAdX?IGE^qE~@+8K|mjD(RP&t-_jU z4KN5i0{k+b{NZ=y-%b7(ML?tA;1#Ik&z~_Q1_8%lD8}$u@Z8}Y^H4Yx8c*t5hY1tG z`&M`S2}8gm0Dy*!VW4aQ2Lf1l=R6z=M<7s)p$SmYaYzCV{N9xOA^t~p0*XQy1cCfQ zSn}uZJS-Z6gfK*6fi@ruqi}Ep0lE#p;eYuN$-L3f9mC-WB%ERqBmzSr3<8hc z$qkQgKaf#zo=pa1`i3m7n(6te|80QCzv9EXC6 zL}md!eIyD`Atsp?YMx*WJmLbPTMQC>evke23*h893{<(`mtQ!Dd7|(bV8;-KC_EAc znMYpu@9F|yv9Gl z;*b9VKSfix76ys>e-44-q=C=`s7u3v^FlWQbb-eFZzIHiB0n%OV9q;t2Z+&>3=sqr zWG8?jW%LBT3N>vw5=7qrE&R{Aa3m3E3o?j85%4JJ>7xi3G{m++%)vr^1%*N)D9jiI zR6{|F!J)}!OxFJ&^^;Rbu+?z7vB8Ze>7L5ZA4JF3nD0YG+peU>w zjX?dQ*8gY~STCHyBM3Go1eyS0C=efcVW{21(O3lZNB~0$0g-5s(xICJw10i( zFEqix;dqD&0YfxJ`b2}M1yw%=j({LOuqseBWMLEr#7f8!6Tu)Bnr={d91aJWh{9q~ zP)r2IfG6!dcM#qw(ihkW=06escYp_4#bWsXi8lW;8Vn^EgJZBDTkTu~Fa*dKGKPj@ zpz#jSBA_(|z={OKUs~ngg$7`VhoU=hc33RL;K;-ju8c*Z@mSIW7CJ#99RCN~{PhDY z5(>uw&?U*h1 z0Nl94p^+Gn7@=dJsKEV4z~83{h@s8~$02e5O)_N8fFW=<$RcP2ngXE%TBzlL;D?4< zDBwq=NJe1C7(B)9uoUGQ90%eyR9hG{MRWoDaFm-P$A9uh!2bW9JJ2enL!;5q&;%Ib z{{-Xz(1JtWsTnvPXrCfLph5oq&pfjJ$xr|V%^-l7BA$Zk3W^nh3bFA2GW^XCgpL0! z0>nU^pfHCr1Za<95fF$N>`K;gDbqd<2hx?wEkZ{MVhx znkMsuf>gi{TFSsdq`<<75Y@m51OgO%B0(rdL5vH)LW&}oOiO@h0RcyXOuAEBC@dOO zx4*~!q6sia5qME}Fa}*1gQ1uQgh4`~4Oo}}g=`2=XG0J;Kog+uqv)of0pf!!OeThQ zj6f0vk$mUw06&oBAY%YgL6bk376(NW2oP-%kaGtN0T!lU2x8pMF)}Umm=FjQ$Pzo} z0e+ajxDE4ftxJaaP;^Wt#zO1^oCj!yk(xO`>H_(gLIeOYAwGma0E2>X0V05q4-pFu z3QR~OA=5%b9oQtWA3#eEU4P;qnIQop41nh-XjMTb1{i|uCVy!`LZa+y0nGkaM}JiW z!ry-cB(D$JLpUU~N<@%dgJQ>6Fn8y|KtSNVJIBbh(AbFpEf#2WL1M5(a6CJS0Yi!| zC7Bpn{DFFdqLBm`QnbkcKLFi#u0f{#jcvjH|EM2Gf`!m5)9~*?c|C8oo}dlB7jpvw+$qs@E;%% zoH1NVGwLstpPo!5FAdb_xxe8c66FAThF73VR2;1JpZ-$qQ42Dl)vp zlE!)I*oc%0LR0uOm=48P2!J7=?grk72pY0Gmj@zYp;?Da`vZ?} zMxX(rhr|*xEwpC`#_*W`o!0NF3|J>-XSxG96<|0>qJ@)*anMC@APep!1}1_79T#(Z-gpXw$KXK=ZznC_2W)KT7?~CltBByJfVV&<0tqP~H(*GhfZ>3aqGkj*j52V7 zb)i~7gX;w}G&}%e3X=e42Za?tK#9ZPKj8r|1Q)av z3_&9uG6smDB^0=`p-c-HJmozz0B}%k5y`|9T|#ir2@MZGK#CF@>=^hdL_k0bt?fY- zLxFpMhr@xf{sS`p!asn=DIf}{4ncPfvIquGpmZv5%L4UgGW4Jr!z2F(zW)smNb+41 z<#`e)@)3w?Q2d1i@C$0`fFDJ)2WvK6Tmfp diff --git a/doc/footer.html b/doc/footer.html new file mode 100644 index 0000000..fe5338c --- /dev/null +++ b/doc/footer.html @@ -0,0 +1,4 @@ +

+Code by Tom
+Docs using doxygen + diff --git a/doc/header.html b/doc/header.html new file mode 100644 index 0000000..426d4e3 --- /dev/null +++ b/doc/header.html @@ -0,0 +1,6 @@ + + +LibTomCrypt: Main Page + + + diff --git a/eax_addheader.c b/eax_addheader.c deleted file mode 100644 index c7dfdd0..0000000 --- a/eax_addheader.c +++ /dev/null @@ -1,25 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" - -#ifdef EAX_MODE - -/* add header (metadata) to the stream */ -int eax_addheader(eax_state *eax, const unsigned char *header, unsigned long length) -{ - _ARGCHK(eax != NULL); - _ARGCHK(header != NULL); - return omac_process(&eax->headeromac, header, length); -} - -#endif diff --git a/eax_encrypt_authenticate_memory.c b/eax_encrypt_authenticate_memory.c deleted file mode 100644 index 9e9a428..0000000 --- a/eax_encrypt_authenticate_memory.c +++ /dev/null @@ -1,53 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" - -#ifdef EAX_MODE - -int eax_encrypt_authenticate_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, unsigned long noncelen, - const unsigned char *header, unsigned long headerlen, - const unsigned char *pt, unsigned long ptlen, - unsigned char *ct, - unsigned char *tag, unsigned long *taglen) -{ - int err; - eax_state *eax; - - eax = XMALLOC(sizeof(eax_state)); - - if ((err = eax_init(eax, cipher, key, keylen, nonce, noncelen, header, headerlen)) != CRYPT_OK) { - goto __ERR; - } - - if ((err = eax_encrypt(eax, pt, ct, ptlen)) != CRYPT_OK) { - goto __ERR; - } - - if ((err = eax_done(eax, tag, taglen)) != CRYPT_OK) { - goto __ERR; - } - - err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK - zeromem(eax, sizeof(eax_state)); -#endif - - XFREE(eax); - - return err; -} - -#endif diff --git a/genlist.sh b/genlist.sh new file mode 100644 index 0000000..ddc252c --- /dev/null +++ b/genlist.sh @@ -0,0 +1,6 @@ +#!/bin/bash +# aes_tab.o is a pseudo object as it's made from aes.o and MPI is optional +export a=`echo -n "src/ciphers/aes/aes_enc.o *(MPIOBJECT) " ; find . -type f | sort | grep "[.]/src" | grep "[.]c" | grep -v "sha224" | grep -v "sha384" | grep -v "aes_tab" | grep -v "twofish_tab" | grep -v "whirltab" | grep -v "dh_sys" | grep -v "ecc_sys" | grep -v "mpi[.]c" | grep -v "sober128tab" | sed -e 'sE\./EE' | sed -e 's/\.c/\.o/' | xargs` +./parsenames.pl OBJECTS "$a" +export a=`find . -type f | grep [.]/src | grep [.]h | sed -e 'se\./ee' | xargs` +./parsenames.pl HEADERS "$a" diff --git a/hmac_memory.c b/hmac_memory.c deleted file mode 100644 index d6d3364..0000000 --- a/hmac_memory.c +++ /dev/null @@ -1,58 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ -/* Submited by Dobes Vandermeer (dobes@smartt.com) */ - -#include "mycrypt.h" - -#ifdef HMAC - -int hmac_memory(int hash, const unsigned char *key, unsigned long keylen, - const unsigned char *data, unsigned long len, - unsigned char *dst, unsigned long *dstlen) -{ - hmac_state *hmac; - int err; - - _ARGCHK(key != NULL); - _ARGCHK(data != NULL); - _ARGCHK(dst != NULL); - _ARGCHK(dstlen != NULL); - - /* allocate ram for hmac state */ - hmac = XMALLOC(sizeof(hmac_state)); - if (hmac == NULL) { - return CRYPT_MEM; - } - - if ((err = hmac_init(hmac, hash, key, keylen)) != CRYPT_OK) { - goto __ERR; - } - - if ((err = hmac_process(hmac, data, len)) != CRYPT_OK) { - goto __ERR; - } - - if ((err = hmac_done(hmac, dst, dstlen)) != CRYPT_OK) { - goto __ERR; - } - - err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK - zeromem(hmac, sizeof(hmac_state)); -#endif - - XFREE(hmac); - return err; -} - -#endif - diff --git a/hmac_process.c b/hmac_process.c deleted file mode 100644 index ebc6f4c..0000000 --- a/hmac_process.c +++ /dev/null @@ -1,29 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ -/* Submited by Dobes Vandermeer (dobes@smartt.com) */ - -#include "mycrypt.h" - -#ifdef HMAC - -int hmac_process(hmac_state *hmac, const unsigned char *buf, unsigned long len) -{ - int err; - _ARGCHK(hmac != NULL); - _ARGCHK(buf != NULL); - if ((err = hash_is_valid(hmac->hash)) != CRYPT_OK) { - return err; - } - return hash_descriptor[hmac->hash].process(&hmac->md, buf, len); -} - -#endif - diff --git a/makefile b/makefile index c90b88d..9d97805 100644 --- a/makefile +++ b/makefile @@ -4,7 +4,7 @@ # Modified by Clay Culver # The version -VERSION=0.99 +VERSION=1.00 # Compiler and Linker Names #CC=gcc @@ -15,22 +15,27 @@ VERSION=0.99 #ARFLAGS=r # Compilation flags. Note the += does not write over the user's CFLAGS! -CFLAGS += -c -I./ -Wall -Wsign-compare -W -Wshadow -# -Werror +CFLAGS += -c -I./src/headers/ -Wall -Wsign-compare -W -Wshadow + +# additional warnings (newer GCC 3.4 and higher) +#CFLAGS += -Wsystem-headers -Wdeclaration-after-statement -Wbad-function-cast -Wcast-align -Wstrict-prototypes -Wmissing-prototypes \ +# -Wmissing-declarations -Wpointer-arith # optimize for SPEED #CFLAGS += -O3 -funroll-all-loops -#add -fomit-frame-pointer. hinders debugging! -#CFLAGS += -fomit-frame-pointer +# add -fomit-frame-pointer. hinders debugging! +CFLAGS += -fomit-frame-pointer # optimize for SIZE -CFLAGS += -Os -DSMALL_CODE +CFLAGS += -Os -DLTC_SMALL_CODE + +# older GCCs can't handle the "rotate with immediate" ROLc/RORc/etc macros +# define this to help +#CFLAGS += -DLTC_NO_ROLC # compile for DEBUGING (required for ccmalloc checking!!!) -#CFLAGS += -g3 - -#These flags control how the library gets built. +#CFLAGS += -g3 -DLTC_NO_ASM #Output filenames for various targets. LIBNAME=libtomcrypt.a @@ -39,6 +44,7 @@ CRYPT=encrypt SMALL=small PROF=x86_prof TV=tv_gen +MULTI=multi #LIBPATH-The directory for libtomcrypt to be installed to. #INCPATH-The directory to install the header files for libtomcrypt. @@ -48,78 +54,87 @@ LIBPATH=/usr/lib INCPATH=/usr/include DATAPATH=/usr/share/doc/libtomcrypt/pdf +#Who do we install as? +USER=root +GROUP=root + #List of objects to compile. #Leave MPI built-in or force developer to link against libtommath? -MPIOBJECT=mpi.o +MPIOBJECT=src/misc/mpi/mpi.o -OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \ -\ -crypt.o crypt_find_cipher.o crypt_find_hash_any.o \ -crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \ -crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \ -crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \ -crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \ -crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \ -crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \ -\ -sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \ -\ -rand_prime.o is_prime.o \ -\ -ecc.o dh.o \ -\ -rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \ -rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \ -rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \ -\ -dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \ -dsa_verify_hash.o dsa_verify_key.o \ -\ -aes.o aes_enc.o \ -\ -blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \ -rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \ -\ -md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \ -rmd128.o rmd160.o chc.o \ -\ -packet_store_header.o packet_valid_header.o \ -\ -eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \ -eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \ -\ -ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \ -ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \ -ocb_shift_xor.o ocb_test.o s_ocb_done.o \ -\ -omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \ -\ -pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \ -pmac_shift_xor.o pmac_test.o \ -\ -cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \ -cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \ -ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \ -ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \ -ecb_start.o ecb_encrypt.o ecb_decrypt.o \ -\ -hash_file.o hash_filehandle.o hash_memory.o \ -\ -hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \ -\ -pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \ -pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \ -pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \ -\ -pkcs_5_1.o pkcs_5_2.o \ -\ -der_encode_integer.o der_decode_integer.o der_length_integer.o \ -der_put_multi_integer.o der_get_multi_integer.o \ -\ -burn_stack.o zeromem.o \ -\ -$(MPIOBJECT) + +OBJECTS=src/ciphers/aes/aes_enc.o $(MPIOBJECT) src/ciphers/aes/aes.o \ +src/ciphers/anubis.o src/ciphers/blowfish.o src/ciphers/cast5.o src/ciphers/des.o \ +src/ciphers/khazad.o src/ciphers/noekeon.o src/ciphers/rc2.o src/ciphers/rc5.o \ +src/ciphers/rc6.o src/ciphers/safer/safer.o src/ciphers/safer/safer_tab.o \ +src/ciphers/safer/saferp.o src/ciphers/skipjack.o src/ciphers/twofish/twofish.o \ +src/ciphers/xtea.o src/encauth/eax/eax_addheader.o src/encauth/eax/eax_decrypt.o \ +src/encauth/eax/eax_decrypt_verify_memory.o src/encauth/eax/eax_done.o \ +src/encauth/eax/eax_encrypt.o src/encauth/eax/eax_encrypt_authenticate_memory.o \ +src/encauth/eax/eax_init.o src/encauth/eax/eax_test.o \ +src/encauth/ocb/ocb_decrypt.o src/encauth/ocb/ocb_decrypt_verify_memory.o \ +src/encauth/ocb/ocb_done_decrypt.o src/encauth/ocb/ocb_done_encrypt.o \ +src/encauth/ocb/ocb_encrypt.o src/encauth/ocb/ocb_encrypt_authenticate_memory.o \ +src/encauth/ocb/ocb_init.o src/encauth/ocb/ocb_ntz.o \ +src/encauth/ocb/ocb_shift_xor.o src/encauth/ocb/ocb_test.o \ +src/encauth/ocb/s_ocb_done.o src/hashes/chc/chc.o src/hashes/helper/hash_file.o \ +src/hashes/helper/hash_filehandle.o src/hashes/helper/hash_memory.o \ +src/hashes/helper/hash_memory_multi.o src/hashes/md2.o src/hashes/md4.o \ +src/hashes/md5.o src/hashes/rmd128.o src/hashes/rmd160.o src/hashes/sha1.o \ +src/hashes/sha2/sha256.o src/hashes/sha2/sha512.o src/hashes/tiger.o \ +src/hashes/whirl/whirl.o src/mac/hmac/hmac_done.o src/mac/hmac/hmac_file.o \ +src/mac/hmac/hmac_init.o src/mac/hmac/hmac_memory.o \ +src/mac/hmac/hmac_memory_multi.o src/mac/hmac/hmac_process.o \ +src/mac/hmac/hmac_test.o src/mac/omac/omac_done.o src/mac/omac/omac_file.o \ +src/mac/omac/omac_init.o src/mac/omac/omac_memory.o \ +src/mac/omac/omac_memory_multi.o src/mac/omac/omac_process.o \ +src/mac/omac/omac_test.o src/mac/pmac/pmac_done.o src/mac/pmac/pmac_file.o \ +src/mac/pmac/pmac_init.o src/mac/pmac/pmac_memory.o \ +src/mac/pmac/pmac_memory_multi.o src/mac/pmac/pmac_ntz.o \ +src/mac/pmac/pmac_process.o src/mac/pmac/pmac_shift_xor.o src/mac/pmac/pmac_test.o \ +src/misc/base64/base64_decode.o src/misc/base64/base64_encode.o \ +src/misc/burn_stack.o src/misc/crypt/crypt.o src/misc/crypt/crypt_argchk.o \ +src/misc/crypt/crypt_cipher_descriptor.o src/misc/crypt/crypt_cipher_is_valid.o \ +src/misc/crypt/crypt_find_cipher.o src/misc/crypt/crypt_find_cipher_any.o \ +src/misc/crypt/crypt_find_cipher_id.o src/misc/crypt/crypt_find_hash.o \ +src/misc/crypt/crypt_find_hash_any.o src/misc/crypt/crypt_find_hash_id.o \ +src/misc/crypt/crypt_find_prng.o src/misc/crypt/crypt_hash_descriptor.o \ +src/misc/crypt/crypt_hash_is_valid.o src/misc/crypt/crypt_prng_descriptor.o \ +src/misc/crypt/crypt_prng_is_valid.o src/misc/crypt/crypt_register_cipher.o \ +src/misc/crypt/crypt_register_hash.o src/misc/crypt/crypt_register_prng.o \ +src/misc/crypt/crypt_unregister_cipher.o src/misc/crypt/crypt_unregister_hash.o \ +src/misc/crypt/crypt_unregister_prng.o src/misc/error_to_string.o \ +src/misc/mpi/is_prime.o src/misc/mpi/mpi_to_ltc_error.o src/misc/mpi/rand_prime.o \ +src/misc/pkcs5/pkcs_5_1.o src/misc/pkcs5/pkcs_5_2.o src/misc/zeromem.o \ +src/modes/cbc/cbc_decrypt.o src/modes/cbc/cbc_encrypt.o src/modes/cbc/cbc_getiv.o \ +src/modes/cbc/cbc_setiv.o src/modes/cbc/cbc_start.o src/modes/cfb/cfb_decrypt.o \ +src/modes/cfb/cfb_encrypt.o src/modes/cfb/cfb_getiv.o src/modes/cfb/cfb_setiv.o \ +src/modes/cfb/cfb_start.o src/modes/ctr/ctr_decrypt.o src/modes/ctr/ctr_encrypt.o \ +src/modes/ctr/ctr_getiv.o src/modes/ctr/ctr_setiv.o src/modes/ctr/ctr_start.o \ +src/modes/ecb/ecb_decrypt.o src/modes/ecb/ecb_encrypt.o src/modes/ecb/ecb_start.o \ +src/modes/ofb/ofb_decrypt.o src/modes/ofb/ofb_encrypt.o src/modes/ofb/ofb_getiv.o \ +src/modes/ofb/ofb_setiv.o src/modes/ofb/ofb_start.o \ +src/pk/asn1/der/der_decode_integer.o src/pk/asn1/der/der_encode_integer.o \ +src/pk/asn1/der/der_get_multi_integer.o src/pk/asn1/der/der_length_integer.o \ +src/pk/asn1/der/der_put_multi_integer.o src/pk/dh/dh.o src/pk/dsa/dsa_export.o \ +src/pk/dsa/dsa_free.o src/pk/dsa/dsa_import.o src/pk/dsa/dsa_make_key.o \ +src/pk/dsa/dsa_sign_hash.o src/pk/dsa/dsa_verify_hash.o \ +src/pk/dsa/dsa_verify_key.o src/pk/ecc/ecc.o src/pk/packet_store_header.o \ +src/pk/packet_valid_header.o src/pk/pkcs1/pkcs_1_i2osp.o \ +src/pk/pkcs1/pkcs_1_mgf1.o src/pk/pkcs1/pkcs_1_oaep_decode.o \ +src/pk/pkcs1/pkcs_1_oaep_encode.o src/pk/pkcs1/pkcs_1_os2ip.o \ +src/pk/pkcs1/pkcs_1_pss_decode.o src/pk/pkcs1/pkcs_1_pss_encode.o \ +src/pk/pkcs1/pkcs_1_v15_es_decode.o src/pk/pkcs1/pkcs_1_v15_es_encode.o \ +src/pk/pkcs1/pkcs_1_v15_sa_decode.o src/pk/pkcs1/pkcs_1_v15_sa_encode.o \ +src/pk/rsa/rsa_decrypt_key.o src/pk/rsa/rsa_encrypt_key.o src/pk/rsa/rsa_export.o \ +src/pk/rsa/rsa_exptmod.o src/pk/rsa/rsa_free.o src/pk/rsa/rsa_import.o \ +src/pk/rsa/rsa_make_key.o src/pk/rsa/rsa_sign_hash.o \ +src/pk/rsa/rsa_v15_decrypt_key.o src/pk/rsa/rsa_v15_encrypt_key.o \ +src/pk/rsa/rsa_v15_sign_hash.o src/pk/rsa/rsa_v15_verify_hash.o \ +src/pk/rsa/rsa_verify_hash.o src/prngs/fortuna.o src/prngs/rc4.o \ +src/prngs/rng_get_bytes.o src/prngs/rng_make_prng.o src/prngs/sober128.o \ +src/prngs/sprng.o src/prngs/yarrow.o TESTOBJECTS=demos/test.o HASHOBJECTS=demos/hashsum.o @@ -127,6 +142,7 @@ CRYPTOBJECTS=demos/encrypt.o SMALLOBJECTS=demos/small.o PROFS=demos/x86_prof.o TVS=demos/tv_gen.o +MULTIS=demos/multi.o #Files left over from making the crypt.pdf. LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind *.out @@ -135,32 +151,33 @@ LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind *.out COMPRESSED=crypt-$(VERSION).tar.bz2 crypt-$(VERSION).zip #Header files used by libtomcrypt. -HEADERS=ltc_tommath.h mycrypt_cfg.h \ -mycrypt_misc.h mycrypt_prng.h mycrypt_cipher.h mycrypt_hash.h \ -mycrypt_macros.h mycrypt_pk.h mycrypt.h mycrypt_argchk.h \ -mycrypt_custom.h mycrypt_pkcs.h tommath_class.h tommath_superclass.h +HEADERS=src/headers/ltc_tommath.h src/headers/tomcrypt_cfg.h \ +src/headers/tomcrypt_misc.h src/headers/tomcrypt_prng.h src/headers/tomcrypt_cipher.h src/headers/tomcrypt_hash.h \ +src/headers/tomcrypt_macros.h src/headers/tomcrypt_pk.h src/headers/tomcrypt.h src/headers/tomcrypt_argchk.h \ +src/headers/tomcrypt_custom.h src/headers/tomcrypt_pkcs.h src/headers/tommath_class.h src/headers/tommath_superclass.h #The default rule for make builds the libtomcrypt library. default:library #ciphers come in two flavours... enc+dec and enc -aes_enc.o: aes.c aes_tab.c - $(CC) $(CFLAGS) -DENCRYPT_ONLY -c aes.c -o aes_enc.o +src/ciphers/aes/aes_enc.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c + $(CC) $(CFLAGS) -DENCRYPT_ONLY -c src/ciphers/aes/aes.c -o src/ciphers/aes/aes_enc.o #These are the rules to make certain object files. -aes.o: aes.c aes_tab.c -twofish.o: twofish.c twofish_tab.c -whirl.o: whirl.c whirltab.c -ecc.o: ecc.c ecc_sys.c -dh.o: dh.c dh_sys.c -sha512.o: sha512.c sha384.c -sha256.o: sha256.c sha224.c +src/ciphers/aes/aes.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c +src/ciphers/twofish/twofish.o: src/ciphers/twofish/twofish.c src/ciphers/twofish/twofish_tab.c +src/hashes/whirl/whirl.o: src/hashes/whirl/whirl.c src/hashes/whirl/whirltab.c +src/pk/ecc/ecc.o: src/pk/ecc/ecc.c src/pk/ecc/ecc_sys.c +src/pk/dh/dh.o: src/pk/dh/dh.c src/pk/dh/dh_sys.c +src/hashes/sha2/sha512.o: src/hashes/sha2/sha512.c src/hashes/sha2/sha384.c +src/hashes/sha2/sha256.o: src/hashes/sha2/sha256.c src/hashes/sha2/sha224.c #This rule makes the libtomcrypt library. library: $(LIBNAME) $(LIBNAME): $(OBJECTS) $(AR) $(ARFLAGS) $@ $(OBJECTS) + ranlib $(LIBNAME) #This rule makes the hash program included with libtomcrypt hashsum: library $(HASHOBJECTS) @@ -180,32 +197,48 @@ x86_prof: library $(PROFS) tv_gen: library $(TVS) $(CC) $(TVS) $(LIBNAME) $(EXTRALIBS) -o $(TV) +multi: library $(MULTIS) + $(CC) $(MULTIS) $(LIBNAME) -o multi + #This rule installs the library and the header files. This must be run #as root in order to have a high enough permission to write to the correct #directories and to set the owner and group to root. install: library docs - install -d -g root -o root $(DESTDIR)$(LIBPATH) - install -d -g root -o root $(DESTDIR)$(INCPATH) - install -d -g root -o root $(DESTDIR)$(DATAPATH) - install -g root -o root $(LIBNAME) $(DESTDIR)$(LIBPATH) - install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH) - install -g root -o root doc/crypt.pdf $(DESTDIR)$(DATAPATH) + install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(LIBPATH) + install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(INCPATH) + install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(DATAPATH) + install -g $(GROUP) -o $(USER) $(LIBNAME) $(DESTDIR)$(LIBPATH) + install -g $(GROUP) -o $(USER) $(HEADERS) $(DESTDIR)$(INCPATH) + install -g $(GROUP) -o $(USER) doc/crypt.pdf $(DESTDIR)$(DATAPATH) install_lib: library - install -d -g root -o root $(DESTDIR)$(LIBPATH) - install -d -g root -o root $(DESTDIR)$(INCPATH) - install -g root -o root $(LIBNAME) $(DESTDIR)$(LIBPATH) - install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH) + install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(LIBPATH) + install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(INCPATH) + install -g $(GROUP) -o $(USER) $(LIBNAME) $(DESTDIR)$(LIBPATH) + install -g $(GROUP) -o $(USER) $(HEADERS) $(DESTDIR)$(INCPATH) #This rule cleans the source tree of all compiled code, not including the pdf #documentation. clean: - rm -f $(OBJECTS) $(TESTOBJECTS) $(HASHOBJECTS) $(CRYPTOBJECTS) $(SMALLOBJECTS) $(LEFTOVERS) $(LIBNAME) - rm -f $(TEST) $(HASH) $(COMPRESSED) $(PROFS) $(PROF) $(TVS) $(TV) - rm -f *.la *.lo *.o *.a *.dll *stackdump *.lib *.exe *.obj demos/*.obj demos/*.o *.bat *.txt *.il *.da demos/*.il demos/*.da *.dyn *.dpi \ - *.gcda *.gcno demos/*.gcno demos/*.gcda *~ doc/* - cd demos/test ; make clean - rm -rf .libs demos/.libs demos/test/.libs + rm -f `find . -type f | grep "[.]o" | xargs` + rm -f `find . -type f | grep "[.]lo" | xargs` + rm -f `find . -type f | grep "[.]a" | xargs` + rm -f `find . -type f | grep "[.]la" | xargs` + rm -f `find . -type f | grep "[.]obj" | xargs` + rm -f `find . -type f | grep "[.]lib" | xargs` + rm -f `find . -type f | grep "[.]exe" | xargs` + rm -rf `find . -type d | grep "[.]libs" | xargs` + rm -f crypt.aux crypt.dvi crypt.idx crypt.ilg crypt.ind crypt.log crypt.toc + rm -f $(TV) $(PROF) $(SMALL) $(CRYPT) $(HASHSUM) $(MULTI) + cd demos/test ; make clean + rm -rf doc/doxygen + rm -f doc/*.pdf + +#build the doxy files (requires Doxygen, tetex and patience) +doxy: + doxygen + cd doc/doxygen/latex ; make ; mv -f refman.pdf ../../. + echo The huge doxygen PDF should be available as doc/refman.pdf #This builds the crypt.pdf file. Note that the rm -f *.pdf has been removed #from the clean command! This is because most people would like to keep the @@ -229,10 +262,6 @@ docdvi: crypt.tex makeindex crypt.idx latex crypt > /dev/null -#pretty build -pretty: - perl pretty.build - #for GCC 3.4+ profiled: make clean @@ -244,6 +273,7 @@ profiled: #zipup the project (take that!) zipup: clean docs cd .. ; rm -rf crypt* libtomcrypt-$(VERSION) ; mkdir libtomcrypt-$(VERSION) ; \ - cp -R ./libtomcrypt/* ./libtomcrypt-$(VERSION)/ ; tar -c libtomcrypt-$(VERSION)/* > crypt-$(VERSION).tar ; \ - bzip2 -9vv crypt-$(VERSION).tar ; zip -9 -r crypt-$(VERSION).zip libtomcrypt-$(VERSION)/* ; \ + cp -R ./libtomcrypt/* ./libtomcrypt-$(VERSION)/ ; \ + tar -cjvf crypt-$(VERSION).tar.bz2 libtomcrypt-$(VERSION)/* ; \ + zip -9 -r crypt-$(VERSION).zip libtomcrypt-$(VERSION)/* ; \ gpg -b -a crypt-$(VERSION).tar.bz2 ; gpg -b -a crypt-$(VERSION).zip diff --git a/makefile.cygwin_dll b/makefile.cygwin_dll index 5e11b7c..a1f3696 100644 --- a/makefile.cygwin_dll +++ b/makefile.cygwin_dll @@ -4,7 +4,7 @@ default: ltc_dll # Compilation flags. Note the += does not write over the user's CFLAGS! -CFLAGS += -I./ -Wall -Wsign-compare -W -Wno-unused -Wshadow -mno-cygwin -DWIN32 +CFLAGS += -I./src/headers/ -Wall -Wsign-compare -W -Wno-unused -Wshadow -mno-cygwin -DWIN32 -DLTC_NO_ROLC # optimize for SPEED CFLAGS += -O3 -funroll-all-loops @@ -16,80 +16,102 @@ CFLAGS += -fomit-frame-pointer #CFLAGS += -Os #Leave MPI built-in or force developer to link against libtommath? -MPIOBJECT=mpi.o +MPIOBJECT=src/misc/mpi/mpi.o -OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \ -\ -crypt.o crypt_find_cipher.o crypt_find_hash_any.o \ -crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \ -crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \ -crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \ -crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \ -crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \ -crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \ -\ -sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \ -\ -rand_prime.o is_prime.o \ -\ -ecc.o dh.o \ -\ -rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \ -rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \ -rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \ -\ -dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \ -dsa_verify_hash.o dsa_verify_key.o \ -\ -aes.o aes_enc.o \ -\ -blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \ -rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \ -\ -md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \ -rmd128.o rmd160.o chc.o \ -\ -packet_store_header.o packet_valid_header.o \ -\ -eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \ -eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \ -\ -ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \ -ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \ -ocb_shift_xor.o ocb_test.o s_ocb_done.o \ -\ -omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \ -\ -pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \ -pmac_shift_xor.o pmac_test.o \ -\ -cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \ -cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \ -ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \ -ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \ -ecb_start.o ecb_encrypt.o ecb_decrypt.o \ -\ -hash_file.o hash_filehandle.o hash_memory.o \ -\ -hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \ -\ -pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \ -pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \ -pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \ -\ -pkcs_5_1.o pkcs_5_2.o \ -\ -der_encode_integer.o der_decode_integer.o der_length_integer.o \ -der_put_multi_integer.o der_get_multi_integer.o \ -\ -burn_stack.o zeromem.o \ -\ -$(MPIOBJECT) +OBJECTS=src/ciphers/aes/aes_enc.o $(MPIOBJECT) src/ciphers/aes/aes.o \ +src/ciphers/anubis.o src/ciphers/blowfish.o src/ciphers/cast5.o src/ciphers/des.o \ +src/ciphers/khazad.o src/ciphers/noekeon.o src/ciphers/rc2.o src/ciphers/rc5.o \ +src/ciphers/rc6.o src/ciphers/safer/safer.o src/ciphers/safer/safer_tab.o \ +src/ciphers/safer/saferp.o src/ciphers/skipjack.o src/ciphers/twofish/twofish.o \ +src/ciphers/xtea.o src/encauth/eax/eax_addheader.o src/encauth/eax/eax_decrypt.o \ +src/encauth/eax/eax_decrypt_verify_memory.o src/encauth/eax/eax_done.o \ +src/encauth/eax/eax_encrypt.o src/encauth/eax/eax_encrypt_authenticate_memory.o \ +src/encauth/eax/eax_init.o src/encauth/eax/eax_test.o \ +src/encauth/ocb/ocb_decrypt.o src/encauth/ocb/ocb_decrypt_verify_memory.o \ +src/encauth/ocb/ocb_done_decrypt.o src/encauth/ocb/ocb_done_encrypt.o \ +src/encauth/ocb/ocb_encrypt.o src/encauth/ocb/ocb_encrypt_authenticate_memory.o \ +src/encauth/ocb/ocb_init.o src/encauth/ocb/ocb_ntz.o \ +src/encauth/ocb/ocb_shift_xor.o src/encauth/ocb/ocb_test.o \ +src/encauth/ocb/s_ocb_done.o src/hashes/chc/chc.o src/hashes/helper/hash_file.o \ +src/hashes/helper/hash_filehandle.o src/hashes/helper/hash_memory.o \ +src/hashes/helper/hash_memory_multi.o src/hashes/md2.o src/hashes/md4.o \ +src/hashes/md5.o src/hashes/rmd128.o src/hashes/rmd160.o src/hashes/sha1.o \ +src/hashes/sha2/sha256.o src/hashes/sha2/sha512.o src/hashes/tiger.o \ +src/hashes/whirl/whirl.o src/mac/hmac/hmac_done.o src/mac/hmac/hmac_file.o \ +src/mac/hmac/hmac_init.o src/mac/hmac/hmac_memory.o \ +src/mac/hmac/hmac_memory_multi.o src/mac/hmac/hmac_process.o \ +src/mac/hmac/hmac_test.o src/mac/omac/omac_done.o src/mac/omac/omac_file.o \ +src/mac/omac/omac_init.o src/mac/omac/omac_memory.o \ +src/mac/omac/omac_memory_multi.o src/mac/omac/omac_process.o \ +src/mac/omac/omac_test.o src/mac/pmac/pmac_done.o src/mac/pmac/pmac_file.o \ +src/mac/pmac/pmac_init.o src/mac/pmac/pmac_memory.o \ +src/mac/pmac/pmac_memory_multi.o src/mac/pmac/pmac_ntz.o \ +src/mac/pmac/pmac_process.o src/mac/pmac/pmac_shift_xor.o src/mac/pmac/pmac_test.o \ +src/misc/base64/base64_decode.o src/misc/base64/base64_encode.o \ +src/misc/burn_stack.o src/misc/crypt/crypt.o src/misc/crypt/crypt_argchk.o \ +src/misc/crypt/crypt_cipher_descriptor.o src/misc/crypt/crypt_cipher_is_valid.o \ +src/misc/crypt/crypt_find_cipher.o src/misc/crypt/crypt_find_cipher_any.o \ +src/misc/crypt/crypt_find_cipher_id.o src/misc/crypt/crypt_find_hash.o \ +src/misc/crypt/crypt_find_hash_any.o src/misc/crypt/crypt_find_hash_id.o \ +src/misc/crypt/crypt_find_prng.o src/misc/crypt/crypt_hash_descriptor.o \ +src/misc/crypt/crypt_hash_is_valid.o src/misc/crypt/crypt_prng_descriptor.o \ +src/misc/crypt/crypt_prng_is_valid.o src/misc/crypt/crypt_register_cipher.o \ +src/misc/crypt/crypt_register_hash.o src/misc/crypt/crypt_register_prng.o \ +src/misc/crypt/crypt_unregister_cipher.o src/misc/crypt/crypt_unregister_hash.o \ +src/misc/crypt/crypt_unregister_prng.o src/misc/error_to_string.o \ +src/misc/mpi/is_prime.o src/misc/mpi/mpi_to_ltc_error.o src/misc/mpi/rand_prime.o \ +src/misc/pkcs5/pkcs_5_1.o src/misc/pkcs5/pkcs_5_2.o src/misc/zeromem.o \ +src/modes/cbc/cbc_decrypt.o src/modes/cbc/cbc_encrypt.o src/modes/cbc/cbc_getiv.o \ +src/modes/cbc/cbc_setiv.o src/modes/cbc/cbc_start.o src/modes/cfb/cfb_decrypt.o \ +src/modes/cfb/cfb_encrypt.o src/modes/cfb/cfb_getiv.o src/modes/cfb/cfb_setiv.o \ +src/modes/cfb/cfb_start.o src/modes/ctr/ctr_decrypt.o src/modes/ctr/ctr_encrypt.o \ +src/modes/ctr/ctr_getiv.o src/modes/ctr/ctr_setiv.o src/modes/ctr/ctr_start.o \ +src/modes/ecb/ecb_decrypt.o src/modes/ecb/ecb_encrypt.o src/modes/ecb/ecb_start.o \ +src/modes/ofb/ofb_decrypt.o src/modes/ofb/ofb_encrypt.o src/modes/ofb/ofb_getiv.o \ +src/modes/ofb/ofb_setiv.o src/modes/ofb/ofb_start.o \ +src/pk/asn1/der/der_decode_integer.o src/pk/asn1/der/der_encode_integer.o \ +src/pk/asn1/der/der_get_multi_integer.o src/pk/asn1/der/der_length_integer.o \ +src/pk/asn1/der/der_put_multi_integer.o src/pk/dh/dh.o src/pk/dsa/dsa_export.o \ +src/pk/dsa/dsa_free.o src/pk/dsa/dsa_import.o src/pk/dsa/dsa_make_key.o \ +src/pk/dsa/dsa_sign_hash.o src/pk/dsa/dsa_verify_hash.o \ +src/pk/dsa/dsa_verify_key.o src/pk/ecc/ecc.o src/pk/packet_store_header.o \ +src/pk/packet_valid_header.o src/pk/pkcs1/pkcs_1_i2osp.o \ +src/pk/pkcs1/pkcs_1_mgf1.o src/pk/pkcs1/pkcs_1_oaep_decode.o \ +src/pk/pkcs1/pkcs_1_oaep_encode.o src/pk/pkcs1/pkcs_1_os2ip.o \ +src/pk/pkcs1/pkcs_1_pss_decode.o src/pk/pkcs1/pkcs_1_pss_encode.o \ +src/pk/pkcs1/pkcs_1_v15_es_decode.o src/pk/pkcs1/pkcs_1_v15_es_encode.o \ +src/pk/pkcs1/pkcs_1_v15_sa_decode.o src/pk/pkcs1/pkcs_1_v15_sa_encode.o \ +src/pk/rsa/rsa_decrypt_key.o src/pk/rsa/rsa_encrypt_key.o src/pk/rsa/rsa_export.o \ +src/pk/rsa/rsa_exptmod.o src/pk/rsa/rsa_free.o src/pk/rsa/rsa_import.o \ +src/pk/rsa/rsa_make_key.o src/pk/rsa/rsa_sign_hash.o \ +src/pk/rsa/rsa_v15_decrypt_key.o src/pk/rsa/rsa_v15_encrypt_key.o \ +src/pk/rsa/rsa_v15_sign_hash.o src/pk/rsa/rsa_v15_verify_hash.o \ +src/pk/rsa/rsa_verify_hash.o src/prngs/fortuna.o src/prngs/rc4.o \ +src/prngs/rng_get_bytes.o src/prngs/rng_make_prng.o src/prngs/sober128.o \ +src/prngs/sprng.o src/prngs/yarrow.o + +#Header files used by libtomcrypt. +HEADERS=src/headers/ltc_tommath.h src/headers/tomcrypt_cfg.h \ +src/headers/tomcrypt_misc.h src/headers/tomcrypt_prng.h src/headers/tomcrypt_cipher.h src/headers/tomcrypt_hash.h \ +src/headers/tomcrypt_macros.h src/headers/tomcrypt_pk.h src/headers/tomcrypt.h src/headers/tomcrypt_argchk.h \ +src/headers/tomcrypt_custom.h src/headers/tomcrypt_pkcs.h src/headers/tommath_class.h src/headers/tommath_superclass.h #ciphers come in two flavours... enc+dec and enc -aes_enc.o: aes.c aes_tab.c - $(CC) $(CFLAGS) -DENCRYPT_ONLY -c aes.c -o aes_enc.o +src/ciphers/aes/aes_enc.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c + $(CC) $(CFLAGS) -DENCRYPT_ONLY -c src/ciphers/aes/aes.c -o src/ciphers/aes/aes_enc.o + +#These are the rules to make certain object files. +src/ciphers/aes/aes.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c +src/ciphers/twofish/twofish.o: src/ciphers/twofish/twofish.c src/ciphers/twofish/twofish_tab.c +src/hashes/whirl/whirl.o: src/hashes/whirl/whirl.c src/hashes/whirl/whirltab.c +src/pk/ecc/ecc.o: src/pk/ecc/ecc.c src/pk/ecc/ecc_sys.c +src/pk/dh/dh.o: src/pk/dh/dh.c src/pk/dh/dh_sys.c +src/hashes/sha2/sha512.o: src/hashes/sha2/sha512.c src/hashes/sha2/sha384.c +src/hashes/sha2/sha256.o: src/hashes/sha2/sha256.c src/hashes/sha2/sha224.c ltc_dll: $(OBJECTS) $(MPIOBJECT) - gcc -mno-cygwin -mdll -o libtomcrypt.dll -Wl,--out-implib=libtomcrypt.dll.a -Wl,--export-all-symbols *.o -ladvapi32 + gcc -mno-cygwin -mdll -o libtomcrypt.dll -Wl,--out-implib=libtomcrypt.dll.a -Wl,--export-all-symbols `find . -type f | grep [.]o | xargs` -ladvapi32 ranlib libtomcrypt.dll.a + cp -fv src/headers/* /usr/include + cp -fv *.a /usr/lib + cp -fv *.dll /usr/bin diff --git a/makefile.icc b/makefile.icc index ee7ba54..cd01c0b 100644 --- a/makefile.icc +++ b/makefile.icc @@ -22,7 +22,7 @@ CC=icc #ARFLAGS=r # Compilation flags. Note the += does not write over the user's CFLAGS! -CFLAGS += -c -I./ -DINTEL_CC +CFLAGS += -c -I./src/headers/ -DINTEL_CC #The default rule for make builds the libtomcrypt library. default:library @@ -30,15 +30,15 @@ default:library # optimize for SPEED # # -mcpu= can be pentium, pentiumpro (covers PII through PIII) or pentium4 -# -ax? specifies make code specifically for ? but compatible with IA-32 -# -x? specifies compile solely for ? [not specifically IA-32 compatible] +# -ax? specifies make code specifically for ? but compatible with IA-32 +# -x? specifies compile solely for ? [not specifically IA-32 compatible] # # where ? is -# K - PIII -# W - first P4 [Williamette] -# N - P4 Northwood -# P - P4 Prescott -# B - Blend of P4 and PM [mobile] +# K - PIII +# W - first P4 [Williamette] +# N - P4 Northwood +# P - P4 Prescott +# B - Blend of P4 and PM [mobile] # # Default to just generic max opts CFLAGS += -O3 -xN -ip @@ -67,76 +67,79 @@ DATAPATH=/usr/share/doc/libtomcrypt/pdf #List of objects to compile. #Leave MPI built-in or force developer to link against libtommath? -MPIOBJECT=mpi.o - -OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \ -\ -crypt.o crypt_find_cipher.o crypt_find_hash_any.o \ -crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \ -crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \ -crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \ -crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \ -crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \ -crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \ -\ -sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \ -\ -rand_prime.o is_prime.o \ -\ -ecc.o dh.o \ -\ -rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \ -rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \ -rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \ -\ -dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \ -dsa_verify_hash.o dsa_verify_key.o \ -\ -aes.o aes_enc.o \ -\ -blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \ -rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \ -\ -md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \ -rmd128.o rmd160.o chc.o \ -\ -packet_store_header.o packet_valid_header.o \ -\ -eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \ -eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \ -\ -ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \ -ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \ -ocb_shift_xor.o ocb_test.o s_ocb_done.o \ -\ -omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \ -\ -pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \ -pmac_shift_xor.o pmac_test.o \ -\ -cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \ -cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \ -ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \ -ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \ -ecb_start.o ecb_encrypt.o ecb_decrypt.o \ -\ -hash_file.o hash_filehandle.o hash_memory.o \ -\ -hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \ -\ -pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \ -pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \ -pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \ -\ -pkcs_5_1.o pkcs_5_2.o \ -\ -der_encode_integer.o der_decode_integer.o der_length_integer.o \ -der_put_multi_integer.o der_get_multi_integer.o \ -\ -burn_stack.o zeromem.o \ -\ -$(MPIOBJECT) +MPIOBJECT=src/misc/mpi/mpi.o +OBJECTS=src/ciphers/aes/aes_enc.o $(MPIOBJECT) src/ciphers/aes/aes.o \ +src/ciphers/anubis.o src/ciphers/blowfish.o src/ciphers/cast5.o src/ciphers/des.o \ +src/ciphers/khazad.o src/ciphers/noekeon.o src/ciphers/rc2.o src/ciphers/rc5.o \ +src/ciphers/rc6.o src/ciphers/safer/safer.o src/ciphers/safer/safer_tab.o \ +src/ciphers/safer/saferp.o src/ciphers/skipjack.o src/ciphers/twofish/twofish.o \ +src/ciphers/xtea.o src/encauth/eax/eax_addheader.o src/encauth/eax/eax_decrypt.o \ +src/encauth/eax/eax_decrypt_verify_memory.o src/encauth/eax/eax_done.o \ +src/encauth/eax/eax_encrypt.o src/encauth/eax/eax_encrypt_authenticate_memory.o \ +src/encauth/eax/eax_init.o src/encauth/eax/eax_test.o \ +src/encauth/ocb/ocb_decrypt.o src/encauth/ocb/ocb_decrypt_verify_memory.o \ +src/encauth/ocb/ocb_done_decrypt.o src/encauth/ocb/ocb_done_encrypt.o \ +src/encauth/ocb/ocb_encrypt.o src/encauth/ocb/ocb_encrypt_authenticate_memory.o \ +src/encauth/ocb/ocb_init.o src/encauth/ocb/ocb_ntz.o \ +src/encauth/ocb/ocb_shift_xor.o src/encauth/ocb/ocb_test.o \ +src/encauth/ocb/s_ocb_done.o src/hashes/chc/chc.o src/hashes/helper/hash_file.o \ +src/hashes/helper/hash_filehandle.o src/hashes/helper/hash_memory.o \ +src/hashes/helper/hash_memory_multi.o src/hashes/md2.o src/hashes/md4.o \ +src/hashes/md5.o src/hashes/rmd128.o src/hashes/rmd160.o src/hashes/sha1.o \ +src/hashes/sha2/sha256.o src/hashes/sha2/sha512.o src/hashes/tiger.o \ +src/hashes/whirl/whirl.o src/mac/hmac/hmac_done.o src/mac/hmac/hmac_file.o \ +src/mac/hmac/hmac_init.o src/mac/hmac/hmac_memory.o \ +src/mac/hmac/hmac_memory_multi.o src/mac/hmac/hmac_process.o \ +src/mac/hmac/hmac_test.o src/mac/omac/omac_done.o src/mac/omac/omac_file.o \ +src/mac/omac/omac_init.o src/mac/omac/omac_memory.o \ +src/mac/omac/omac_memory_multi.o src/mac/omac/omac_process.o \ +src/mac/omac/omac_test.o src/mac/pmac/pmac_done.o src/mac/pmac/pmac_file.o \ +src/mac/pmac/pmac_init.o src/mac/pmac/pmac_memory.o \ +src/mac/pmac/pmac_memory_multi.o src/mac/pmac/pmac_ntz.o \ +src/mac/pmac/pmac_process.o src/mac/pmac/pmac_shift_xor.o src/mac/pmac/pmac_test.o \ +src/misc/base64/base64_decode.o src/misc/base64/base64_encode.o \ +src/misc/burn_stack.o src/misc/crypt/crypt.o src/misc/crypt/crypt_argchk.o \ +src/misc/crypt/crypt_cipher_descriptor.o src/misc/crypt/crypt_cipher_is_valid.o \ +src/misc/crypt/crypt_find_cipher.o src/misc/crypt/crypt_find_cipher_any.o \ +src/misc/crypt/crypt_find_cipher_id.o src/misc/crypt/crypt_find_hash.o \ +src/misc/crypt/crypt_find_hash_any.o src/misc/crypt/crypt_find_hash_id.o \ +src/misc/crypt/crypt_find_prng.o src/misc/crypt/crypt_hash_descriptor.o \ +src/misc/crypt/crypt_hash_is_valid.o src/misc/crypt/crypt_prng_descriptor.o \ +src/misc/crypt/crypt_prng_is_valid.o src/misc/crypt/crypt_register_cipher.o \ +src/misc/crypt/crypt_register_hash.o src/misc/crypt/crypt_register_prng.o \ +src/misc/crypt/crypt_unregister_cipher.o src/misc/crypt/crypt_unregister_hash.o \ +src/misc/crypt/crypt_unregister_prng.o src/misc/error_to_string.o \ +src/misc/mpi/is_prime.o src/misc/mpi/mpi_to_ltc_error.o src/misc/mpi/rand_prime.o \ +src/misc/pkcs5/pkcs_5_1.o src/misc/pkcs5/pkcs_5_2.o src/misc/zeromem.o \ +src/modes/cbc/cbc_decrypt.o src/modes/cbc/cbc_encrypt.o src/modes/cbc/cbc_getiv.o \ +src/modes/cbc/cbc_setiv.o src/modes/cbc/cbc_start.o src/modes/cfb/cfb_decrypt.o \ +src/modes/cfb/cfb_encrypt.o src/modes/cfb/cfb_getiv.o src/modes/cfb/cfb_setiv.o \ +src/modes/cfb/cfb_start.o src/modes/ctr/ctr_decrypt.o src/modes/ctr/ctr_encrypt.o \ +src/modes/ctr/ctr_getiv.o src/modes/ctr/ctr_setiv.o src/modes/ctr/ctr_start.o \ +src/modes/ecb/ecb_decrypt.o src/modes/ecb/ecb_encrypt.o src/modes/ecb/ecb_start.o \ +src/modes/ofb/ofb_decrypt.o src/modes/ofb/ofb_encrypt.o src/modes/ofb/ofb_getiv.o \ +src/modes/ofb/ofb_setiv.o src/modes/ofb/ofb_start.o \ +src/pk/asn1/der/der_decode_integer.o src/pk/asn1/der/der_encode_integer.o \ +src/pk/asn1/der/der_get_multi_integer.o src/pk/asn1/der/der_length_integer.o \ +src/pk/asn1/der/der_put_multi_integer.o src/pk/dh/dh.o src/pk/dsa/dsa_export.o \ +src/pk/dsa/dsa_free.o src/pk/dsa/dsa_import.o src/pk/dsa/dsa_make_key.o \ +src/pk/dsa/dsa_sign_hash.o src/pk/dsa/dsa_verify_hash.o \ +src/pk/dsa/dsa_verify_key.o src/pk/ecc/ecc.o src/pk/packet_store_header.o \ +src/pk/packet_valid_header.o src/pk/pkcs1/pkcs_1_i2osp.o \ +src/pk/pkcs1/pkcs_1_mgf1.o src/pk/pkcs1/pkcs_1_oaep_decode.o \ +src/pk/pkcs1/pkcs_1_oaep_encode.o src/pk/pkcs1/pkcs_1_os2ip.o \ +src/pk/pkcs1/pkcs_1_pss_decode.o src/pk/pkcs1/pkcs_1_pss_encode.o \ +src/pk/pkcs1/pkcs_1_v15_es_decode.o src/pk/pkcs1/pkcs_1_v15_es_encode.o \ +src/pk/pkcs1/pkcs_1_v15_sa_decode.o src/pk/pkcs1/pkcs_1_v15_sa_encode.o \ +src/pk/rsa/rsa_decrypt_key.o src/pk/rsa/rsa_encrypt_key.o src/pk/rsa/rsa_export.o \ +src/pk/rsa/rsa_exptmod.o src/pk/rsa/rsa_free.o src/pk/rsa/rsa_import.o \ +src/pk/rsa/rsa_make_key.o src/pk/rsa/rsa_sign_hash.o \ +src/pk/rsa/rsa_v15_decrypt_key.o src/pk/rsa/rsa_v15_encrypt_key.o \ +src/pk/rsa/rsa_v15_sign_hash.o src/pk/rsa/rsa_v15_verify_hash.o \ +src/pk/rsa/rsa_verify_hash.o src/prngs/fortuna.o src/prngs/rc4.o \ +src/prngs/rng_get_bytes.o src/prngs/rng_make_prng.o src/prngs/sober128.o \ +src/prngs/sprng.o src/prngs/yarrow.o #ciphers come in two flavours... enc+dec and enc aes_enc.o: aes.c aes_tab.c @@ -155,24 +158,30 @@ LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind COMPRESSED=crypt.tar.bz2 crypt.zip crypt.tar.gz #Header files used by libtomcrypt. -HEADERS=ltc_tommath.h mycrypt_cfg.h \ -mycrypt_misc.h mycrypt_prng.h mycrypt_cipher.h mycrypt_hash.h \ -mycrypt_macros.h mycrypt_pk.h mycrypt.h mycrypt_argchk.h mycrypt_custom.h +HEADERS=src/headers/ltc_tommath.h src/headers/tomcrypt_cfg.h \ +src/headers/tomcrypt_misc.h src/headers/tomcrypt_prng.h src/headers/tomcrypt_cipher.h src/headers/tomcrypt_hash.h \ +src/headers/tomcrypt_macros.h src/headers/tomcrypt_pk.h src/headers/tomcrypt.h src/headers/tomcrypt_argchk.h \ +src/headers/tomcrypt_custom.h src/headers/tomcrypt_pkcs.h src/headers/tommath_class.h src/headers/tommath_superclass.h + +#ciphers come in two flavours... enc+dec and enc +src/ciphers/aes/aes_enc.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c + $(CC) $(CFLAGS) -DENCRYPT_ONLY -c src/ciphers/aes/aes.c -o src/ciphers/aes/aes_enc.o #These are the rules to make certain object files. -rsa.o: rsa.c rsa_sys.c -ecc.o: ecc.c ecc_sys.c -dh.o: dh.c dh_sys.c -aes.o: aes.c aes_tab.c -twofish.o: twofish.c twofish_tab.c -sha512.o: sha512.c sha384.c -sha256.o: sha256.c sha224.c +src/ciphers/aes/aes.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c +src/ciphers/twofish/twofish.o: src/ciphers/twofish/twofish.c src/ciphers/twofish/twofish_tab.c +src/hashes/whirl/whirl.o: src/hashes/whirl/whirl.c src/hashes/whirl/whirltab.c +src/pk/ecc/ecc.o: src/pk/ecc/ecc.c src/pk/ecc/ecc_sys.c +src/pk/dh/dh.o: src/pk/dh/dh.c src/pk/dh/dh_sys.c +src/hashes/sha2/sha512.o: src/hashes/sha2/sha512.c src/hashes/sha2/sha384.c +src/hashes/sha2/sha256.o: src/hashes/sha2/sha256.c src/hashes/sha2/sha224.c #This rule makes the libtomcrypt library. library: $(LIBNAME) $(LIBNAME): $(OBJECTS) - $(AR) $(ARFLAGS) $@ $(OBJECTS) + $(AR) $(ARFLAGS) $@ $(OBJECTS) + ranlib $(LIBNAME) #This rule makes the hash program included with libtomcrypt hashsum: library $(HASHOBJECTS) @@ -194,10 +203,10 @@ tv_gen: library $(TVS) profiled: make clean - make CFLAGS="$(CFLAGS) -prof_gen" x86_prof + make -f makefile.icc CFLAGS="$(CFLAGS) -prof_gen" x86_prof ./x86_prof rm *.o *.a x86_prof - make CFLAGS="$(CFLAGS) -prof_use" x86_prof + make -f makefile.icc CFLAGS="$(CFLAGS) -prof_use" x86_prof #This rule installs the library and the header files. This must be run @@ -208,10 +217,3 @@ install: library install -d -g root -o root $(DESTDIR)$(INCPATH) install -g root -o root $(LIBNAME) $(DESTDIR)$(LIBPATH) install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH) - -#This rule cleans the source tree of all compiled code, not including the pdf -#documentation. -clean: - rm -f $(OBJECTS) $(TESTOBJECTS) $(HASHOBJECTS) $(CRYPTOBJECTS) $(SMALLOBJECTS) $(LEFTOVERS) $(LIBNAME) - rm -f $(TEST) $(HASH) $(COMPRESSED) $(PROFS) $(PROF) $(TVS) $(TV) - rm -f *.a *.dll *stackdump *.lib *.exe *.obj demos/*.obj demos/*.o *.bat *.txt *.il *.da demos/*.il demos/*.da *.dyn diff --git a/makefile.msvc b/makefile.msvc index a5b5ef9..f96e213 100644 --- a/makefile.msvc +++ b/makefile.msvc @@ -1,84 +1,88 @@ #MSVC Makefile [tested with MSVC 6.00 with SP5] # #Tom St Denis -CFLAGS = /I. /Ox /DWIN32 /W3 +CFLAGS = /Isrc/headers/ /Ox /DWIN32 /W3 /Fo$@ default: library # leave this blank and link against libtommath if you want better link resolution -MPIOBJECT=mpi.obj +MPIOBJECT=src/misc/mpi/mpi.obj -OBJECTS=error_to_string.obj mpi_to_ltc_error.obj base64_encode.obj base64_decode.obj \ -\ -crypt.obj crypt_find_cipher.obj crypt_find_hash_any.obj \ -crypt_hash_is_valid.obj crypt_register_hash.obj crypt_unregister_prng.obj \ -crypt_argchk.obj crypt_find_cipher_any.obj crypt_find_hash_id.obj \ -crypt_prng_descriptor.obj crypt_register_prng.obj crypt_cipher_descriptor.obj \ -crypt_find_cipher_id.obj crypt_find_prng.obj crypt_prng_is_valid.obj \ -crypt_unregister_cipher.obj crypt_cipher_is_valid.obj crypt_find_hash.obj \ -crypt_hash_descriptor.obj crypt_register_cipher.obj crypt_unregister_hash.obj \ -\ -sober128.obj fortuna.obj sprng.obj yarrow.obj rc4.obj rng_get_bytes.obj rng_make_prng.obj \ -\ -rand_prime.obj is_prime.obj \ -\ -ecc.obj dh.obj \ -\ -rsa_decrypt_key.obj rsa_encrypt_key.obj rsa_exptmod.obj rsa_free.obj rsa_make_key.obj \ -rsa_sign_hash.obj rsa_verify_hash.obj rsa_export.obj rsa_import.obj tim_exptmod.obj \ -rsa_v15_encrypt_key.obj rsa_v15_decrypt_key.obj rsa_v15_sign_hash.obj rsa_v15_verify_hash.obj \ -\ -dsa_export.obj dsa_free.obj dsa_import.obj dsa_make_key.obj dsa_sign_hash.obj \ -dsa_verify_hash.obj dsa_verify_key.obj \ -\ -aes.obj aes_enc.obj \ -\ -blowfish.obj des.obj safer_tab.obj safer.obj saferp.obj rc2.obj xtea.obj \ -rc6.obj rc5.obj cast5.obj noekeon.obj twofish.obj skipjack.obj \ -\ -md2.obj md4.obj md5.obj sha1.obj sha256.obj sha512.obj tiger.obj whirl.obj \ -rmd128.obj rmd160.obj chc.obj \ -\ -packet_store_header.obj packet_valid_header.obj \ -\ -eax_addheader.obj eax_decrypt.obj eax_decrypt_verify_memory.obj eax_done.obj eax_encrypt.obj \ -eax_encrypt_authenticate_memory.obj eax_init.obj eax_test.obj \ -\ -ocb_decrypt.obj ocb_decrypt_verify_memory.obj ocb_done_decrypt.obj ocb_done_encrypt.obj \ -ocb_encrypt.obj ocb_encrypt_authenticate_memory.obj ocb_init.obj ocb_ntz.obj \ -ocb_shift_xor.obj ocb_test.obj s_ocb_done.obj \ -\ -omac_done.obj omac_file.obj omac_init.obj omac_memory.obj omac_process.obj omac_test.obj \ -\ -pmac_done.obj pmac_file.obj pmac_init.obj pmac_memory.obj pmac_ntz.obj pmac_process.obj \ -pmac_shift_xor.obj pmac_test.obj \ -\ -cbc_start.obj cbc_encrypt.obj cbc_decrypt.obj cbc_getiv.obj cbc_setiv.obj \ -cfb_start.obj cfb_encrypt.obj cfb_decrypt.obj cfb_getiv.obj cfb_setiv.obj \ -ofb_start.obj ofb_encrypt.obj ofb_decrypt.obj ofb_getiv.obj ofb_setiv.obj \ -ctr_start.obj ctr_encrypt.obj ctr_decrypt.obj ctr_getiv.obj ctr_setiv.obj \ -ecb_start.obj ecb_encrypt.obj ecb_decrypt.obj \ -\ -hash_file.obj hash_filehandle.obj hash_memory.obj \ -\ -hmac_done.obj hmac_file.obj hmac_init.obj hmac_memory.obj hmac_process.obj hmac_test.obj \ -\ -pkcs_1_mgf1.obj pkcs_1_oaep_encode.obj pkcs_1_oaep_decode.obj \ -pkcs_1_pss_encode.obj pkcs_1_pss_decode.obj pkcs_1_i2osp.obj pkcs_1_os2ip.obj \ -pkcs_1_v15_es_encode.obj pkcs_1_v15_es_decode.obj pkcs_1_v15_sa_encode.obj pkcs_1_v15_sa_decode.obj \ -\ -pkcs_5_1.obj pkcs_5_2.obj \ -\ -der_encode_integer.obj der_decode_integer.obj der_length_integer.obj \ -der_put_multi_integer.obj der_get_multi_integer.obj \ -\ -burn_stack.obj zeromem.obj \ -\ -$(MPIOBJECT) +OBJECTS=src/ciphers/aes/aes_enc.obj $(MPIOBJECT) src/ciphers/aes/aes.obj \ +src/ciphers/anubis.obj src/ciphers/blowfish.obj src/ciphers/cast5.obj src/ciphers/des.obj \ +src/ciphers/khazad.obj src/ciphers/noekeon.obj src/ciphers/rc2.obj src/ciphers/rc5.obj \ +src/ciphers/rc6.obj src/ciphers/safer/safer.obj src/ciphers/safer/safer_tab.obj \ +src/ciphers/safer/saferp.obj src/ciphers/skipjack.obj src/ciphers/twofish/twofish.obj \ +src/ciphers/xtea.obj src/encauth/eax/eax_addheader.obj src/encauth/eax/eax_decrypt.obj \ +src/encauth/eax/eax_decrypt_verify_memory.obj src/encauth/eax/eax_done.obj \ +src/encauth/eax/eax_encrypt.obj src/encauth/eax/eax_encrypt_authenticate_memory.obj \ +src/encauth/eax/eax_init.obj src/encauth/eax/eax_test.obj \ +src/encauth/ocb/ocb_decrypt.obj src/encauth/ocb/ocb_decrypt_verify_memory.obj \ +src/encauth/ocb/ocb_done_decrypt.obj src/encauth/ocb/ocb_done_encrypt.obj \ +src/encauth/ocb/ocb_encrypt.obj src/encauth/ocb/ocb_encrypt_authenticate_memory.obj \ +src/encauth/ocb/ocb_init.obj src/encauth/ocb/ocb_ntz.obj \ +src/encauth/ocb/ocb_shift_xor.obj src/encauth/ocb/ocb_test.obj \ +src/encauth/ocb/s_ocb_done.obj src/hashes/chc/chc.obj src/hashes/helper/hash_file.obj \ +src/hashes/helper/hash_filehandle.obj src/hashes/helper/hash_memory.obj \ +src/hashes/helper/hash_memory_multi.obj src/hashes/md2.obj src/hashes/md4.obj \ +src/hashes/md5.obj src/hashes/rmd128.obj src/hashes/rmd160.obj src/hashes/sha1.obj \ +src/hashes/sha2/sha256.obj src/hashes/sha2/sha512.obj src/hashes/tiger.obj \ +src/hashes/whirl/whirl.obj src/mac/hmac/hmac_done.obj src/mac/hmac/hmac_file.obj \ +src/mac/hmac/hmac_init.obj src/mac/hmac/hmac_memory.obj \ +src/mac/hmac/hmac_memory_multi.obj src/mac/hmac/hmac_process.obj \ +src/mac/hmac/hmac_test.obj src/mac/omac/omac_done.obj src/mac/omac/omac_file.obj \ +src/mac/omac/omac_init.obj src/mac/omac/omac_memory.obj \ +src/mac/omac/omac_memory_multi.obj src/mac/omac/omac_process.obj \ +src/mac/omac/omac_test.obj src/mac/pmac/pmac_done.obj src/mac/pmac/pmac_file.obj \ +src/mac/pmac/pmac_init.obj src/mac/pmac/pmac_memory.obj \ +src/mac/pmac/pmac_memory_multi.obj src/mac/pmac/pmac_ntz.obj \ +src/mac/pmac/pmac_process.obj src/mac/pmac/pmac_shift_xor.obj src/mac/pmac/pmac_test.obj \ +src/misc/base64/base64_decode.obj src/misc/base64/base64_encode.obj \ +src/misc/burn_stack.obj src/misc/crypt/crypt.obj src/misc/crypt/crypt_argchk.obj \ +src/misc/crypt/crypt_cipher_descriptor.obj src/misc/crypt/crypt_cipher_is_valid.obj \ +src/misc/crypt/crypt_find_cipher.obj src/misc/crypt/crypt_find_cipher_any.obj \ +src/misc/crypt/crypt_find_cipher_id.obj src/misc/crypt/crypt_find_hash.obj \ +src/misc/crypt/crypt_find_hash_any.obj src/misc/crypt/crypt_find_hash_id.obj \ +src/misc/crypt/crypt_find_prng.obj src/misc/crypt/crypt_hash_descriptor.obj \ +src/misc/crypt/crypt_hash_is_valid.obj src/misc/crypt/crypt_prng_descriptor.obj \ +src/misc/crypt/crypt_prng_is_valid.obj src/misc/crypt/crypt_register_cipher.obj \ +src/misc/crypt/crypt_register_hash.obj src/misc/crypt/crypt_register_prng.obj \ +src/misc/crypt/crypt_unregister_cipher.obj src/misc/crypt/crypt_unregister_hash.obj \ +src/misc/crypt/crypt_unregister_prng.obj src/misc/error_to_string.obj \ +src/misc/mpi/is_prime.obj src/misc/mpi/mpi_to_ltc_error.obj src/misc/mpi/rand_prime.obj \ +src/misc/pkcs5/pkcs_5_1.obj src/misc/pkcs5/pkcs_5_2.obj src/misc/zeromem.obj \ +src/modes/cbc/cbc_decrypt.obj src/modes/cbc/cbc_encrypt.obj src/modes/cbc/cbc_getiv.obj \ +src/modes/cbc/cbc_setiv.obj src/modes/cbc/cbc_start.obj src/modes/cfb/cfb_decrypt.obj \ +src/modes/cfb/cfb_encrypt.obj src/modes/cfb/cfb_getiv.obj src/modes/cfb/cfb_setiv.obj \ +src/modes/cfb/cfb_start.obj src/modes/ctr/ctr_decrypt.obj src/modes/ctr/ctr_encrypt.obj \ +src/modes/ctr/ctr_getiv.obj src/modes/ctr/ctr_setiv.obj src/modes/ctr/ctr_start.obj \ +src/modes/ecb/ecb_decrypt.obj src/modes/ecb/ecb_encrypt.obj src/modes/ecb/ecb_start.obj \ +src/modes/ofb/ofb_decrypt.obj src/modes/ofb/ofb_encrypt.obj src/modes/ofb/ofb_getiv.obj \ +src/modes/ofb/ofb_setiv.obj src/modes/ofb/ofb_start.obj \ +src/pk/asn1/der/der_decode_integer.obj src/pk/asn1/der/der_encode_integer.obj \ +src/pk/asn1/der/der_get_multi_integer.obj src/pk/asn1/der/der_length_integer.obj \ +src/pk/asn1/der/der_put_multi_integer.obj src/pk/dh/dh.obj src/pk/dsa/dsa_export.obj \ +src/pk/dsa/dsa_free.obj src/pk/dsa/dsa_import.obj src/pk/dsa/dsa_make_key.obj \ +src/pk/dsa/dsa_sign_hash.obj src/pk/dsa/dsa_verify_hash.obj \ +src/pk/dsa/dsa_verify_key.obj src/pk/ecc/ecc.obj src/pk/packet_store_header.obj \ +src/pk/packet_valid_header.obj src/pk/pkcs1/pkcs_1_i2osp.obj \ +src/pk/pkcs1/pkcs_1_mgf1.obj src/pk/pkcs1/pkcs_1_oaep_decode.obj \ +src/pk/pkcs1/pkcs_1_oaep_encode.obj src/pk/pkcs1/pkcs_1_os2ip.obj \ +src/pk/pkcs1/pkcs_1_pss_decode.obj src/pk/pkcs1/pkcs_1_pss_encode.obj \ +src/pk/pkcs1/pkcs_1_v15_es_decode.obj src/pk/pkcs1/pkcs_1_v15_es_encode.obj \ +src/pk/pkcs1/pkcs_1_v15_sa_decode.obj src/pk/pkcs1/pkcs_1_v15_sa_encode.obj \ +src/pk/rsa/rsa_decrypt_key.obj src/pk/rsa/rsa_encrypt_key.obj src/pk/rsa/rsa_export.obj \ +src/pk/rsa/rsa_exptmod.obj src/pk/rsa/rsa_free.obj src/pk/rsa/rsa_import.obj \ +src/pk/rsa/rsa_make_key.obj src/pk/rsa/rsa_sign_hash.obj \ +src/pk/rsa/rsa_v15_decrypt_key.obj src/pk/rsa/rsa_v15_encrypt_key.obj \ +src/pk/rsa/rsa_v15_sign_hash.obj src/pk/rsa/rsa_v15_verify_hash.obj \ +src/pk/rsa/rsa_verify_hash.obj src/prngs/fortuna.obj src/prngs/rc4.obj \ +src/prngs/rng_get_bytes.obj src/prngs/rng_make_prng.obj src/prngs/sober128.obj \ +src/prngs/sprng.obj src/prngs/yarrow.obj -#ciphers come in two flavours... enc+dec and enc -aes_enc.obj: aes.c aes_tab.c - $(CC) $(CFLAGS) /DENCRYPT_ONLY /c aes.c /Foaes_enc.obj +#ciphers come in two flavours... enc+dec and enc +src/ciphers/aes/aes_enc.obj: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c + $(CC) $(CFLAGS) /DENCRYPT_ONLY /c src/ciphers/aes/aes.c /Fosrc/ciphers/aes/aes_enc.obj library: $(OBJECTS) lib /out:tomcrypt.lib $(OBJECTS) diff --git a/makefile.shared b/makefile.shared index 5f5f5b8..be818d7 100644 --- a/makefile.shared +++ b/makefile.shared @@ -1,25 +1,27 @@ # MAKEFILE for linux GCC # +# This makefile produces a shared object and requires libtool to be installed. +# +# Thanks to Zed Shaw for helping debug this on BSD/OSX. # Tom St Denis -# Modified by Clay Culver # The version -VERSION=0:99 +VERSION=0:100 # Compiler and Linker Names -CC=libtool --mode=compile gcc - -# Archiver [makes .a files] -AR=libtool --mode=link +CC=libtool --silent --mode=compile gcc # Compilation flags. Note the += does not write over the user's CFLAGS! -CFLAGS += -c -I./ -Wall -Wsign-compare -W -Wshadow -# -Werror +CFLAGS += -c -I./src/headers/ -Wall -Wsign-compare -W -Wshadow + +# additional warnings (newer GCC 3.4 and higher) +#CFLAGS += -Wsystem-headers -Wdeclaration-after-statement -Wbad-function-cast -Wcast-align -Wstrict-prototypes -Wmissing-prototypes \ +# -Wmissing-declarations -Wpointer-arith # optimize for SPEED CFLAGS += -O3 -funroll-all-loops -#add -fomit-frame-pointer. hinders debugging! +# add -fomit-frame-pointer. hinders debugging! CFLAGS += -fomit-frame-pointer # optimize for SIZE @@ -28,7 +30,9 @@ CFLAGS += -fomit-frame-pointer # compile for DEBUGING (required for ccmalloc checking!!!) #CFLAGS += -g3 -#These flags control how the library gets built. +# older GCCs can't handle the "rotate with immediate" ROLc/RORc/etc macros +# define this to help +#CFLAGS += -DLTC_NO_ROLC #Output filenames for various targets. LIBNAME=libtomcrypt.la @@ -46,81 +50,89 @@ LIBPATH=/usr/lib INCPATH=/usr/include DATAPATH=/usr/share/doc/libtomcrypt/pdf +#Who do we install as? +USER=root +GROUP=root + #List of objects to compile. #Leave MPI built-in or force developer to link against libtommath? -MPIOBJECT=mpi.o +MPIOBJECT=src/misc/mpi/mpi.o #If you don't want mpi.o then add this #MPISHARED=$(LIBPATH)/libtommath.la -OBJECTS=error_to_string.o mpi_to_ltc_error.o base64_encode.o base64_decode.o \ -\ -crypt.o crypt_find_cipher.o crypt_find_hash_any.o \ -crypt_hash_is_valid.o crypt_register_hash.o crypt_unregister_prng.o \ -crypt_argchk.o crypt_find_cipher_any.o crypt_find_hash_id.o \ -crypt_prng_descriptor.o crypt_register_prng.o crypt_cipher_descriptor.o \ -crypt_find_cipher_id.o crypt_find_prng.o crypt_prng_is_valid.o \ -crypt_unregister_cipher.o crypt_cipher_is_valid.o crypt_find_hash.o \ -crypt_hash_descriptor.o crypt_register_cipher.o crypt_unregister_hash.o \ -\ -sober128.o fortuna.o sprng.o yarrow.o rc4.o rng_get_bytes.o rng_make_prng.o \ -\ -rand_prime.o is_prime.o \ -\ -ecc.o dh.o \ -\ -rsa_decrypt_key.o rsa_encrypt_key.o rsa_exptmod.o rsa_free.o rsa_make_key.o \ -rsa_sign_hash.o rsa_verify_hash.o rsa_export.o rsa_import.o tim_exptmod.o \ -rsa_v15_encrypt_key.o rsa_v15_decrypt_key.o rsa_v15_sign_hash.o rsa_v15_verify_hash.o \ -\ -dsa_export.o dsa_free.o dsa_import.o dsa_make_key.o dsa_sign_hash.o \ -dsa_verify_hash.o dsa_verify_key.o \ -\ -aes.o aes_enc.o \ -\ -blowfish.o des.o safer_tab.o safer.o saferp.o rc2.o xtea.o \ -rc6.o rc5.o cast5.o noekeon.o twofish.o skipjack.o \ -\ -md2.o md4.o md5.o sha1.o sha256.o sha512.o tiger.o whirl.o \ -rmd128.o rmd160.o chc.o \ -\ -packet_store_header.o packet_valid_header.o \ -\ -eax_addheader.o eax_decrypt.o eax_decrypt_verify_memory.o eax_done.o eax_encrypt.o \ -eax_encrypt_authenticate_memory.o eax_init.o eax_test.o \ -\ -ocb_decrypt.o ocb_decrypt_verify_memory.o ocb_done_decrypt.o ocb_done_encrypt.o \ -ocb_encrypt.o ocb_encrypt_authenticate_memory.o ocb_init.o ocb_ntz.o \ -ocb_shift_xor.o ocb_test.o s_ocb_done.o \ -\ -omac_done.o omac_file.o omac_init.o omac_memory.o omac_process.o omac_test.o \ -\ -pmac_done.o pmac_file.o pmac_init.o pmac_memory.o pmac_ntz.o pmac_process.o \ -pmac_shift_xor.o pmac_test.o \ -\ -cbc_start.o cbc_encrypt.o cbc_decrypt.o cbc_getiv.o cbc_setiv.o \ -cfb_start.o cfb_encrypt.o cfb_decrypt.o cfb_getiv.o cfb_setiv.o \ -ofb_start.o ofb_encrypt.o ofb_decrypt.o ofb_getiv.o ofb_setiv.o \ -ctr_start.o ctr_encrypt.o ctr_decrypt.o ctr_getiv.o ctr_setiv.o \ -ecb_start.o ecb_encrypt.o ecb_decrypt.o \ -\ -hash_file.o hash_filehandle.o hash_memory.o \ -\ -hmac_done.o hmac_file.o hmac_init.o hmac_memory.o hmac_process.o hmac_test.o \ -\ -pkcs_1_mgf1.o pkcs_1_oaep_encode.o pkcs_1_oaep_decode.o \ -pkcs_1_pss_encode.o pkcs_1_pss_decode.o pkcs_1_i2osp.o pkcs_1_os2ip.o \ -pkcs_1_v15_es_encode.o pkcs_1_v15_es_decode.o pkcs_1_v15_sa_encode.o pkcs_1_v15_sa_decode.o \ -\ -pkcs_5_1.o pkcs_5_2.o \ -\ -der_encode_integer.o der_decode_integer.o der_length_integer.o \ -der_put_multi_integer.o der_get_multi_integer.o \ -\ -burn_stack.o zeromem.o \ -\ -$(MPIOBJECT) +OBJECTS=src/ciphers/aes/aes_enc.o $(MPIOBJECT) src/ciphers/aes/aes.o \ +src/ciphers/anubis.o src/ciphers/blowfish.o src/ciphers/cast5.o src/ciphers/des.o \ +src/ciphers/khazad.o src/ciphers/noekeon.o src/ciphers/rc2.o src/ciphers/rc5.o \ +src/ciphers/rc6.o src/ciphers/safer/safer.o src/ciphers/safer/safer_tab.o \ +src/ciphers/safer/saferp.o src/ciphers/skipjack.o src/ciphers/twofish/twofish.o \ +src/ciphers/xtea.o src/encauth/eax/eax_addheader.o src/encauth/eax/eax_decrypt.o \ +src/encauth/eax/eax_decrypt_verify_memory.o src/encauth/eax/eax_done.o \ +src/encauth/eax/eax_encrypt.o src/encauth/eax/eax_encrypt_authenticate_memory.o \ +src/encauth/eax/eax_init.o src/encauth/eax/eax_test.o \ +src/encauth/ocb/ocb_decrypt.o src/encauth/ocb/ocb_decrypt_verify_memory.o \ +src/encauth/ocb/ocb_done_decrypt.o src/encauth/ocb/ocb_done_encrypt.o \ +src/encauth/ocb/ocb_encrypt.o src/encauth/ocb/ocb_encrypt_authenticate_memory.o \ +src/encauth/ocb/ocb_init.o src/encauth/ocb/ocb_ntz.o \ +src/encauth/ocb/ocb_shift_xor.o src/encauth/ocb/ocb_test.o \ +src/encauth/ocb/s_ocb_done.o src/hashes/chc/chc.o src/hashes/helper/hash_file.o \ +src/hashes/helper/hash_filehandle.o src/hashes/helper/hash_memory.o \ +src/hashes/helper/hash_memory_multi.o src/hashes/md2.o src/hashes/md4.o \ +src/hashes/md5.o src/hashes/rmd128.o src/hashes/rmd160.o src/hashes/sha1.o \ +src/hashes/sha2/sha256.o src/hashes/sha2/sha512.o src/hashes/tiger.o \ +src/hashes/whirl/whirl.o src/mac/hmac/hmac_done.o src/mac/hmac/hmac_file.o \ +src/mac/hmac/hmac_init.o src/mac/hmac/hmac_memory.o \ +src/mac/hmac/hmac_memory_multi.o src/mac/hmac/hmac_process.o \ +src/mac/hmac/hmac_test.o src/mac/omac/omac_done.o src/mac/omac/omac_file.o \ +src/mac/omac/omac_init.o src/mac/omac/omac_memory.o \ +src/mac/omac/omac_memory_multi.o src/mac/omac/omac_process.o \ +src/mac/omac/omac_test.o src/mac/pmac/pmac_done.o src/mac/pmac/pmac_file.o \ +src/mac/pmac/pmac_init.o src/mac/pmac/pmac_memory.o \ +src/mac/pmac/pmac_memory_multi.o src/mac/pmac/pmac_ntz.o \ +src/mac/pmac/pmac_process.o src/mac/pmac/pmac_shift_xor.o src/mac/pmac/pmac_test.o \ +src/misc/base64/base64_decode.o src/misc/base64/base64_encode.o \ +src/misc/burn_stack.o src/misc/crypt/crypt.o src/misc/crypt/crypt_argchk.o \ +src/misc/crypt/crypt_cipher_descriptor.o src/misc/crypt/crypt_cipher_is_valid.o \ +src/misc/crypt/crypt_find_cipher.o src/misc/crypt/crypt_find_cipher_any.o \ +src/misc/crypt/crypt_find_cipher_id.o src/misc/crypt/crypt_find_hash.o \ +src/misc/crypt/crypt_find_hash_any.o src/misc/crypt/crypt_find_hash_id.o \ +src/misc/crypt/crypt_find_prng.o src/misc/crypt/crypt_hash_descriptor.o \ +src/misc/crypt/crypt_hash_is_valid.o src/misc/crypt/crypt_prng_descriptor.o \ +src/misc/crypt/crypt_prng_is_valid.o src/misc/crypt/crypt_register_cipher.o \ +src/misc/crypt/crypt_register_hash.o src/misc/crypt/crypt_register_prng.o \ +src/misc/crypt/crypt_unregister_cipher.o src/misc/crypt/crypt_unregister_hash.o \ +src/misc/crypt/crypt_unregister_prng.o src/misc/error_to_string.o \ +src/misc/mpi/is_prime.o src/misc/mpi/mpi_to_ltc_error.o src/misc/mpi/rand_prime.o \ +src/misc/pkcs5/pkcs_5_1.o src/misc/pkcs5/pkcs_5_2.o src/misc/zeromem.o \ +src/modes/cbc/cbc_decrypt.o src/modes/cbc/cbc_encrypt.o src/modes/cbc/cbc_getiv.o \ +src/modes/cbc/cbc_setiv.o src/modes/cbc/cbc_start.o src/modes/cfb/cfb_decrypt.o \ +src/modes/cfb/cfb_encrypt.o src/modes/cfb/cfb_getiv.o src/modes/cfb/cfb_setiv.o \ +src/modes/cfb/cfb_start.o src/modes/ctr/ctr_decrypt.o src/modes/ctr/ctr_encrypt.o \ +src/modes/ctr/ctr_getiv.o src/modes/ctr/ctr_setiv.o src/modes/ctr/ctr_start.o \ +src/modes/ecb/ecb_decrypt.o src/modes/ecb/ecb_encrypt.o src/modes/ecb/ecb_start.o \ +src/modes/ofb/ofb_decrypt.o src/modes/ofb/ofb_encrypt.o src/modes/ofb/ofb_getiv.o \ +src/modes/ofb/ofb_setiv.o src/modes/ofb/ofb_start.o \ +src/pk/asn1/der/der_decode_integer.o src/pk/asn1/der/der_encode_integer.o \ +src/pk/asn1/der/der_get_multi_integer.o src/pk/asn1/der/der_length_integer.o \ +src/pk/asn1/der/der_put_multi_integer.o src/pk/dh/dh.o src/pk/dsa/dsa_export.o \ +src/pk/dsa/dsa_free.o src/pk/dsa/dsa_import.o src/pk/dsa/dsa_make_key.o \ +src/pk/dsa/dsa_sign_hash.o src/pk/dsa/dsa_verify_hash.o \ +src/pk/dsa/dsa_verify_key.o src/pk/ecc/ecc.o src/pk/packet_store_header.o \ +src/pk/packet_valid_header.o src/pk/pkcs1/pkcs_1_i2osp.o \ +src/pk/pkcs1/pkcs_1_mgf1.o src/pk/pkcs1/pkcs_1_oaep_decode.o \ +src/pk/pkcs1/pkcs_1_oaep_encode.o src/pk/pkcs1/pkcs_1_os2ip.o \ +src/pk/pkcs1/pkcs_1_pss_decode.o src/pk/pkcs1/pkcs_1_pss_encode.o \ +src/pk/pkcs1/pkcs_1_v15_es_decode.o src/pk/pkcs1/pkcs_1_v15_es_encode.o \ +src/pk/pkcs1/pkcs_1_v15_sa_decode.o src/pk/pkcs1/pkcs_1_v15_sa_encode.o \ +src/pk/rsa/rsa_decrypt_key.o src/pk/rsa/rsa_encrypt_key.o src/pk/rsa/rsa_export.o \ +src/pk/rsa/rsa_exptmod.o src/pk/rsa/rsa_free.o src/pk/rsa/rsa_import.o \ +src/pk/rsa/rsa_make_key.o src/pk/rsa/rsa_sign_hash.o \ +src/pk/rsa/rsa_v15_decrypt_key.o src/pk/rsa/rsa_v15_encrypt_key.o \ +src/pk/rsa/rsa_v15_sign_hash.o src/pk/rsa/rsa_v15_verify_hash.o \ +src/pk/rsa/rsa_verify_hash.o src/prngs/fortuna.o src/prngs/rc4.o \ +src/prngs/rng_get_bytes.o src/prngs/rng_make_prng.o src/prngs/sober128.o \ +src/prngs/sprng.o src/prngs/yarrow.o TESTOBJECTS=demos/test.o HASHOBJECTS=demos/hashsum.o @@ -129,43 +141,38 @@ SMALLOBJECTS=demos/small.o PROFS=demos/x86_prof.o TVS=demos/tv_gen.o -#Files left over from making the crypt.pdf. -LEFTOVERS=*.dvi *.log *.aux *.toc *.idx *.ilg *.ind *.out - -#Compressed filenames -COMPRESSED=crypt-$(VERSION).tar.bz2 crypt-$(VERSION).zip - #Header files used by libtomcrypt. -HEADERS=ltc_tommath.h mycrypt_cfg.h \ -mycrypt_misc.h mycrypt_prng.h mycrypt_cipher.h mycrypt_hash.h \ -mycrypt_macros.h mycrypt_pk.h mycrypt.h mycrypt_argchk.h \ -mycrypt_custom.h mycrypt_pkcs.h tommath_class.h tommath_superclass.h +HEADERS=src/headers/ltc_tommath.h src/headers/tomcrypt_cfg.h \ +src/headers/tomcrypt_misc.h src/headers/tomcrypt_prng.h src/headers/tomcrypt_cipher.h src/headers/tomcrypt_hash.h \ +src/headers/tomcrypt_macros.h src/headers/tomcrypt_pk.h src/headers/tomcrypt.h src/headers/tomcrypt_argchk.h \ +src/headers/tomcrypt_custom.h src/headers/tomcrypt_pkcs.h src/headers/tommath_class.h src/headers/tommath_superclass.h #The default rule for make builds the libtomcrypt library. default:library #ciphers come in two flavours... enc+dec and enc -aes_enc.o: aes.c aes_tab.c - $(CC) $(CFLAGS) -DENCRYPT_ONLY -c aes.c -o aes_enc.o +src/ciphers/aes/aes_enc.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c + $(CC) $(CFLAGS) -DENCRYPT_ONLY -c src/ciphers/aes/aes.c -o src/ciphers/aes/aes_enc.o #These are the rules to make certain object files. -aes.o: aes.c aes_tab.c -twofish.o: twofish.c twofish_tab.c -whirl.o: whirl.c whirltab.c -ecc.o: ecc.c ecc_sys.c -dh.o: dh.c dh_sys.c -sha512.o: sha512.c sha384.c -sha256.o: sha256.c sha224.c +src/ciphers/aes/aes.o: src/ciphers/aes/aes.c src/ciphers/aes/aes_tab.c +src/ciphers/twofish/twofish.o: src/ciphers/twofish/twofish.c src/ciphers/twofish/twofish_tab.c +src/hashes/whirl/whirl.o: src/hashes/whirl/whirl.c src/hashes/whirl/whirltab.c +src/pk/ecc/ecc.o: src/pk/ecc/ecc.c src/pk/ecc/ecc_sys.c +src/pk/dh/dh.o: src/pk/dh/dh.c src/pk/dh/dh_sys.c +src/hashes/sha2/sha512.o: src/hashes/sha2/sha512.c src/hashes/sha2/sha384.c +src/hashes/sha2/sha256.o: src/hashes/sha2/sha256.c src/hashes/sha2/sha224.c #This rule makes the libtomcrypt library. library: $(LIBNAME) $(LIBNAME): $(OBJECTS) - libtool --mode=link gcc $(CFLAGS) *.lo -o libtomcrypt.la -rpath $(LIBPATH) -version-info $(VERSION) - libtool --mode=link gcc $(CFLAGS) *.o -o libtomcrypt.a - libtool --mode=install install -c libtomcrypt.la $(LIBPATH)/libtomcrypt.la - install -d -g root -o root $(DESTDIR)$(INCPATH) - install -g root -o root $(HEADERS) $(DESTDIR)$(INCPATH) + libtool --silent --mode=link gcc $(CFLAGS) `find . -type f | grep "[.]lo" | xargs` -o libtomcrypt.la -rpath $(LIBPATH) -version-info $(VERSION) + libtool --silent --mode=link gcc $(CFLAGS) `find . -type f | grep "[.]o" | xargs` -o libtomcrypt.a + ranlib libtomcrypt.a + libtool --silent --mode=install install -c libtomcrypt.la $(LIBPATH)/libtomcrypt.la + install -d -g $(GROUP) -o $(USER) $(DESTDIR)$(INCPATH) + install -g $(GROUP) -o $(USER) $(HEADERS) $(DESTDIR)$(INCPATH) #This rule makes the hash program included with libtomcrypt hashsum: library diff --git a/mycrypt_cipher.h b/mycrypt_cipher.h deleted file mode 100644 index 65749db..0000000 --- a/mycrypt_cipher.h +++ /dev/null @@ -1,396 +0,0 @@ -/* ---- SYMMETRIC KEY STUFF ----- - * - * We put each of the ciphers scheduled keys in their own structs then we put all of - * the key formats in one union. This makes the function prototypes easier to use. - */ -#ifdef BLOWFISH -struct blowfish_key { - ulong32 S[4][256]; - ulong32 K[18]; -}; -#endif - -#ifdef RC5 -struct rc5_key { - int rounds; - ulong32 K[50]; -}; -#endif - -#ifdef RC6 -struct rc6_key { - ulong32 K[44]; -}; -#endif - -#ifdef SAFERP -struct saferp_key { - unsigned char K[33][16]; - long rounds; -}; -#endif - -#ifdef RIJNDAEL -struct rijndael_key { - ulong32 eK[64], dK[64]; - int Nr; -}; -#endif - -#ifdef XTEA -struct xtea_key { - unsigned long A[32], B[32]; -}; -#endif - -#ifdef TWOFISH -#ifndef TWOFISH_SMALL - struct twofish_key { - ulong32 S[4][256], K[40]; - }; -#else - struct twofish_key { - ulong32 K[40]; - unsigned char S[32], start; - }; -#endif -#endif - -#ifdef SAFER -#define SAFER_K64_DEFAULT_NOF_ROUNDS 6 -#define SAFER_K128_DEFAULT_NOF_ROUNDS 10 -#define SAFER_SK64_DEFAULT_NOF_ROUNDS 8 -#define SAFER_SK128_DEFAULT_NOF_ROUNDS 10 -#define SAFER_MAX_NOF_ROUNDS 13 -#define SAFER_BLOCK_LEN 8 -#define SAFER_KEY_LEN (1 + SAFER_BLOCK_LEN * (1 + 2 * SAFER_MAX_NOF_ROUNDS)) -typedef unsigned char safer_block_t[SAFER_BLOCK_LEN]; -typedef unsigned char safer_key_t[SAFER_KEY_LEN]; -struct safer_key { safer_key_t key; }; -#endif - -#ifdef RC2 -struct rc2_key { unsigned xkey[64]; }; -#endif - -#ifdef DES -struct des_key { - ulong32 ek[32], dk[32]; -}; - -struct des3_key { - ulong32 ek[3][32], dk[3][32]; -}; -#endif - -#ifdef CAST5 -struct cast5_key { - ulong32 K[32], keylen; -}; -#endif - -#ifdef NOEKEON -struct noekeon_key { - ulong32 K[4], dK[4]; -}; -#endif - -#ifdef SKIPJACK -struct skipjack_key { - unsigned char key[10]; -}; -#endif - -typedef union Symmetric_key { -#ifdef DES - struct des_key des; - struct des3_key des3; -#endif -#ifdef RC2 - struct rc2_key rc2; -#endif -#ifdef SAFER - struct safer_key safer; -#endif -#ifdef TWOFISH - struct twofish_key twofish; -#endif -#ifdef BLOWFISH - struct blowfish_key blowfish; -#endif -#ifdef RC5 - struct rc5_key rc5; -#endif -#ifdef RC6 - struct rc6_key rc6; -#endif -#ifdef SAFERP - struct saferp_key saferp; -#endif -#ifdef RIJNDAEL - struct rijndael_key rijndael; -#endif -#ifdef XTEA - struct xtea_key xtea; -#endif -#ifdef CAST5 - struct cast5_key cast5; -#endif -#ifdef NOEKEON - struct noekeon_key noekeon; -#endif -#ifdef SKIPJACK - struct skipjack_key skipjack; -#endif -} symmetric_key; - -/* A block cipher ECB structure */ -typedef struct { - int cipher, blocklen; - symmetric_key key; -} symmetric_ECB; - -/* A block cipher CFB structure */ -typedef struct { - int cipher, blocklen, padlen; - unsigned char IV[MAXBLOCKSIZE], pad[MAXBLOCKSIZE]; - symmetric_key key; -} symmetric_CFB; - -/* A block cipher OFB structure */ -typedef struct { - int cipher, blocklen, padlen; - unsigned char IV[MAXBLOCKSIZE]; - symmetric_key key; -} symmetric_OFB; - -/* A block cipher CBC structure */ -typedef struct Symmetric_CBC { - int cipher, blocklen; - unsigned char IV[MAXBLOCKSIZE]; - symmetric_key key; -} symmetric_CBC; - -/* A block cipher CTR structure */ -typedef struct Symmetric_CTR { - int cipher, blocklen, padlen, mode; - unsigned char ctr[MAXBLOCKSIZE], pad[MAXBLOCKSIZE]; - symmetric_key key; -} symmetric_CTR; - -/* cipher descriptor table, last entry has "name == NULL" to mark the end of table */ -extern struct _cipher_descriptor { - char *name; - unsigned char ID; - int min_key_length, max_key_length, block_length, default_rounds; - int (*setup)(const unsigned char *key, int keylength, int num_rounds, symmetric_key *skey); - void (*ecb_encrypt)(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int (*test)(void); - int (*keysize)(int *desired_keysize); -} cipher_descriptor[]; - -#ifdef BLOWFISH - int blowfish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int blowfish_test(void); - int blowfish_keysize(int *desired_keysize); - extern const struct _cipher_descriptor blowfish_desc; -#endif - -#ifdef RC5 - int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int rc5_test(void); - int rc5_keysize(int *desired_keysize); - extern const struct _cipher_descriptor rc5_desc; -#endif - -#ifdef RC6 - int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int rc6_test(void); - int rc6_keysize(int *desired_keysize); - extern const struct _cipher_descriptor rc6_desc; -#endif - -#ifdef RC2 - int rc2_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void rc2_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void rc2_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int rc2_test(void); - int rc2_keysize(int *desired_keysize); - extern const struct _cipher_descriptor rc2_desc; -#endif - -#ifdef SAFERP - int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int saferp_test(void); - int saferp_keysize(int *desired_keysize); - extern const struct _cipher_descriptor saferp_desc; -#endif - -#ifdef SAFER - int safer_k64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - int safer_sk64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - int safer_k128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - int safer_sk128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void safer_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void safer_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - - int safer_k64_test(void); - int safer_sk64_test(void); - int safer_sk128_test(void); - - int safer_64_keysize(int *desired_keysize); - int safer_128_keysize(int *desired_keysize); - extern const struct _cipher_descriptor safer_k64_desc, safer_k128_desc, safer_sk64_desc, safer_sk128_desc; -#endif - -#ifdef RIJNDAEL - -/* make aes an alias */ -#define aes_setup rijndael_setup -#define aes_ecb_encrypt rijndael_ecb_encrypt -#define aes_ecb_decrypt rijndael_ecb_decrypt -#define aes_test rijndael_test -#define aes_keysize rijndael_keysize - -#define aes_enc_setup rijndael_enc_setup -#define aes_enc_ecb_encrypt rijndael_enc_ecb_encrypt -#define aes_enc_keysize rijndael_enc_keysize - - int rijndael_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void rijndael_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void rijndael_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int rijndael_test(void); - int rijndael_keysize(int *desired_keysize); - - int rijndael_enc_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void rijndael_enc_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - int rijndael_enc_keysize(int *desired_keysize); - - extern const struct _cipher_descriptor rijndael_desc, aes_desc; - extern const struct _cipher_descriptor rijndael_enc_desc, aes_enc_desc; -#endif - -#ifdef XTEA - int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int xtea_test(void); - int xtea_keysize(int *desired_keysize); - extern const struct _cipher_descriptor xtea_desc; -#endif - -#ifdef TWOFISH - int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int twofish_test(void); - int twofish_keysize(int *desired_keysize); - extern const struct _cipher_descriptor twofish_desc; -#endif - -#ifdef DES - int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int des_test(void); - int des_keysize(int *desired_keysize); - - int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int des3_test(void); - int des3_keysize(int *desired_keysize); - - extern const struct _cipher_descriptor des_desc, des3_desc; -#endif - -#ifdef CAST5 - int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int cast5_test(void); - int cast5_keysize(int *desired_keysize); - extern const struct _cipher_descriptor cast5_desc; -#endif - -#ifdef NOEKEON - int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int noekeon_test(void); - int noekeon_keysize(int *desired_keysize); - extern const struct _cipher_descriptor noekeon_desc; -#endif - -#ifdef SKIPJACK - int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); - void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); - void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); - int skipjack_test(void); - int skipjack_keysize(int *desired_keysize); - extern const struct _cipher_descriptor skipjack_desc; -#endif - -#ifdef ECB - int ecb_start(int cipher, const unsigned char *key, - int keylen, int num_rounds, symmetric_ECB *ecb); - int ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ECB *ecb); - int ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ECB *ecb); -#endif - -#ifdef CFB - int cfb_start(int cipher, const unsigned char *IV, const unsigned char *key, - int keylen, int num_rounds, symmetric_CFB *cfb); - int cfb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CFB *cfb); - int cfb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CFB *cfb); - int cfb_getiv(unsigned char *IV, unsigned long *len, symmetric_CFB *cfb); - int cfb_setiv(const unsigned char *IV, unsigned long len, symmetric_CFB *cfb); -#endif - -#ifdef OFB - int ofb_start(int cipher, const unsigned char *IV, const unsigned char *key, - int keylen, int num_rounds, symmetric_OFB *ofb); - int ofb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_OFB *ofb); - int ofb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_OFB *ofb); - int ofb_getiv(unsigned char *IV, unsigned long *len, symmetric_OFB *ofb); - int ofb_setiv(const unsigned char *IV, unsigned long len, symmetric_OFB *ofb); -#endif - -#ifdef CBC - int cbc_start(int cipher, const unsigned char *IV, const unsigned char *key, - int keylen, int num_rounds, symmetric_CBC *cbc); - int cbc_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_CBC *cbc); - int cbc_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_CBC *cbc); - int cbc_getiv(unsigned char *IV, unsigned long *len, symmetric_CBC *cbc); - int cbc_setiv(const unsigned char *IV, unsigned long len, symmetric_CBC *cbc); -#endif - -#ifdef CTR - int ctr_start(int cipher, const unsigned char *IV, const unsigned char *key, - int keylen, int num_rounds, symmetric_CTR *ctr); - int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CTR *ctr); - int ctr_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CTR *ctr); - int ctr_getiv(unsigned char *IV, unsigned long *len, symmetric_CTR *ctr); - int ctr_setiv(const unsigned char *IV, unsigned long len, symmetric_CTR *ctr); -#endif - - - - int find_cipher(const char *name); - int find_cipher_any(const char *name, int blocklen, int keylen); - int find_cipher_id(unsigned char ID); - - int register_cipher(const struct _cipher_descriptor *cipher); - int unregister_cipher(const struct _cipher_descriptor *cipher); - - int cipher_is_valid(int idx); - diff --git a/mycrypt_hash.h b/mycrypt_hash.h deleted file mode 100644 index d5d8900..0000000 --- a/mycrypt_hash.h +++ /dev/null @@ -1,472 +0,0 @@ -/* ---- HASH FUNCTIONS ---- */ -#ifdef SHA512 -struct sha512_state { - ulong64 length, state[8]; - unsigned long curlen; - unsigned char buf[128]; -}; -#endif - -#ifdef SHA256 -struct sha256_state { - ulong64 length; - ulong32 state[8], curlen; - unsigned char buf[64]; -}; -#endif - -#ifdef SHA1 -struct sha1_state { - ulong64 length; - ulong32 state[5], curlen; - unsigned char buf[64]; -}; -#endif - -#ifdef MD5 -struct md5_state { - ulong64 length; - ulong32 state[4], curlen; - unsigned char buf[64]; -}; -#endif - -#ifdef MD4 -struct md4_state { - ulong64 length; - ulong32 state[4], curlen; - unsigned char buf[64]; -}; -#endif - -#ifdef TIGER -struct tiger_state { - ulong64 state[3], length; - unsigned long curlen; - unsigned char buf[64]; -}; -#endif - -#ifdef MD2 -struct md2_state { - unsigned char chksum[16], X[48], buf[16]; - unsigned long curlen; -}; -#endif - -#ifdef RIPEMD128 -struct rmd128_state { - ulong64 length; - unsigned char buf[64]; - ulong32 curlen, state[4]; -}; -#endif - -#ifdef RIPEMD160 -struct rmd160_state { - ulong64 length; - unsigned char buf[64]; - ulong32 curlen, state[5]; -}; -#endif - -#ifdef WHIRLPOOL -struct whirlpool_state { - ulong64 length, state[8]; - unsigned char buf[64]; - ulong32 curlen; -}; -#endif - -#ifdef CHC_HASH -struct chc_state { - ulong64 length; - unsigned char state[MAXBLOCKSIZE], buf[MAXBLOCKSIZE]; - ulong32 curlen; -}; -#endif - -typedef union Hash_state { -#ifdef CHC_HASH - struct chc_state chc; -#endif -#ifdef WHIRLPOOL - struct whirlpool_state whirlpool; -#endif -#ifdef SHA512 - struct sha512_state sha512; -#endif -#ifdef SHA256 - struct sha256_state sha256; -#endif -#ifdef SHA1 - struct sha1_state sha1; -#endif -#ifdef MD5 - struct md5_state md5; -#endif -#ifdef MD4 - struct md4_state md4; -#endif -#ifdef MD2 - struct md2_state md2; -#endif -#ifdef TIGER - struct tiger_state tiger; -#endif -#ifdef RIPEMD128 - struct rmd128_state rmd128; -#endif -#ifdef RIPEMD160 - struct rmd160_state rmd160; -#endif -} hash_state; - -extern struct _hash_descriptor { - char *name; - unsigned char ID; - unsigned long hashsize; /* digest output size in bytes */ - unsigned long blocksize; /* the block size the hash uses */ - unsigned char DER[64]; /* DER encoded identifier */ - unsigned long DERlen; /* length of DER encoding */ - int (*init)(hash_state *); - int (*process)(hash_state *, const unsigned char *, unsigned long); - int (*done)(hash_state *, unsigned char *); - int (*test)(void); -} hash_descriptor[]; - -#ifdef CHC_HASH - int chc_register(int cipher); - int chc_init(hash_state * md); - int chc_process(hash_state * md, const unsigned char *buf, unsigned long len); - int chc_done(hash_state * md, unsigned char *hash); - int chc_test(void); - extern const struct _hash_descriptor chc_desc; -#endif - -#ifdef WHIRLPOOL - int whirlpool_init(hash_state * md); - int whirlpool_process(hash_state * md, const unsigned char *buf, unsigned long len); - int whirlpool_done(hash_state * md, unsigned char *hash); - int whirlpool_test(void); - extern const struct _hash_descriptor whirlpool_desc; -#endif - -#ifdef SHA512 - int sha512_init(hash_state * md); - int sha512_process(hash_state * md, const unsigned char *buf, unsigned long len); - int sha512_done(hash_state * md, unsigned char *hash); - int sha512_test(void); - extern const struct _hash_descriptor sha512_desc; -#endif - -#ifdef SHA384 -#ifndef SHA512 - #error SHA512 is required for SHA384 -#endif - int sha384_init(hash_state * md); -#define sha384_process sha512_process - int sha384_done(hash_state * md, unsigned char *hash); - int sha384_test(void); - extern const struct _hash_descriptor sha384_desc; -#endif - -#ifdef SHA256 - int sha256_init(hash_state * md); - int sha256_process(hash_state * md, const unsigned char *buf, unsigned long len); - int sha256_done(hash_state * md, unsigned char *hash); - int sha256_test(void); - extern const struct _hash_descriptor sha256_desc; - -#ifdef SHA224 -#ifndef SHA256 - #error SHA256 is required for SHA224 -#endif - int sha224_init(hash_state * md); -#define sha224_process sha256_process - int sha224_done(hash_state * md, unsigned char *hash); - int sha224_test(void); - extern const struct _hash_descriptor sha224_desc; -#endif -#endif - -#ifdef SHA1 - int sha1_init(hash_state * md); - int sha1_process(hash_state * md, const unsigned char *buf, unsigned long len); - int sha1_done(hash_state * md, unsigned char *hash); - int sha1_test(void); - extern const struct _hash_descriptor sha1_desc; -#endif - -#ifdef MD5 - int md5_init(hash_state * md); - int md5_process(hash_state * md, const unsigned char *buf, unsigned long len); - int md5_done(hash_state * md, unsigned char *hash); - int md5_test(void); - extern const struct _hash_descriptor md5_desc; -#endif - -#ifdef MD4 - int md4_init(hash_state * md); - int md4_process(hash_state * md, const unsigned char *buf, unsigned long len); - int md4_done(hash_state * md, unsigned char *hash); - int md4_test(void); - extern const struct _hash_descriptor md4_desc; -#endif - -#ifdef MD2 - int md2_init(hash_state * md); - int md2_process(hash_state * md, const unsigned char *buf, unsigned long len); - int md2_done(hash_state * md, unsigned char *hash); - int md2_test(void); - extern const struct _hash_descriptor md2_desc; -#endif - -#ifdef TIGER - int tiger_init(hash_state * md); - int tiger_process(hash_state * md, const unsigned char *buf, unsigned long len); - int tiger_done(hash_state * md, unsigned char *hash); - int tiger_test(void); - extern const struct _hash_descriptor tiger_desc; -#endif - -#ifdef RIPEMD128 - int rmd128_init(hash_state * md); - int rmd128_process(hash_state * md, const unsigned char *buf, unsigned long len); - int rmd128_done(hash_state * md, unsigned char *hash); - int rmd128_test(void); - extern const struct _hash_descriptor rmd128_desc; -#endif - -#ifdef RIPEMD160 - int rmd160_init(hash_state * md); - int rmd160_process(hash_state * md, const unsigned char *buf, unsigned long len); - int rmd160_done(hash_state * md, unsigned char *hash); - int rmd160_test(void); - extern const struct _hash_descriptor rmd160_desc; -#endif - - int find_hash(const char *name); - int find_hash_id(unsigned char ID); - int find_hash_any(const char *name, int digestlen); - int register_hash(const struct _hash_descriptor *hash); - int unregister_hash(const struct _hash_descriptor *hash); - int hash_is_valid(int idx); - - int hash_memory(int hash, const unsigned char *data, unsigned long len, unsigned char *dst, unsigned long *outlen); - int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outlen); - int hash_file(int hash, const char *fname, unsigned char *dst, unsigned long *outlen); - -/* a simple macro for making hash "process" functions */ -#define HASH_PROCESS(func_name, compress_name, state_var, block_size) \ -int func_name (hash_state * md, const unsigned char *buf, unsigned long len) \ -{ \ - unsigned long n; \ - int err; \ - _ARGCHK(md != NULL); \ - _ARGCHK(buf != NULL); \ - if (md-> state_var .curlen > sizeof(md-> state_var .buf)) { \ - return CRYPT_INVALID_ARG; \ - } \ - while (len > 0) { \ - if (md-> state_var .curlen == 0 && len >= block_size) { \ - if ((err = compress_name (md, (unsigned char *)buf)) != CRYPT_OK) { \ - return err; \ - } \ - md-> state_var .length += block_size * 8; \ - buf += block_size; \ - len -= block_size; \ - } else { \ - n = MIN(len, (block_size - md-> state_var .curlen)); \ - memcpy(md-> state_var .buf + md-> state_var.curlen, buf, (size_t)n); \ - md-> state_var .curlen += n; \ - buf += n; \ - len -= n; \ - if (md-> state_var .curlen == block_size) { \ - if ((err = compress_name (md, md-> state_var .buf)) != CRYPT_OK) {\ - return err; \ - } \ - md-> state_var .length += 8*block_size; \ - md-> state_var .curlen = 0; \ - } \ - } \ - } \ - return CRYPT_OK; \ -} - -#ifdef HMAC -typedef struct Hmac_state { - hash_state md; - int hash; - hash_state hashstate; - unsigned char *key; -} hmac_state; - - int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned long keylen); - int hmac_process(hmac_state *hmac, const unsigned char *buf, unsigned long len); - int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen); - int hmac_test(void); - int hmac_memory(int hash, const unsigned char *key, unsigned long keylen, - const unsigned char *data, unsigned long len, - unsigned char *dst, unsigned long *dstlen); - int hmac_file(int hash, const char *fname, const unsigned char *key, - unsigned long keylen, - unsigned char *dst, unsigned long *dstlen); -#endif - -#ifdef OMAC - -typedef struct { - int cipher_idx, - buflen, - blklen; - unsigned char block[MAXBLOCKSIZE], - prev[MAXBLOCKSIZE], - Lu[2][MAXBLOCKSIZE]; - symmetric_key key; -} omac_state; - - int omac_init(omac_state *omac, int cipher, const unsigned char *key, unsigned long keylen); - int omac_process(omac_state *state, const unsigned char *buf, unsigned long len); - int omac_done(omac_state *state, unsigned char *out, unsigned long *outlen); - int omac_memory(int cipher, const unsigned char *key, unsigned long keylen, - const unsigned char *msg, unsigned long msglen, - unsigned char *out, unsigned long *outlen); - int omac_file(int cipher, const unsigned char *key, unsigned long keylen, - const char *filename, unsigned char *out, unsigned long *outlen); - int omac_test(void); -#endif /* OMAC */ - -#ifdef PMAC - -typedef struct { - unsigned char Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */ - Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */ - Lr[MAXBLOCKSIZE], /* L * x^-1 */ - block[MAXBLOCKSIZE], /* currently accumulated block */ - checksum[MAXBLOCKSIZE]; /* current checksum */ - - symmetric_key key; /* scheduled key for cipher */ - unsigned long block_index; /* index # for current block */ - int cipher_idx, /* cipher idx */ - block_len, /* length of block */ - buflen; /* number of bytes in the buffer */ -} pmac_state; - - int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned long keylen); - int pmac_process(pmac_state *state, const unsigned char *buf, unsigned long len); - int pmac_done(pmac_state *state, unsigned char *out, unsigned long *outlen); - - int pmac_memory(int cipher, const unsigned char *key, unsigned long keylen, - const unsigned char *msg, unsigned long msglen, - unsigned char *out, unsigned long *outlen); - - int pmac_file(int cipher, const unsigned char *key, unsigned long keylen, - const char *filename, unsigned char *out, unsigned long *outlen); - - int pmac_test(void); - -/* internal functions */ - int pmac_ntz(unsigned long x); - void pmac_shift_xor(pmac_state *pmac); - -#endif /* PMAC */ - -#ifdef EAX_MODE - -#if !(defined(OMAC) && defined(CTR)) - #error EAX_MODE requires OMAC and CTR -#endif - -typedef struct { - unsigned char N[MAXBLOCKSIZE]; - symmetric_CTR ctr; - omac_state headeromac, ctomac; -} eax_state; - - int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, unsigned long noncelen, - const unsigned char *header, unsigned long headerlen); - - int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct, unsigned long length); - int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt, unsigned long length); - int eax_addheader(eax_state *eax, const unsigned char *header, unsigned long length); - int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen); - - int eax_encrypt_authenticate_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, unsigned long noncelen, - const unsigned char *header, unsigned long headerlen, - const unsigned char *pt, unsigned long ptlen, - unsigned char *ct, - unsigned char *tag, unsigned long *taglen); - - int eax_decrypt_verify_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, unsigned long noncelen, - const unsigned char *header, unsigned long headerlen, - const unsigned char *ct, unsigned long ctlen, - unsigned char *pt, - unsigned char *tag, unsigned long taglen, - int *res); - - int eax_test(void); -#endif /* EAX MODE */ - -#ifdef OCB_MODE -typedef struct { - unsigned char L[MAXBLOCKSIZE], /* L value */ - Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */ - Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */ - Lr[MAXBLOCKSIZE], /* L * x^-1 */ - R[MAXBLOCKSIZE], /* R value */ - checksum[MAXBLOCKSIZE]; /* current checksum */ - - symmetric_key key; /* scheduled key for cipher */ - unsigned long block_index; /* index # for current block */ - int cipher, /* cipher idx */ - block_len; /* length of block */ -} ocb_state; - - int ocb_init(ocb_state *ocb, int cipher, - const unsigned char *key, unsigned long keylen, const unsigned char *nonce); - - int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct); - int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt); - - int ocb_done_encrypt(ocb_state *ocb, - const unsigned char *pt, unsigned long ptlen, - unsigned char *ct, - unsigned char *tag, unsigned long *taglen); - - int ocb_done_decrypt(ocb_state *ocb, - const unsigned char *ct, unsigned long ctlen, - unsigned char *pt, - const unsigned char *tag, unsigned long taglen, int *res); - - int ocb_encrypt_authenticate_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, - const unsigned char *pt, unsigned long ptlen, - unsigned char *ct, - unsigned char *tag, unsigned long *taglen); - - int ocb_decrypt_verify_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, - const unsigned char *ct, unsigned long ctlen, - unsigned char *pt, - const unsigned char *tag, unsigned long taglen, - int *res); - - int ocb_test(void); - -/* internal functions */ - void ocb_shift_xor(ocb_state *ocb, unsigned char *Z); - int ocb_ntz(unsigned long x); - int __ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen, - unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode); - -#endif /* OCB_MODE */ - - diff --git a/mycrypt_misc.h b/mycrypt_misc.h deleted file mode 100644 index b9f9dbd..0000000 --- a/mycrypt_misc.h +++ /dev/null @@ -1,17 +0,0 @@ -/* ---- BASE64 Routines ---- */ -#ifdef BASE64 - int base64_encode(const unsigned char *in, unsigned long len, - unsigned char *out, unsigned long *outlen); - - int base64_decode(const unsigned char *in, unsigned long len, - unsigned char *out, unsigned long *outlen); -#endif - -/* ---- MEM routines ---- */ - void zeromem(void *dst, size_t len); - void burn_stack(unsigned long len); - - const char *error_to_string(int err); - int mpi_to_ltc_error(int err); - - extern const char *crypt_build_settings; diff --git a/mycrypt_prng.h b/mycrypt_prng.h deleted file mode 100644 index e706849..0000000 --- a/mycrypt_prng.h +++ /dev/null @@ -1,141 +0,0 @@ -/* ---- PRNG Stuff ---- */ -struct yarrow_prng { - int cipher, hash; - unsigned char pool[MAXBLOCKSIZE]; - symmetric_CTR ctr; -}; - -struct rc4_prng { - int x, y; - unsigned char buf[256]; -}; - -struct fortuna_prng { - hash_state pool[FORTUNA_POOLS]; /* the pools */ - - symmetric_key skey; - - unsigned char K[32], /* the current key */ - IV[16]; /* IV for CTR mode */ - - unsigned long pool_idx, /* current pool we will add to */ - pool0_len, /* length of 0'th pool */ - wd; - - ulong64 reset_cnt; /* number of times we have reset */ -}; - -struct sober128_prng { - ulong32 R[17], /* Working storage for the shift register */ - initR[17], /* saved register contents */ - konst, /* key dependent constant */ - sbuf; /* partial word encryption buffer */ - - int nbuf, /* number of part-word stream bits buffered */ - flag, /* first add_entropy call or not? */ - set; /* did we call add_entropy to set key? */ - -}; - -typedef union Prng_state { -#ifdef YARROW - struct yarrow_prng yarrow; -#endif -#ifdef RC4 - struct rc4_prng rc4; -#endif -#ifdef FORTUNA - struct fortuna_prng fortuna; -#endif -#ifdef SOBER128 - struct sober128_prng sober128; -#endif -} prng_state; - -extern struct _prng_descriptor { - char *name; - int export_size; /* size in bytes of exported state */ - int (*start)(prng_state *); - int (*add_entropy)(const unsigned char *, unsigned long, prng_state *); - int (*ready)(prng_state *); - unsigned long (*read)(unsigned char *, unsigned long, prng_state *); - int (*done)(prng_state *); - int (*pexport)(unsigned char *, unsigned long *, prng_state *); - int (*pimport)(const unsigned char *, unsigned long, prng_state *); - int (*test)(void); -} prng_descriptor[]; - -#ifdef YARROW - int yarrow_start(prng_state *prng); - int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng); - int yarrow_ready(prng_state *prng); - unsigned long yarrow_read(unsigned char *buf, unsigned long len, prng_state *prng); - int yarrow_done(prng_state *prng); - int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng); - int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng); - int yarrow_test(void); - extern const struct _prng_descriptor yarrow_desc; -#endif - -#ifdef FORTUNA - int fortuna_start(prng_state *prng); - int fortuna_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng); - int fortuna_ready(prng_state *prng); - unsigned long fortuna_read(unsigned char *buf, unsigned long len, prng_state *prng); - int fortuna_done(prng_state *prng); - int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng); - int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prng); - int fortuna_test(void); - extern const struct _prng_descriptor fortuna_desc; -#endif - -#ifdef RC4 - int rc4_start(prng_state *prng); - int rc4_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng); - int rc4_ready(prng_state *prng); - unsigned long rc4_read(unsigned char *buf, unsigned long len, prng_state *prng); - int rc4_done(prng_state *prng); - int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng); - int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng); - int rc4_test(void); - extern const struct _prng_descriptor rc4_desc; -#endif - -#ifdef SPRNG - int sprng_start(prng_state *prng); - int sprng_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng); - int sprng_ready(prng_state *prng); - unsigned long sprng_read(unsigned char *buf, unsigned long len, prng_state *prng); - int sprng_done(prng_state *prng); - int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng); - int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng); - int sprng_test(void); - extern const struct _prng_descriptor sprng_desc; -#endif - -#ifdef SOBER128 - int sober128_start(prng_state *prng); - int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng); - int sober128_ready(prng_state *prng); - unsigned long sober128_read(unsigned char *buf, unsigned long len, prng_state *prng); - int sober128_done(prng_state *prng); - int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng); - int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *prng); - int sober128_test(void); - extern const struct _prng_descriptor sober128_desc; -#endif - - int find_prng(const char *name); - int register_prng(const struct _prng_descriptor *prng); - int unregister_prng(const struct _prng_descriptor *prng); - int prng_is_valid(int idx); - -/* Slow RNG you **might** be able to use to seed a PRNG with. Be careful as this - * might not work on all platforms as planned - */ -unsigned long rng_get_bytes(unsigned char *buf, - unsigned long len, - void (*callback)(void)); - -int rng_make_prng(int bits, int wprng, prng_state *prng, void (*callback)(void)); - diff --git a/notes/cipher_tv.txt b/notes/cipher_tv.txt index f144fae..cbb60c3 100644 --- a/notes/cipher_tv.txt +++ b/notes/cipher_tv.txt @@ -1537,3 +1537,215 @@ Key Size: 10 bytes 49: 0AAB29DF65861F4C +Cipher: anubis +Key Size: 16 bytes + 0: 30FF064629BF7EF5B010830BF3D4E1E9 + 1: DD7A8E87CFD352AF9F63EA24ADA7E353 + 2: 0D0BE8F05510EBD6A3EC842E5BD9FC2A + 3: 330F09581FDC897B3FE6EC1A5056A410 + 4: 30349D965F43C295B9484C389C4D942C + 5: 9225343F0056BC355060C0282C638D02 + 6: E3A85D41B5337533C4D87730948A9D4E + 7: 09DA0DDB65FF431081CAB08A28010B76 + 8: 6C0D0BD6CEAFB9783B31023FD455DAC6 + 9: FBE6F26B7CA322A45312856D586DE2EE +10: 1F269EC072D0FBA72E87CA77F8B983FB +11: CFFAE9ADE3006BD511ED172D42F16D05 +12: 73F0E9DE89F4C7541506F052D181BAC2 +13: FCFA3E2E89FF769834295C77431EF7CE +14: 0452360383D56F827C81263F6B0855BC +15: 40744E07299D6A2A210BE5598835221B +16: 2F0FC61148C36F4C7B42DF274AD0DDE0 +17: 2EA0E9BE9E4E4DF85488FE6E7CFCD6E3 +18: 0AD1254FA64C3996BBD485D41A3687A0 +19: 5B55988652DF200348A114F802FD3C03 +20: C32906AF76934C1436CA60BAD58A0C66 +21: 59D87987DE9DD485C4537F3A95A164A0 +22: 0A706ADF488D84632C96F4BEC43D9FA8 +23: 0B74E0CDD14D984B37491E2D9FA63CAE +24: 47CB1827D151A60473E67BD5D233102F +25: F455B4B665D3D0AFB25FDE4A3312AFF6 +26: F9A0649421D45DF604206854F681DBDB +27: 21477F5546339E4B6D8215368EE9F884 +28: 577640F23CA73345701B0906DFABA4B7 +29: 89F8D08A6E173759020DD7301E0FE361 +30: 44EF7AF7043FD4B8112345CEE42BC969 +31: D7CF0CE04A57253F4C63CABC4A5CB034 +32: AF73D3F4CED32593B315E27079131D22 +33: F6E603E3455359FE43A3B83AAF3AF0C5 +34: DCC3FB557F2C301B631DEF499097E4FD +35: 8285A25CF6F7E701644708E12081C62C +36: EC702DD0293F4C646B1C9C2606762816 +37: 289491E5A65DCA605B78E88DA8A9F8AB +38: D82FBC14452BE34C5840DAD81FC2A65E +39: B88A340EB1BF8D5ADE6A4E6C16104FC8 +40: C9FC3D70D2BA26C4059BD3D34134264C +41: 18CE3D2920E3BDEFA91C369E9DE57BF4 +42: 50917AE58278E15A18A47B284D8027A3 +43: BDA6F9DE33704302CE056412143B4F82 +44: C287898C1451774675EB7A964C004E0D +45: 3BDE73E0D357319AB06D3675F1D3E28D +46: 30FF4326C89C0FFE4D31D2E92CC0BF9B +47: F69816F304ED892232F220F290320A8D +48: 1368153F1A54EFF8D61F93A2D6AF21E3 +49: 06DD274894B6EDF3159A1403F47F09C7 + +Key Size: 28 bytes + 0: 7828B1997D3D050201DC6EE45C8521B5 + 1: 0D77F896F9CEF16DAAFCF962C2257AAE + 2: 89C27B0623F5EECCA38BAE1AD86AE156 + 3: 44EC09834052009CC3CD66E1BA11AF01 + 4: F922BFDB03FB186A069C1E7B48222E3D + 5: 277F7971955D8984AAECF287C32B8211 + 6: E77ED0144A3ED827B71453B91562FE25 + 7: 1760EFD04477AE527BC37F72C8BBBCAE + 8: 26259425ACD58207AE328B3F1A217AC1 + 9: 0876C4DC51D22657C4121E9067C2C3BA +10: 0214981592C9CEDD4D654F84AF1793A5 +11: 3E11FA027BC4F15048D27B187062259A +12: 24E7D61BB21EA90B5282B43AAFB0DBDC +13: 688F56ECB45B7C242000653460F04A23 +14: DFA587501A875ACDE8687A04AE404861 +15: 4C21CC3FBB768CC9AF2242FA206FE406 +16: 5CA0B03FA7751DEBBE70CB21AA61765A +17: 4879B3AC26270C422645B9CA29CAD8BB +18: 24F941E1B9AF84C18D03885EAACE16E3 +19: 05E163A0150123C2664131A81B20AFC1 +20: D606CAA85362E23598E5B8BD60C60506 +21: 33BD0AE751019BB751C151AE47BD5811 +22: 75DA523F5F793F90034144A3599DC5E6 +23: CD4709B56521EA306F5AD95CCA878183 +24: 6A4EC2EDDEBBBFEB62C1F13F7A59BF20 +25: 2A36272DC4EFDFC03F4DCF049ED2ADFF +26: FD4F3904E8E37E7C31508E5829482965 +27: BA64BAE1C2ABB8599A31B245DBAD1153 +28: 757E0151783A50FC92AE55861DCD797D +29: 5E63BDA3217ECB544972CA14A9074DA5 +30: E52F1195921767FA2410BA095EA5C328 +31: 6D7E42D67E329D669299B5A590017E8D +32: 0516F6F7D99ADE5DC42E635BB5832E80 +33: 57FB4E6B82ED2A3091248DCEF9C27F14 +34: 25231D0E9B96534977D2F2AF93DD10AB +35: 847C4C524A586568D19EFA3ECA343F1C +36: 52448814064E0F33A4EA89368C2E1ACC +37: 461275466FAA7BC16ABAD9EC459BD67A +38: 16C8324A383A00DA06DBEC419B69C551 +39: 5F26F7CF715FF2649DCC3C71EB6B92DF +40: 575363411FB07C067CD4357A1CD1D695 +41: AB70F08BAB51C5F57139A107EE858A12 +42: 887F62AE3D700EC5323EDA231C6B4C48 +43: 7B9851B01DC9083293F3B226690A54F4 +44: 36E03DF51C574E35EF2077DB7A49548E +45: E238A564246B163F97EDD733A235EDEB +46: 30679CE080915DC3BFA91D0DAFF5E82E +47: 7C2E8145D803D4FE18EE32995AAC16B0 +48: 24D6F61ECC87206804885D33BFA7B2CA +49: 1F4F81751CB3FAFDC9F9C27E639F370B + +Key Size: 40 bytes + 0: 31C3221C218E4CA1762B0DE77B964528 + 1: 0B6E4BD937773597647FFE0A3859BB12 + 2: 67A116E5F762619DE72F99AD1562A943 + 3: B6A841663FB466ACAF89C8DA5BA080F0 + 4: 0442708BF804642B9B1C69F5D905817E + 5: BC77391EAB530B96CA35319E510DB306 + 6: AED37991A50AECB70C1B99137D5B38F2 + 7: 8735F7AF0BF6C5C7E3C98021E83A31EE + 8: A614243B1B871D80BDCE4A23AD00F9FA + 9: 16AC67B139A92AD777871C990D3DA571 +10: B1774A2A12A8CAB25D28A575B67CEF5D +11: 4C9B1A120BC6A33C62AF903FEEC3AF5F +12: 7B128F00480E497C5754EE333457EE5E +13: AB56D578229492B95ED309C0EC566658 +14: 42FAF577855FEDB3446D40B4B6677445 +15: 84E0C19B4A4512001F663E22D3184F0A +16: 8B01680D049F5A9421BA9BED100CC272 +17: 2B1D70B92A5DF12CE0FA6A7AA43E4CEE +18: C7F61340D1B2321A1884E54D74576657 +19: 153C07C56B32530866722C4DEAC86A50 +20: 2EACBEFC4A29D1250EEAFD12A1D4AE77 +21: FCCB40B0997E47512295066F1A0344DD +22: C149A543345E2A1B8249F71CB9F903A4 +23: 3FD0688A8D0BE5F06F157C234C29BF9A +24: 6A3F813F396D77C7F4641ECC3E0BF3AA +25: E2888B9D2A6D819367F61C5792866A8F +26: 1A8A000F91AF4E600DDD88E098BD938B +27: 2283E758C04548EF8C37FA9F5700A7AD +28: 4FD6D8E1678D2B85520B96C038C582BF +29: D13C0B228F792EF88F09ED192C571029 +30: 1A2A06B1987BE0DADA4B558AE5E6A128 +31: 097B0460C47F1801986F5706A69EB01C +32: DD17BAC0737515C6386ECA6A6D6C02B6 +33: 5989BD1D46FD6EC14D4C55D5D6D17F99 +34: 431002E0224BD34B0B93988356C19E7C +35: 37DB7570296DCCE45ABDDE36EBE4731D +36: 4731DE78EEBAA1D02568EEEA2E04A2F5 +37: 1F879753A7964AF44C84FD5765D8E080 +38: 54F120726F68EA4B0501365CD2A84759 +39: 366E43BB744C615999E896D01A0D1D0E +40: 18747BD79F1D0529D09CAC70F4D08948 +41: 4F9854BAE0834A0C5FD12381225958F2 +42: 7C14ADF94A0B61828996D902E4CCFF3E +43: 242F0E9CE96E4E208A9E0C5D76F8E698 +44: 27EE179E2A9301B521B2C94ED3D36A77 +45: 892C84A5E77E88A67F5F00F3597F4C04 +46: FC7880D7860E90DE17E935700FC8C030 +47: BC49373F775BF9CD6BDC22C87F71E192 +48: 365646D0DE092AF42EC8F12A19840342 +49: 62D0E9C210A20ECD2FF191AD3495DE6F + + +Cipher: khazad +Key Size: 16 bytes + 0: 9C4C292A989175FC + 1: F49E366AF89BD6B7 + 2: 9E859C8F323666F9 + 3: 349EC57A02451059 + 4: 59E34CF03134A662 + 5: 436C16BAB80E3E2D + 6: 81C35012B08A194C + 7: 056CCC9991C1F087 + 8: 0A59F24C4715B303 + 9: 3C2CFF98AE8500FD +10: 9136C3FCC332D974 +11: FA3FA726E6BEBA65 +12: DD84E4F9F39FB7EE +13: A3F397CC9FB771F5 +14: E2D6ECC1F40A51C7 +15: 6704A1A705163A02 +16: BD820F5AF7DEEB04 +17: E21E37CC122027FF +18: E319085D8E2C1F4F +19: 0DDFE55B199A49A9 +20: B70F39CCCB2BA9A6 +21: 3F2F25723AED2E29 +22: 751FACD5F517AB2F +23: D32CE55FBF217CE9 +24: 91393018EA847012 +25: D50F1C54BABE7081 +26: C73350FBC5B3A82B +27: E9A054F709FD5C57 +28: 94BD5121B25746D4 +29: EE19F88B28BEB4B7 +30: CE6845FD13A3B78A +31: 566729D0183496BC +32: DC0E1D38CB5E03A8 +33: 251AD2B2842C75E3 +34: D344AC41190F3594 +35: 579B956A36ADA3A8 +36: 5F83D3AFEE9A6F25 +37: 2D3FF8708A03C600 +38: 32A732C7BEEBB693 +39: F437276FAA05BB39 +40: 58DDD4CD0281C5FD +41: ECC2C84BD8C0A4DC +42: BAB24C2CEFE23531 +43: 5244BFA3E2821E7D +44: A4B273E960946B2C +45: 039376D02A8D6788 +46: D3EB7074E3B05206 +47: 89C18FFA26ED0836 +48: 1F05A2D2D78927D9 +49: 0133E1745856C44C + + diff --git a/notes/eax_tv.txt b/notes/eax_tv.txt index bf4a52a..09df008 100644 --- a/notes/eax_tv.txt +++ b/notes/eax_tv.txt @@ -329,3 +329,57 @@ EAX-skipjack (10 byte key) 15: 07AF486D1C458AAB2DBF13C3243FAD, 87288E41A9E64089 16: 84059283DF9A2A8563E7AF69235F26DF, 351652A0DBCE9D6E +EAX-anubis (16 byte key) + 0: , 8E20F19D9BA22ABA09FB86FDE6B9EF38 + 1: 3B, F4201E546A9160F989191942EC8FD1D3 + 2: 9F38, 4E3CEAE3E1CB954E021A10E814B71732 + 3: 4F4769, 3E8F35A6A5B11200E9F1AA38590066CD + 4: AB41F5FC, EC4C97A8892AAF5433106D4AC8A49843 + 5: 414F95D61B, BF831E34D1E3FECB973A8C730ECA2E6D + 6: 4798322F06D1, 005BBC30BFEDBE6463536C4F80D1A071 + 7: F256B6CD1BF4F5, 468A28F0661884B846B191B530C8D064 + 8: 90906F27A633ADDE, 6D9200A37A7F6A456CB103673184C2E5 + 9: 16CD3C17C9B4EAB135, 6D716E23D7B35109F55B036EDFA7742E + 10: 7AD1C22F1F06298DFB25, B076990F8193543C8F3185D3792BCE56 + 11: 0476F2ABCD057FE6FEE39D, BB2876DB18C00038FADBBD9B264ACC3C + 12: B69EDE336407DBC2EE735857, AB63E5906116A8BE22C52B5DA31B1839 + 13: C3864C1354065A56470669E602, C72BFD3A0BC73BFF051C9AB2F0DFED93 + 14: 296D8F183A59020D33890420DD7B, C9D90B9EB42C32EDCF6223587D1598A6 + 15: 256ED8E9D982616680559979BDF2E9, 179FE4E7BA7E966050D35900317E9916 + 16: D4ED8F30FF9C0470D75B3B16750A3AE4, 5D50F05BB270A292DFF9F67A3BA84675 + 17: 40CDEB6388274143CA3C4F6020BD9A4875, B27C7DFB1BFBB3FCCEE0171852C7924E + 18: 54EF262EC1801D505C7629D038654EBA0594, 9D2060FCD0A2C577511C7752ADE60BBE + 19: F39EE54A37F16DD38B624D7AB8F0D9CBD4B981, BC056C7D2C09D813703CDD63C1C69F44 + 20: F4E7AD474FCA153ABD670E43081ED09EB2C4CC1A, F244BD4D630272F0D98FCA04226C04F1 + 21: 039ECC36A0A16273E7246CA1FF19D213AC87B53F29, 3056DB6916C925DF220B6C9980EE141A + 22: 7DE1DCDEF01447CA2FE83375A48DD84E4A7CB7C01992, 79AFEA4816EAF8DAC8A5E93960F1594F + 23: A886C4B914BF0983003272F226F9B2197EF2DC05ACDDE0, B59D85A0FDA5FA4422F7203C055B97A9 + 24: 00B3E1E91448E250AAFB695C0643A6577AB453EFECFABF53, 4A7EFF1CBC1AB535122A017203616D85 + 25: 85E972E774D66D0531E40B8FE9E264A77B50FA883AB0943080, B18E164BF89B7E7AB0DC256DFEC7C72F + 26: 004849E39334969B392CB0CF3FDEFB3D792DCBBC15F8328C7EDC, 3C51295711F5F878DE8F0B2B5A26A227 + 27: A0BAD6C2264AB1578993BA49E59D4598822FFED20A57D88F756FF1, 2EB9D525697A419A10DB2A84AEEA5FBC + 28: C34DD806EAB5AD823D78BCA78A7709A705FC94ECC521A367D76C9588, 3C57580C7903039D645C06DBAF07B477 + 29: C447EC77512938CF7862388C32AF22ACE6B5E4CBAA998BE4F5CBC4D215, 43425D09B7ACFD90371C08953946A955 + 30: 2C16993AAE624CBA4CDAF34FE3D368559E6BE548292B281439866375013B, 3B7360C3FA8FB1C15D19F567153CB46C + 31: 538E5DFAF14854A786851E4165F2E01CDDA963E318FCE4FB58E31A6B5CFC33, 2F8EA13B7A6873FE556CA535ABA0968B + 32: 5E29CDB7D9695A110043E9C260104BDF020A3A2A139D4112E918AB584BDD7EDA, 9133213AA7BCF062D2BD37F866683D3F + +EAX-khazad (16 byte key) + 0: , 75968E54452F6781 + 1: 95, ADAF5949F09B5A22 + 2: 6B8F, A06B201947424A11 + 3: 5BE668, 3251416625DF347A + 4: 5A92E82B, 33E25772427D9786 + 5: 62F9F2ABCC, DE714F5F5D17D6D0 + 6: 0E3CD825BD8D, A7991C8CB8975ED9 + 7: 4AD0D999503AAD, 53A827D7886F7227 + 8: BB08E6FAED1DAEE8, 91A118749B7AB9F3 + 9: 16E30CB12E20D18495, F8F8B8C1280158F9 + 10: 616DBCC6346959D89E4A, 506BF35A70297D53 + 11: F86B022D4B28FDB1F0B7D3, EA42220C805FD759 + 12: 9B8A3D9CDBADD9BBCCCD2B28, BB478D3CE9A229C9 + 13: CDC4AB4EF2D5B46E87827241F0, 658EDB9497A91823 + 14: 1A113D96B21B4AEBDB13E34C381A, 63AD0C4084AC84B0 + 15: 14DA751E5AF7E01F35B3CE74EE1ACF, 3C76AB64E1724DCE + 16: A13BBC7E408D2C550634CBC64690B8FE, 3D4BBC0C76536730 + diff --git a/notes/etc/saferp_optimizer.c b/notes/etc/saferp_optimizer.c new file mode 100644 index 0000000..664661a --- /dev/null +++ b/notes/etc/saferp_optimizer.c @@ -0,0 +1,173 @@ +/* emits an optimized version of SAFER+ ... only does encrypt so far... */ + +#include +#include + +/* This is the "Armenian" Shuffle. It takes the input from b and stores it in b2 */ +#define SHUF\ + b2[0] = b[8]; b2[1] = b[11]; b2[2] = b[12]; b2[3] = b[15]; \ + b2[4] = b[2]; b2[5] = b[1]; b2[6] = b[6]; b2[7] = b[5]; \ + b2[8] = b[10]; b2[9] = b[9]; b2[10] = b[14]; b2[11] = b[13]; \ + b2[12] = b[0]; b2[13] = b[7]; b2[14] = b[4]; b2[15] = b[3]; memcpy(b, b2, sizeof(b)); + +/* This is the inverse shuffle. It takes from b and gives to b2 */ +#define iSHUF(b, b2) \ + b2[0] = b[12]; b2[1] = b[5]; b2[2] = b[4]; b2[3] = b[15]; \ + b2[4] = b[14]; b2[5] = b[7]; b2[6] = b[6]; b2[7] = b[13]; \ + b2[8] = b[0]; b2[9] = b[9]; b2[10] = b[8]; b2[11] = b[1]; \ + b2[12] = b[2]; b2[13] = b[11]; b2[14] = b[10]; b2[15] = b[3]; memcpy(b, b2, sizeof(b)); + +#define ROUND(b, i) \ + b[0] = (safer_ebox[(b[0] ^ skey->saferp.K[i][0]) & 255] + skey->saferp.K[i+1][0]) & 255; \ + b[1] = safer_lbox[(b[1] + skey->saferp.K[i][1]) & 255] ^ skey->saferp.K[i+1][1]; \ + b[2] = safer_lbox[(b[2] + skey->saferp.K[i][2]) & 255] ^ skey->saferp.K[i+1][2]; \ + b[3] = (safer_ebox[(b[3] ^ skey->saferp.K[i][3]) & 255] + skey->saferp.K[i+1][3]) & 255; \ + b[4] = (safer_ebox[(b[4] ^ skey->saferp.K[i][4]) & 255] + skey->saferp.K[i+1][4]) & 255; \ + b[5] = safer_lbox[(b[5] + skey->saferp.K[i][5]) & 255] ^ skey->saferp.K[i+1][5]; \ + b[6] = safer_lbox[(b[6] + skey->saferp.K[i][6]) & 255] ^ skey->saferp.K[i+1][6]; \ + b[7] = (safer_ebox[(b[7] ^ skey->saferp.K[i][7]) & 255] + skey->saferp.K[i+1][7]) & 255; \ + b[8] = (safer_ebox[(b[8] ^ skey->saferp.K[i][8]) & 255] + skey->saferp.K[i+1][8]) & 255; \ + b[9] = safer_lbox[(b[9] + skey->saferp.K[i][9]) & 255] ^ skey->saferp.K[i+1][9]; \ + b[10] = safer_lbox[(b[10] + skey->saferp.K[i][10]) & 255] ^ skey->saferp.K[i+1][10]; \ + b[11] = (safer_ebox[(b[11] ^ skey->saferp.K[i][11]) & 255] + skey->saferp.K[i+1][11]) & 255; \ + b[12] = (safer_ebox[(b[12] ^ skey->saferp.K[i][12]) & 255] + skey->saferp.K[i+1][12]) & 255; \ + b[13] = safer_lbox[(b[13] + skey->saferp.K[i][13]) & 255] ^ skey->saferp.K[i+1][13]; \ + b[14] = safer_lbox[(b[14] + skey->saferp.K[i][14]) & 255] ^ skey->saferp.K[i+1][14]; \ + b[15] = (safer_ebox[(b[15] ^ skey->saferp.K[i][15]) & 255] + skey->saferp.K[i+1][15]) & 255; + +int main(void) +{ + int b[16], b2[16], x, y, z; + +/* -- ENCRYPT --- */ + for (x = 0; x < 16; x++) b[x] = x; + /* emit encrypt preabmle */ +printf( +"void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey)\n" +"{\n" +" int x;\n" +" unsigned char b[16];\n" +"\n" +" LTC_ARGCHK(pt != NULL);\n" +" LTC_ARGCHK(ct != NULL);\n" +" LTC_ARGCHK(skey != NULL);\n" +"\n" +" /* do eight rounds */\n" +" for (x = 0; x < 16; x++) {\n" +" b[x] = pt[x];\n" +" }\n"); + + /* do 8 rounds of ROUND; LT; */ + for (x = 0; x < 8; x++) { + /* ROUND(..., x*2) */ + for (y = 0; y < 16; y++) { +printf("b[%d] = (safer_%cbox[(b[%d] %c skey->saferp.K[%d][%d]) & 255] %c skey->saferp.K[%d][%d]) & 255;\n", + b[y], "elle"[y&3], b[y], "^++^"[y&3], x*2, y, "+^^+"[y&3], x*2+1, y); + } + + /* LT */ + for (y = 0; y < 4; y++) { +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[0], b[0], b[1], b[0], b[1]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[2], b[2], b[3], b[3], b[2]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[4], b[4], b[5], b[5], b[4]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[6], b[6], b[7], b[7], b[6]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[8], b[8], b[9], b[9], b[8]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[10], b[10], b[11], b[11], b[10]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[12], b[12], b[13], b[13], b[12]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[14], b[14], b[15], b[15], b[14]); + if (y < 3) { + SHUF; + } + } + } + +printf( +" if (skey->saferp.rounds <= 8) {\n"); +/* finish */ + for (x = 0; x < 16; x++) { + printf( +" ct[%d] = (b[%d] %c skey->saferp.K[skey->saferp.rounds*2][%d]) & 255;\n", + x, b[x], "^++^"[x&3], x); + } + printf(" return;\n }\n"); + + /* 192-bit keys */ +printf( +" /* 192-bit key? */\n" +" if (skey->saferp.rounds > 8) {\n"); + + /* do 4 rounds of ROUND; LT; */ + for (x = 8; x < 12; x++) { + /* ROUND(..., x*2) */ + for (y = 0; y < 16; y++) { +printf("b[%d] = (safer_%cbox[(b[%d] %c skey->saferp.K[%d][%d]) & 255] %c skey->saferp.K[%d][%d]) & 255;\n", + b[y], "elle"[y&3], b[y], "^++^"[y&3], x*2, y, "+^^+"[y&3], x*2+1, y); + } + + /* LT */ + for (y = 0; y < 4; y++) { +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[0], b[0], b[1], b[0], b[1]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[2], b[2], b[3], b[3], b[2]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[4], b[4], b[5], b[5], b[4]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[6], b[6], b[7], b[7], b[6]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[8], b[8], b[9], b[9], b[8]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[10], b[10], b[11], b[11], b[10]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[12], b[12], b[13], b[13], b[12]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[14], b[14], b[15], b[15], b[14]); + if (y < 3) { + SHUF; + } + } + } +printf("}\n"); + +printf( +" if (skey->saferp.rounds <= 12) {\n"); +/* finish */ + for (x = 0; x < 16; x++) { + printf( +" ct[%d] = (b[%d] %c skey->saferp.K[skey->saferp.rounds*2][%d]) & 255;\n", + x, b[x], "^++^"[x&3], x); + } + printf(" return;\n }\n"); + + /* 256-bit keys */ +printf( +" /* 256-bit key? */\n" +" if (skey->saferp.rounds > 12) {\n"); + + /* do 4 rounds of ROUND; LT; */ + for (x = 12; x < 16; x++) { + /* ROUND(..., x*2) */ + for (y = 0; y < 16; y++) { +printf("b[%d] = (safer_%cbox[(b[%d] %c skey->saferp.K[%d][%d]) & 255] %c skey->saferp.K[%d][%d]) & 255;\n", + b[y], "elle"[y&3], b[y], "^++^"[y&3], x*2, y, "+^^+"[y&3], x*2+1, y); + } + + /* LT */ + for (y = 0; y < 4; y++) { +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[0], b[0], b[1], b[0], b[1]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[2], b[2], b[3], b[3], b[2]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[4], b[4], b[5], b[5], b[4]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[6], b[6], b[7], b[7], b[6]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[8], b[8], b[9], b[9], b[8]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[10], b[10], b[11], b[11], b[10]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[12], b[12], b[13], b[13], b[12]); +printf(" b[%d] = (b[%d] + (b[%d] = (b[%d] + b[%d]) & 255)) & 255;\n", b[14], b[14], b[15], b[15], b[14]); + if (y < 3) { + SHUF; + } + } + } +/* finish */ + for (x = 0; x < 16; x++) { + printf( +" ct[%d] = (b[%d] %c skey->saferp.K[skey->saferp.rounds*2][%d]) & 255;\n", + x, b[x], "^++^"[x&3], x); + } + printf(" return;\n"); +printf(" }\n}\n\n"); + + return 0; +} + diff --git a/notes/ocb_tv.txt b/notes/ocb_tv.txt index aefd8fd..6e0ff9d 100644 --- a/notes/ocb_tv.txt +++ b/notes/ocb_tv.txt @@ -329,3 +329,57 @@ OCB-skipjack (10 byte key) 15: 1D5A7AD556FF3078284BB21A536DAA, 01FAE2F4936ED9D2 16: 4B8B71396924880CB33EA6EC6593F969, A0F4B1BE3B9B4CCE +OCB-anubis (16 byte key) + 0: , D22ACF880B297DB0513DFAF0D2DF57D9 + 1: 59, 210A179469D6568AB9470C760415574E + 2: AFA5, 1223F9CD160ABE2F257164C6E5533C87 + 3: 969BEC, A57EC767543CA2ADBA4F5A7423ECA78A + 4: CF8B31F1, 13B5BF9CD87CE15CE696F3AF1B082650 + 5: 9B22DF3852, 4937FDDA0AFDDA04CCD53CCBB0A82745 + 6: E11719B2F0F8, 6847931DBF0223F5CEF66AE3F4DFCF9B + 7: 5A85E0F6DD2266, A1A0AF45A68A681CC396615FE1E1DFB5 + 8: 7F2DFCC65ED86976, 13614A3C6E0E08611D8DF8EE5B7D788F + 9: 1DAF10DFA3F1D53E50, 673632B6DD553BAE90E9E6CC8CDE0FA5 + 10: AF74FD9671F9C0A9879C, B8B4DD448FE967207227B84E42126D90 + 11: 49421CED1167A882E26297, 21C8951A1761E4BD13BC85CBD14D30BD + 12: BC0BC779B83F07D30CB340DA, FAABD25E14FFD8D468AD6616021F604C + 13: 843D7E00F94E61AE950B9AA191, 08933ED5FBDCAF72F788393CD5422D0F + 14: 296F15C383C511C36258F528E331, 8BFFADF5655C1864057D69A6706D1739 + 15: E31D2E80B2DBA4FBFAF52DB0513838, C4CD36821EC631CCBF1F258EE9931288 + 16: 87F319FE9A48E2D087EDF95563896EE5, 517960488E5A118D150A1573E76C290A + 17: 9632B7DC1740BBE0A7AEEFD0F535B5AE8A, 0C24D0950873621D319A928862D3A6AC + 18: 359431ED4B3AC537238CAC2F86126972D403, 4A0CED2F4BFA3355C17D6C5DF9FABFAA + 19: E15B50172EE8DA9C552D448A5A48BEEAA2F11D, 8166B2A2D3A0745D1055F9F503FD6C03 + 20: 75842DDC0D5E3BD80225E4BFBD1298421244D7EF, BB957BB2582B67B63978BCFD7A949EDD + 21: 3DD69162716D5F3E096E614991CAD7ED8E01F926B8, 40A954F31F5B0A2C5DD220ACED8D2B3E + 22: 8A49AC14F59593D5399A10F9346E2FD36F47F64ED419, 4324D408CE7F86370495AF14FBD1A859 + 23: 6AA8FA353BCAAB4262211D75F13D27BE173526B8BC3CFC, BA3A27D79EC8ECBC5A78CB9FD095B766 + 24: B918192BB72CFEF980298EEE570460356A4BA1755576FEAA, EB341ECE0A070E769F498600EE4EBF77 + 25: BEFAE0B77E42A2FD18958D9E43202E8A338562AFF8317461B0, 444C1D6BDC026A01012BB2CEEAD89C2C + 26: 07E86D49CFFE6FB08FDF44584033AF321447003D8AD3862C00C9, DA9355A79B224EF662DA65F19BE494A7 + 27: 911BB223AC6F6E54082FBFEDEC300D73FCAF715CCA35949212B372, 3496160A46A21DCDB5A4C179F159D860 + 28: ABB563FC803715F59AA35460E98470E2E94E4270455ACEBF4297641B, 899CFE1946A060DE620879B8A7464718 + 29: 47D98E83B5849CDE19B14ABCF9EA6CA9684AB49A3AB36BD14F328D808C, 6D76CD5EFF6D4AD3B67A56DF1EB42E05 + 30: C8BF0B71A95884FFB93D64C57E327A4754EC5A1EE26632CF8E0B6B26CBDE, 2B3BE785263B1A400E5893273AFD09AE + 31: 9804D668CF2D75CA58C9671F65630E33909269B9511AF9119BE88EBB35F00C, 3DDA028B1A2339CA817DC8D9371E0FF8 + 32: F6E038A82A09BCD20BAAC7926B2296B78F9CBA9DD12C497C47EA08DBCD8CEA3A, A203FC1E68E21A52E72224891AC10EE2 + +OCB-khazad (16 byte key) + 0: , BDEDFF7AA0070063 + 1: 00, 67E951582D66ED93 + 2: 5FED, 09DC8AEAD70673DE + 3: 26A7CC, CE1436CE1E37D4B0 + 4: 3D2BD063, 574C24395F31511A + 5: 597F1AFCB1, 6FBBE820C6F26CDB + 6: 202DAE442DF6, 58CA6E5706C9852D + 7: 7C20EDA18E9444, AABF0DA252A1BAAD + 8: DEC02BF76DFD5B77, A0A97446B80EACB6 + 9: 5D7A42F73843F9200E, A1DD603372D124CB + 10: 0D4710E454C19B68369E, CC78E9D7EAA6A39F + 11: 126694191BF09A29DCF40E, 76C9B84FA3E8913F + 12: A94EBB86BD325B4FA1942FA5, 613DE312DB1666F7 + 13: 4F9462386469EA0EFDC1BFAFE9, 5247244FD4BBAA6F + 14: 4EB794DFCF3823BDC38FA5EF3B23, 0C12017B5E058398 + 15: D870479780CC5B3B13A7A39029A56F, 003D3FCD31D497B5 + 16: A47BF1218AC86A60F6002CE004AF5E50, B4EC27091D5DCD58 + diff --git a/notes/omac_tv.txt b/notes/omac_tv.txt index e74f76f..25f026f 100644 --- a/notes/omac_tv.txt +++ b/notes/omac_tv.txt @@ -329,3 +329,57 @@ OMAC-skipjack (10 byte key) 15: ED91F98DA98F42C4 16: D8D0FA5CE96B08BF +OMAC-anubis (16 byte key) + 0: E672617CAA1E641C0E7B4B4CC4787455 + 1: C0C16E8FD63907C08A8ABBB7B73376D3 + 2: 23F97CED54939361830396224A7BDD91 + 3: 7FD87DEA9F05E07212DDF61292D9E13D + 4: 929A11A4D0991A6446B1051926A6048D + 5: 4EB74F1CC0150D86126BC6FE1FC8253D + 6: 33C2C3C072D05BB6D54F87579C23B116 + 7: DE350181C9E90A79879813A609BE77E2 + 8: DB519EB9EF0E154D9D248734FD3D3724 + 9: 4F7F2E6D3FC72BA94FE24EC0ABBF4E66 + 10: D646389DBCEEDD59EBB6E8F09C422930 + 11: 8547658AE1CE6A8B8D010A1E1FEA7AF4 + 12: C9BE2B7F3630EFDFBD3AEA6A108C86EA + 13: 290417C57096B8B9A1BA3C20FD91285B + 14: 9AF60E99692C5F911CBF969A6E11DC14 + 15: CDA433BE58C98E49EBA8A7108E50DE2B + 16: 7430D0EE631A4659351B8A4489A78D46 + 17: DCC74C0FD0415768FE00225CA14B7DC2 + 18: 0CF2432B1B465F2A8C5FACAAF2FEF619 + 19: DA020680C64E93AE5FCA3D71466D01C1 + 20: B9C33A86E6ED9FCCDCD973382DD1B6A3 + 21: 6631236B9F2F810DD4D97E6046F41AF2 + 22: 0312C322F4D634CF4FBC0C2624E3E9F2 + 23: 111E3E9F8FBDC1E4364622723F1CB524 + 24: 6D2608D7AAF243D5219E14513895BFF6 + 25: 683BD01B43CBC0430A007ACBAB357DC9 + 26: 01B8FC65C56B0F1A5BFEBEDCCF6748D9 + 27: 4D6298D63A80D55491697A6DD8E3694C + 28: 6F0205E4E083CAB00747D723300510DF + 29: 5183BAEEF05E9402A935EB9AFF0AA2A9 + 30: 1E673BFAD4944643A740C59D96A5925C + 31: 940FB4000E34EEE78E8DB402E4A76502 + 32: 87B0C48F3D155AD85D0502D94A4572DE + +OMAC-khazad (16 byte key) + 0: 4EBEFA460499424F + 1: 97AEEAD51E541D16 + 2: 29A35212910C9595 + 3: ABD1577D622074EA + 4: 70A537DE14DD765C + 5: 240A19016DE99C51 + 6: 4D42C10A9F803177 + 7: F464BC3E0DB5A909 + 8: 1C65A01A7C08DAC7 + 9: E49A1428C230C209 + 10: 16DD0FEB7A6505B8 + 11: 2DDDB3E35A05C220 + 12: EC88910C799AC6CC + 13: B2A65C9EF39BEC8A + 14: F0D2366BA91DFFD5 + 15: BCAB623CAB7AAA23 + 16: 9BCEAB857596E478 + diff --git a/notes/pmac_tv.txt b/notes/pmac_tv.txt index 6a920cb..ed0b7fe 100644 --- a/notes/pmac_tv.txt +++ b/notes/pmac_tv.txt @@ -329,3 +329,57 @@ PMAC-skipjack (10 byte key) 15: 2C5BD475AAC44C77 16: FEB892DA66D31A84 +PMAC-anubis (16 byte key) + 0: DF33EE541FFEE6A97FE3A1F72F7A38FC + 1: 0AB28675AC3923C6DD9F5A8E1E2928D0 + 2: 2DABF75D6403E1E1CFAB3E6869FB1088 + 3: 95835D49E09740180B79E394FC2AA744 + 4: F364D6DC2C2078A519E5BAEFE858AFCA + 5: DA4C66A4805FC91FABAECC0D3AEAD850 + 6: 487660FADCAC7B326C492AA051A1DF49 + 7: BF07835AA1A548FA7312509AF35CE3F3 + 8: 3CE8A8B1F324A700923AC0B830D53D99 + 9: 3C54D99AACFAB26E34FC1B0B6BB9EB22 + 10: 0A559F9D107ED76FD19227FDD0752B8A + 11: BFD9E74ADC40B9C7446FDD09558FA584 + 12: F1130F663BC0FA3B1066129E0D1910E9 + 13: 535EAD786F0D211DE7AA78F3CB480803 + 14: CDF5855F00A4C310D95B26751B01A28B + 15: EF6686E999D5A9C35A96D25BB9DBBF57 + 16: E795733AA0AAF16D8F7AB1A8E9C55E54 + 17: E03CA85727D5CF06F56BB6465BB3E5C5 + 18: 6EDDDB6D2292EFF584E382E1BACD1A49 + 19: 7B7FE0D8821836C1AA95578071FF2FD2 + 20: 5F8CC568338400746B61A9286B7CF262 + 21: 32DEE5A11E9EDB04BDF911837CE0FA4D + 22: F1A99914F13B17ABF383F36157FEB170 + 23: 99F541647F382390043CAE5332E3114D + 24: 34C5EBB85693A1979F8CFDF8B431A5BB + 25: 1BA7266568F1E7B4A77A869D3021AC0F + 26: 0FC675C99C24E859F8CE714E86BF5289 + 27: CBFAB21F5ABC47356A43BED806D873C0 + 28: 9659AB1A4D334B622629721F98EECE3A + 29: 644C8BEE41F03BDE7652B03CAEA31E37 + 30: 5B3447AFAD934B4D1E4910A8DFD588E7 + 31: BFF403342E8D50D0447627AEA2F56B23 + 32: 19F468F0FB05184D00FABD40A18DB7B2 + +PMAC-khazad (16 byte key) + 0: F40CEF2E392BEAEB + 1: C6E086BD1CFA0992 + 2: 513F2851583AD69A + 3: 07279D57695D78FF + 4: 051E94FE4CC847B6 + 5: 5E9AAA5989D5C951 + 6: 310D5D740143369A + 7: 9BB1EA8ECD4AF34B + 8: CF886800AF0526C8 + 9: 0B03E2C94729E643 + 10: 42815B308A900EC7 + 11: 9A38A58C438D26DD + 12: 044BFF68FD2BFF76 + 13: 7F5ABBDC29852729 + 14: F81A7D6F7B788A5D + 15: 93098DA8A180AA35 + 16: BACE2F4DA8A89E32 + diff --git a/ocb_decrypt_verify_memory.c b/ocb_decrypt_verify_memory.c deleted file mode 100644 index 2e15b55..0000000 --- a/ocb_decrypt_verify_memory.c +++ /dev/null @@ -1,65 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" - -#ifdef OCB_MODE - -int ocb_decrypt_verify_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, - const unsigned char *ct, unsigned long ctlen, - unsigned char *pt, - const unsigned char *tag, unsigned long taglen, - int *res) -{ - int err; - ocb_state *ocb; - - _ARGCHK(key != NULL); - _ARGCHK(nonce != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(tag != NULL); - _ARGCHK(res != NULL); - - /* allocate memory */ - ocb = XMALLOC(sizeof(ocb_state)); - if (ocb == NULL) { - return CRYPT_MEM; - } - - if ((err = ocb_init(ocb, cipher, key, keylen, nonce)) != CRYPT_OK) { - goto __ERR; - } - - while (ctlen > (unsigned long)ocb->block_len) { - if ((err = ocb_decrypt(ocb, ct, pt)) != CRYPT_OK) { - goto __ERR; - } - ctlen -= ocb->block_len; - pt += ocb->block_len; - ct += ocb->block_len; - } - - err = ocb_done_decrypt(ocb, ct, ctlen, pt, tag, taglen, res); -__ERR: -#ifdef CLEAN_STACK - zeromem(ocb, sizeof(ocb_state)); -#endif - - XFREE(ocb); - - return err; -} - -#endif diff --git a/ocb_done_encrypt.c b/ocb_done_encrypt.c deleted file mode 100644 index 209892e..0000000 --- a/ocb_done_encrypt.c +++ /dev/null @@ -1,29 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" - -#ifdef OCB_MODE - -int ocb_done_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen, - unsigned char *ct, unsigned char *tag, unsigned long *taglen) -{ - _ARGCHK(ocb != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(tag != NULL); - _ARGCHK(taglen != NULL); - return __ocb_done(ocb, pt, ptlen, ct, tag, taglen, 0); -} - -#endif - diff --git a/omac_done.c b/omac_done.c deleted file mode 100644 index 958ee3e..0000000 --- a/omac_done.c +++ /dev/null @@ -1,68 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ -/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */ -#include "mycrypt.h" - -#ifdef OMAC - -int omac_done(omac_state *state, unsigned char *out, unsigned long *outlen) -{ - int err, mode; - unsigned x; - - _ARGCHK(state != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) { - return err; - } - - if ((state->buflen > (int)sizeof(state->block)) || (state->buflen < 0) || - (state->blklen > (int)sizeof(state->block)) || (state->buflen > state->blklen)) { - return CRYPT_INVALID_ARG; - } - - /* figure out mode */ - if (state->buflen != state->blklen) { - /* add the 0x80 byte */ - state->block[state->buflen++] = 0x80; - - /* pad with 0x00 */ - while (state->buflen < state->blklen) { - state->block[state->buflen++] = 0x00; - } - mode = 1; - } else { - mode = 0; - } - - /* now xor prev + Lu[mode] */ - for (x = 0; x < (unsigned)state->blklen; x++) { - state->block[x] ^= state->prev[x] ^ state->Lu[mode][x]; - } - - /* encrypt it */ - cipher_descriptor[state->cipher_idx].ecb_encrypt(state->block, state->block, &state->key); - - /* output it */ - for (x = 0; x < (unsigned)state->blklen && x < *outlen; x++) { - out[x] = state->block[x]; - } - *outlen = x; - -#ifdef CLEAN_STACK - zeromem(state, sizeof(*state)); -#endif - return CRYPT_OK; -} - -#endif - diff --git a/omac_process.c b/omac_process.c deleted file mode 100644 index 0817359..0000000 --- a/omac_process.c +++ /dev/null @@ -1,53 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ -/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */ -#include "mycrypt.h" - -#ifdef OMAC - -int omac_process(omac_state *state, const unsigned char *buf, unsigned long len) -{ - int err, n, x; - - _ARGCHK(state != NULL); - _ARGCHK(buf != NULL); - if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) { - return err; - } - - if ((state->buflen > (int)sizeof(state->block)) || (state->buflen < 0) || - (state->blklen > (int)sizeof(state->block)) || (state->buflen > state->blklen)) { - return CRYPT_INVALID_ARG; - } - - while (len != 0) { - /* ok if the block is full we xor in prev, encrypt and replace prev */ - if (state->buflen == state->blklen) { - for (x = 0; x < state->blklen; x++) { - state->block[x] ^= state->prev[x]; - } - cipher_descriptor[state->cipher_idx].ecb_encrypt(state->block, state->prev, &state->key); - state->buflen = 0; - } - - /* add bytes */ - n = MIN(len, (unsigned long)(state->blklen - state->buflen)); - XMEMCPY(state->block + state->buflen, buf, n); - state->buflen += n; - len -= n; - buf += n; - } - - return CRYPT_OK; -} - -#endif - diff --git a/parsenames.pl b/parsenames.pl new file mode 100644 index 0000000..9047cd1 --- /dev/null +++ b/parsenames.pl @@ -0,0 +1,20 @@ +#!/usr/bin/perl +# +# Splits the list of files and outputs for makefile type files +# wrapped at 80 chars +# +# Tom St Denis +@a = split(" ", $ARGV[1]); +$b = "$ARGV[0]="; +$len = length($b); +print $b; +foreach my $obj (@a) { + $len = $len + length($obj); + $obj =~ s/\*/\$/; + if ($len > 80) { + printf "\\\n"; + $len = length($obj); + } + print "$obj "; +} +print "\n\n"; diff --git a/pmac_memory.c b/pmac_memory.c deleted file mode 100644 index af2b197..0000000 --- a/pmac_memory.c +++ /dev/null @@ -1,56 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" - -#ifdef PMAC - -int pmac_memory(int cipher, - const unsigned char *key, unsigned long keylen, - const unsigned char *msg, unsigned long msglen, - unsigned char *out, unsigned long *outlen) -{ - int err; - pmac_state *pmac; - - _ARGCHK(key != NULL); - _ARGCHK(msg != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - - /* allocate ram for pmac state */ - pmac = XMALLOC(sizeof(pmac_state)); - if (pmac == NULL) { - return CRYPT_MEM; - } - - if ((err = pmac_init(pmac, cipher, key, keylen)) != CRYPT_OK) { - goto __ERR; - } - if ((err = pmac_process(pmac, msg, msglen)) != CRYPT_OK) { - goto __ERR; - } - if ((err = pmac_done(pmac, out, outlen)) != CRYPT_OK) { - goto __ERR; - } - - err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK - zeromem(pmac, sizeof(pmac_state)); -#endif - - XFREE(pmac); - return err; -} - -#endif diff --git a/pmac_process.c b/pmac_process.c deleted file mode 100644 index 84b8e58..0000000 --- a/pmac_process.c +++ /dev/null @@ -1,62 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" - -#ifdef PMAC - -int pmac_process(pmac_state *state, const unsigned char *buf, unsigned long len) -{ - int err, n, x; - unsigned char Z[MAXBLOCKSIZE]; - - _ARGCHK(state != NULL); - _ARGCHK(buf != NULL); - if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) { - return err; - } - - if ((state->buflen > (int)sizeof(state->block)) || (state->buflen < 0) || - (state->block_len > (int)sizeof(state->block)) || (state->buflen > state->block_len)) { - return CRYPT_INVALID_ARG; - } - - while (len != 0) { - /* ok if the block is full we xor in prev, encrypt and replace prev */ - if (state->buflen == state->block_len) { - pmac_shift_xor(state); - for (x = 0; x < state->block_len; x++) { - Z[x] = state->Li[x] ^ state->block[x]; - } - cipher_descriptor[state->cipher_idx].ecb_encrypt(Z, Z, &state->key); - for (x = 0; x < state->block_len; x++) { - state->checksum[x] ^= Z[x]; - } - state->buflen = 0; - } - - /* add bytes */ - n = MIN(len, (unsigned long)(state->block_len - state->buflen)); - XMEMCPY(state->block + state->buflen, buf, n); - state->buflen += n; - len -= n; - buf += n; - } - -#ifdef CLEAN_STACK - zeromem(Z, sizeof(Z)); -#endif - - return CRYPT_OK; -} - -#endif diff --git a/pretty.build b/pretty.build deleted file mode 100644 index 3eac213..0000000 --- a/pretty.build +++ /dev/null @@ -1,84 +0,0 @@ -#!/bin/perl -w -# -# Cute little builder for perl -# Total waste of development time... -# -# This will build all the object files and then the archive .a file -# requires GCC, GNU make and a sense of humour. -# -# Tom St Denis -use strict; - -my $count = 0; -my $starttime = time; -my $rate = 0; -print "Scanning for source files...\n"; -foreach my $filename (glob "*.c") { - if (!($filename =~ "aes_tab.c")) { - if (!($filename =~ "twofish_tab.c")) { - if (!($filename =~ "whirltab.c")) { - if (!($filename =~ "sha224.c")) { - if (!($filename =~ "sha384.c")) { - if (!($filename =~ "dh_sys.c")) { - if (!($filename =~ "ecc_sys.c")) { - if (!($filename =~ "sober128tab.c")) { - ++$count; - }}}}}}}} -} -print "Source files to build: $count\nBuilding...\n"; -my $i = 0; -my $lines = 0; -my $filesbuilt = 0; -foreach my $filename (glob "*.c") { - if (!($filename =~ "aes_tab.c")) { - if (!($filename =~ "twofish_tab.c")) { - if (!($filename =~ "whirltab.c")) { - if (!($filename =~ "sha224.c")) { - if (!($filename =~ "sha384.c")) { - if (!($filename =~ "dh_sys.c")) { - if (!($filename =~ "ecc_sys.c")) { - if (!($filename =~ "sober128tab.c")) { - printf("Building %3.2f%%, ", (++$i/$count)*100.0); - if ($i % 4 == 0) { print "/, "; } - if ($i % 4 == 1) { print "-, "; } - if ($i % 4 == 2) { print "\\, "; } - if ($i % 4 == 3) { print "|, "; } - if ($rate > 0) { - my $tleft = ($count - $i) / $rate; - my $tsec = $tleft%60; - my $tmin = ($tleft/60)%60; - my $thour = ($tleft/3600)%60; - printf("%2d:%02d:%02d left, ", $thour, $tmin, $tsec); - } - my $cnt = ($i/$count)*30.0; - my $x = 0; - print "["; - for (; $x < $cnt; $x++) { print "#"; } - for (; $x < 30; $x++) { print " "; } - print "]\r"; - my $tmp = $filename; - $tmp =~ s/\.c/".o"/ge; - if (open(SRC, "<$tmp")) { - close SRC; - } else { - !system("make $tmp > /dev/null 2>/dev/null") or die "\nERROR: Failed to make $tmp!!!\n"; - open( SRC, "<$filename" ) or die "Couldn't open $filename for reading: $!"; - ++$lines while (); - close SRC or die "Error closing $filename after reading: $!"; - ++$filesbuilt; - } - - # update timer - if (time != $starttime) { - my $delay = time - $starttime; - $rate = $i/$delay; - } - }}}}}}}} -} - -# finish building the library -printf("\nFinished building source (%d seconds, %3.2f files per second).\n", time - $starttime, $rate); -print "Compiled approximately $filesbuilt files and $lines lines of code.\n"; -print "Doing final make (building archive...)\n"; -!system("make > /dev/null 2>/dev/null") or die "\nERROR: Failed to perform last make command!!!\n"; -print "done.\n"; \ No newline at end of file diff --git a/rsa_decrypt_key.c b/rsa_decrypt_key.c deleted file mode 100644 index 47a922c..0000000 --- a/rsa_decrypt_key.c +++ /dev/null @@ -1,77 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -#include "mycrypt.h" - -#ifdef MRSA - -/* (PKCS #1 v2.0) decrypt then OAEP depad */ -int rsa_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, - const unsigned char *lparam, unsigned long lparamlen, - prng_state *prng, int prng_idx, - int hash_idx, int *res, - rsa_key *key) -{ - unsigned long modulus_bitlen, modulus_bytelen, x; - int err; - unsigned char *tmp; - - _ARGCHK(outkey != NULL); - _ARGCHK(keylen != NULL); - _ARGCHK(key != NULL); - _ARGCHK(res != NULL); - - /* default to invalid */ - *res = 0; - - /* valid hash/prng ? */ - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } - if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { - return err; - } - - /* get modulus len in bits */ - modulus_bitlen = mp_count_bits(&(key->N)); - - /* outlen must be at least the size of the modulus */ - modulus_bytelen = mp_unsigned_bin_size(&(key->N)); - if (modulus_bytelen != inlen) { - return CRYPT_INVALID_PACKET; - } - - /* allocate ram */ - tmp = XMALLOC(inlen); - if (tmp == NULL) { - return CRYPT_MEM; - } - - /* rsa decode the packet */ - x = inlen; - if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, prng, prng_idx, key)) != CRYPT_OK) { - XFREE(tmp); - return err; - } - - /* now OAEP decode the packet */ - err = pkcs_1_oaep_decode(tmp, x, lparam, lparamlen, modulus_bitlen, hash_idx, - outkey, keylen, res); - XFREE(tmp); - return err; -} - -#endif /* MRSA */ - - - - diff --git a/rsa_sign_hash.c b/rsa_sign_hash.c deleted file mode 100644 index a5d2f95..0000000 --- a/rsa_sign_hash.c +++ /dev/null @@ -1,59 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -#include "mycrypt.h" - -#ifdef MRSA - -/* (PKCS #1, v2.0) PSS pad then sign */ -int rsa_sign_hash(const unsigned char *msghash, unsigned long msghashlen, - unsigned char *sig, unsigned long *siglen, - prng_state *prng, int prng_idx, - int hash_idx, unsigned long saltlen, - rsa_key *key) -{ - unsigned long modulus_bitlen, modulus_bytelen, x; - int err; - - _ARGCHK(msghash != NULL); - _ARGCHK(sig != NULL); - _ARGCHK(siglen != NULL); - _ARGCHK(key != NULL); - - /* valid prng and hash ? */ - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } - if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { - return err; - } - - /* get modulus len in bits */ - modulus_bitlen = mp_count_bits(&(key->N)); - - /* outlen must be at least the size of the modulus */ - modulus_bytelen = mp_unsigned_bin_size(&(key->N)); - if (modulus_bytelen > *siglen) { - return CRYPT_BUFFER_OVERFLOW; - } - - /* PSS pad the key */ - x = *siglen; - if ((err = pkcs_1_pss_encode(msghash, msghashlen, saltlen, prng, prng_idx, - hash_idx, modulus_bitlen, sig, &x)) != CRYPT_OK) { - return err; - } - - /* RSA encode it */ - return rsa_exptmod(sig, x, sig, siglen, PK_PRIVATE, prng, prng_idx, key); -} - -#endif /* MRSA */ diff --git a/rsa_v15_decrypt_key.c b/rsa_v15_decrypt_key.c deleted file mode 100644 index e8c496b..0000000 --- a/rsa_v15_decrypt_key.c +++ /dev/null @@ -1,66 +0,0 @@ - /* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -#include "mycrypt.h" - -#ifdef MRSA - -/* decrypt then PKCS #1 v1.5 depad */ -int rsa_v15_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long keylen, - prng_state *prng, int prng_idx, - int *res, rsa_key *key) -{ - unsigned long modulus_bitlen, modulus_bytelen, x; - int err; - unsigned char *tmp; - - _ARGCHK(outkey != NULL); - _ARGCHK(key != NULL); - _ARGCHK(res != NULL); - - /* default to invalid */ - *res = 0; - - /* valid prng ? */ - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } - - /* get modulus len in bits */ - modulus_bitlen = mp_count_bits(&(key->N)); - - /* outlen must be at least the size of the modulus */ - modulus_bytelen = mp_unsigned_bin_size(&(key->N)); - if (modulus_bytelen != inlen) { - return CRYPT_INVALID_PACKET; - } - - /* allocate ram */ - tmp = XMALLOC(inlen); - if (tmp == NULL) { - return CRYPT_MEM; - } - - /* rsa decode the packet */ - x = inlen; - if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, prng, prng_idx, key)) != CRYPT_OK) { - XFREE(tmp); - return err; - } - - /* PKCS #1 v1.5 depad */ - err = pkcs_1_v15_es_decode(tmp, x, modulus_bitlen, outkey, keylen, res); - XFREE(tmp); - return err; -} - -#endif diff --git a/rsa_v15_encrypt_key.c b/rsa_v15_encrypt_key.c deleted file mode 100644 index 3724a72..0000000 --- a/rsa_v15_encrypt_key.c +++ /dev/null @@ -1,54 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -#include "mycrypt.h" - -#ifdef MRSA - -/* PKCS #1 v1.5 pad then encrypt */ -int rsa_v15_encrypt_key(const unsigned char *inkey, unsigned long inlen, - unsigned char *outkey, unsigned long *outlen, - prng_state *prng, int prng_idx, - rsa_key *key) -{ - unsigned long modulus_bitlen, modulus_bytelen, x; - int err; - - _ARGCHK(inkey != NULL); - _ARGCHK(outkey != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); - - /* valid prng? */ - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } - - /* get modulus len in bits */ - modulus_bitlen = mp_count_bits(&(key->N)); - - /* outlen must be at least the size of the modulus */ - modulus_bytelen = mp_unsigned_bin_size(&(key->N)); - if (modulus_bytelen > *outlen) { - return CRYPT_BUFFER_OVERFLOW; - } - - /* pad it */ - x = *outlen; - if ((err = pkcs_1_v15_es_encode(inkey, inlen, modulus_bitlen, prng, prng_idx, outkey, &x)) != CRYPT_OK) { - return err; - } - - /* encrypt it */ - return rsa_exptmod(outkey, x, outkey, outlen, PK_PUBLIC, prng, prng_idx, key); -} - -#endif diff --git a/rsa_v15_sign_hash.c b/rsa_v15_sign_hash.c deleted file mode 100644 index 0a3da2a..0000000 --- a/rsa_v15_sign_hash.c +++ /dev/null @@ -1,57 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -#include "mycrypt.h" - -#ifdef MRSA - -/* PKCS #1 v1.5 pad then sign */ -int rsa_v15_sign_hash(const unsigned char *msghash, unsigned long msghashlen, - unsigned char *sig, unsigned long *siglen, - prng_state *prng, int prng_idx, - int hash_idx, rsa_key *key) -{ - unsigned long modulus_bitlen, modulus_bytelen, x; - int err; - - _ARGCHK(msghash != NULL); - _ARGCHK(sig != NULL); - _ARGCHK(siglen != NULL); - _ARGCHK(key != NULL); - - /* valid prng and hash ? */ - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } - if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { - return err; - } - - /* get modulus len in bits */ - modulus_bitlen = mp_count_bits(&(key->N)); - - /* outlen must be at least the size of the modulus */ - modulus_bytelen = mp_unsigned_bin_size(&(key->N)); - if (modulus_bytelen > *siglen) { - return CRYPT_BUFFER_OVERFLOW; - } - - /* PKCS #1 v1.5 pad the key */ - x = *siglen; - if ((err = pkcs_1_v15_sa_encode(msghash, msghashlen, hash_idx, modulus_bitlen, sig, &x)) != CRYPT_OK) { - return err; - } - - /* RSA encode it */ - return rsa_exptmod(sig, x, sig, siglen, PK_PRIVATE, prng, prng_idx, key); -} - -#endif diff --git a/sprng.c b/sprng.c deleted file mode 100644 index 090bd01..0000000 --- a/sprng.c +++ /dev/null @@ -1,80 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* A secure PRNG using the RNG functions. Basically this is a - * wrapper that allows you to use a secure RNG as a PRNG - * in the various other functions. - */ -#include "mycrypt.h" - -#ifdef SPRNG - -const struct _prng_descriptor sprng_desc = -{ - "sprng", 0, - &sprng_start, - &sprng_add_entropy, - &sprng_ready, - &sprng_read, - &sprng_done, - &sprng_export, - &sprng_import, - &sprng_test -}; - -int sprng_start(prng_state *prng) -{ - return CRYPT_OK; -} - -int sprng_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng) -{ - return CRYPT_OK; -} - -int sprng_ready(prng_state *prng) -{ - return CRYPT_OK; -} - -unsigned long sprng_read(unsigned char *buf, unsigned long len, prng_state *prng) -{ - _ARGCHK(buf != NULL); - return rng_get_bytes(buf, len, NULL); -} - -int sprng_done(prng_state *prng) -{ - return CRYPT_OK; -} - -int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng) -{ - _ARGCHK(outlen != NULL); - - *outlen = 0; - return CRYPT_OK; -} - -int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng) -{ - return CRYPT_OK; -} - -int sprng_test(void) -{ - return CRYPT_OK; -} - -#endif - - - diff --git a/aes.c b/src/ciphers/aes/aes.c similarity index 88% rename from aes.c rename to src/ciphers/aes/aes.c index 949c22b..7df04f2 100644 --- a/aes.c +++ b/src/ciphers/aes/aes.c @@ -25,8 +25,12 @@ * @author Paulo Barreto --- */ +/** + @file aes.c + Implementation of AES +*/ -#include "mycrypt.h" +#include "tomcrypt.h" #ifdef RIJNDAEL @@ -38,7 +42,7 @@ #define ECB_TEST rijndael_test #define ECB_KS rijndael_keysize -const struct _cipher_descriptor rijndael_desc = +const struct ltc_cipher_descriptor rijndael_desc = { "rijndael", 6, @@ -46,7 +50,7 @@ const struct _cipher_descriptor rijndael_desc = SETUP, ECB_ENC, ECB_DEC, ECB_TEST, ECB_KS }; -const struct _cipher_descriptor aes_desc = +const struct ltc_cipher_descriptor aes_desc = { "aes", 6, @@ -60,7 +64,7 @@ const struct _cipher_descriptor aes_desc = #define ECB_ENC rijndael_enc_ecb_encrypt #define ECB_KS rijndael_enc_keysize -const struct _cipher_descriptor rijndael_enc_desc = +const struct ltc_cipher_descriptor rijndael_enc_desc = { "rijndael", 6, @@ -68,7 +72,7 @@ const struct _cipher_descriptor rijndael_enc_desc = SETUP, ECB_ENC, NULL, NULL, ECB_KS }; -const struct _cipher_descriptor aes_enc_desc = +const struct ltc_cipher_descriptor aes_enc_desc = { "aes", 6, @@ -89,7 +93,7 @@ static ulong32 setup_mix(ulong32 temp) } #ifndef ENCRYPT_ONLY -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE static ulong32 setup_mix2(ulong32 temp) { return Td0(255 & Te4[byte(temp, 3)]) ^ @@ -100,21 +104,29 @@ static ulong32 setup_mix2(ulong32 temp) #endif #endif -int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey) + /** + Initialize the AES (Rijndael) block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +int SETUP(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { int i, j; ulong32 temp, *rk; #ifndef ENCRYPT_ONLY ulong32 *rrk; #endif - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (keylen != 16 && keylen != 24 && keylen != 32) { return CRYPT_INVALID_KEYSIZE; } - if (rounds != 0 && rounds != (10 + ((keylen/8)-2)*2)) { + if (num_rounds != 0 && num_rounds != (10 + ((keylen/8)-2)*2)) { return CRYPT_INVALID_ROUNDS; } @@ -181,7 +193,7 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey) break; } temp = rk[11]; - rk[12] = rk[ 4] ^ setup_mix(ROR(temp, 8)); + rk[12] = rk[ 4] ^ setup_mix(RORc(temp, 8)); rk[13] = rk[ 5] ^ rk[12]; rk[14] = rk[ 6] ^ rk[13]; rk[15] = rk[ 7] ^ rk[14]; @@ -189,7 +201,7 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey) } } else { /* this can't happen */ - j = 4; + return CRYPT_ERROR; } #ifndef ENCRYPT_ONLY @@ -208,7 +220,7 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey) for (i = 1; i < skey->rijndael.Nr; i++) { rrk -= 4; rk += 4; - #ifdef SMALL_CODE + #ifdef LTC_SMALL_CODE temp = rrk[0]; rk[0] = setup_mix2(temp); temp = rrk[1]; @@ -258,7 +270,13 @@ int SETUP(const unsigned char *key, int keylen, int rounds, symmetric_key *skey) return CRYPT_OK; } -#ifdef CLEAN_STACK +/** + Encrypts a block of text with AES + @param pt The input plaintext (16 bytes) + @param ct The output ciphertext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK static void _rijndael_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) @@ -267,9 +285,9 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) ulong32 s0, s1, s2, s3, t0, t1, t2, t3, *rk; int Nr, r; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); Nr = skey->rijndael.Nr; rk = skey->rijndael.eK; @@ -284,7 +302,7 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) LOAD32H(s3, pt + 12); s3 ^= rk[3]; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE for (r = 0; ; r++) { rk += 4; @@ -418,7 +436,7 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) STORE32H(s3, ct+12); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { _rijndael_ecb_encrypt(pt, ct, skey); @@ -428,7 +446,13 @@ void ECB_ENC(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #ifndef ENCRYPT_ONLY -#ifdef CLEAN_STACK +/** + Decrypts a block of text with AES + @param ct The input ciphertext (16 bytes) + @param pt The output plaintext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK static void _rijndael_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) @@ -437,9 +461,9 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) ulong32 s0, s1, s2, s3, t0, t1, t2, t3, *rk; int Nr, r; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); Nr = skey->rijndael.Nr; rk = skey->rijndael.dK; @@ -453,7 +477,7 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) LOAD32H(s2, ct + 8); s2 ^= rk[2]; LOAD32H(s3, ct + 12); s3 ^= rk[3]; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE for (r = 0; ; r++) { rk += 4; t0 = @@ -588,7 +612,7 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { _rijndael_ecb_decrypt(ct, pt, skey); @@ -596,6 +620,10 @@ void ECB_DEC(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) } #endif +/** + Performs a self-test of the AES block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int ECB_TEST(void) { #ifndef LTC_TEST @@ -679,20 +707,25 @@ int ECB_TEST(void) #endif /* ENCRYPT_ONLY */ -int ECB_KS(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int ECB_KS(int *keysize) { - _ARGCHK(desired_keysize != NULL); + LTC_ARGCHK(keysize != NULL); - if (*desired_keysize < 16) + if (*keysize < 16) return CRYPT_INVALID_KEYSIZE; - if (*desired_keysize < 24) { - *desired_keysize = 16; + if (*keysize < 24) { + *keysize = 16; return CRYPT_OK; - } else if (*desired_keysize < 32) { - *desired_keysize = 24; + } else if (*keysize < 32) { + *keysize = 24; return CRYPT_OK; } else { - *desired_keysize = 32; + *keysize = 32; return CRYPT_OK; } } diff --git a/aes_tab.c b/src/ciphers/aes/aes_tab.c similarity index 99% rename from aes_tab.c rename to src/ciphers/aes/aes_tab.c index cb450a7..135b8f9 100644 --- a/aes_tab.c +++ b/src/ciphers/aes/aes_tab.c @@ -23,6 +23,10 @@ Td3[x] = Si[x].[09, 0d, 0b, 0e]; Td4[x] = Si[x].[01, 01, 01, 01]; */ +/** + @file aes_tab.c + AES tables +*/ static const ulong32 TE0[256] = { 0xc66363a5UL, 0xf87c7c84UL, 0xee777799UL, 0xf67b7b8dUL, 0xfff2f20dUL, 0xd66b6bbdUL, 0xde6f6fb1UL, 0x91c5c554UL, @@ -295,17 +299,17 @@ static const ulong32 Td4[256] = { #endif /* ENCRYPT_ONLY */ -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE #define Te0(x) TE0[x] -#define Te1(x) ROR(TE0[x], 8) -#define Te2(x) ROR(TE0[x], 16) -#define Te3(x) ROR(TE0[x], 24) +#define Te1(x) RORc(TE0[x], 8) +#define Te2(x) RORc(TE0[x], 16) +#define Te3(x) RORc(TE0[x], 24) #define Td0(x) TD0[x] -#define Td1(x) ROR(TD0[x], 8) -#define Td2(x) ROR(TD0[x], 16) -#define Td3(x) ROR(TD0[x], 24) +#define Td1(x) RORc(TD0[x], 8) +#define Td2(x) RORc(TD0[x], 16) +#define Td3(x) RORc(TD0[x], 24) #define Te4_0 0x000000FF & Te4 #define Te4_1 0x0000FF00 & Te4 diff --git a/src/ciphers/anubis.c b/src/ciphers/anubis.c new file mode 100644 index 0000000..d4543d9 --- /dev/null +++ b/src/ciphers/anubis.c @@ -0,0 +1,1541 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ + +/** + @file anubis.c + Anubis implementation derived from public domain source + Authors: Paulo S.L.M. Barreto and Vincent Rijmen. +*/ + +#include "tomcrypt.h" + +#ifdef ANUBIS + +const struct ltc_cipher_descriptor anubis_desc = { + "anubis", + 19, + 16, 40, 16, 12, + &anubis_setup, + &anubis_ecb_encrypt, + &anubis_ecb_decrypt, + &anubis_test, + &anubis_keysize +}; + +#define MIN_N 4 +#define MAX_N 10 +#define MIN_ROUNDS (8 + MIN_N) +#define MAX_ROUNDS (8 + MAX_N) +#define MIN_KEYSIZEB (4*MIN_N) +#define MAX_KEYSIZEB (4*MAX_N) +#define BLOCKSIZE 128 +#define BLOCKSIZEB (BLOCKSIZE/8) + + +/* + * Though Anubis is endianness-neutral, the encryption tables are listed + * in BIG-ENDIAN format, which is adopted throughout this implementation + * (but little-endian notation would be equally suitable if consistently + * employed). + */ +#if defined(ANUBIS_TWEAK) + +static const ulong32 T0[256] = { + 0xba69d2bbU, 0x54a84de5U, 0x2f5ebce2U, 0x74e8cd25U, + 0x53a651f7U, 0xd3bb6bd0U, 0xd2b96fd6U, 0x4d9a29b3U, + 0x50a05dfdU, 0xac458acfU, 0x8d070e09U, 0xbf63c6a5U, + 0x70e0dd3dU, 0x52a455f1U, 0x9a29527bU, 0x4c982db5U, + 0xeac98f46U, 0xd5b773c4U, 0x97336655U, 0xd1bf63dcU, + 0x3366ccaaU, 0x51a259fbU, 0x5bb671c7U, 0xa651a2f3U, + 0xdea15ffeU, 0x48903dadU, 0xa84d9ad7U, 0x992f5e71U, + 0xdbab4be0U, 0x3264c8acU, 0xb773e695U, 0xfce5d732U, + 0xe3dbab70U, 0x9e214263U, 0x913f7e41U, 0x9b2b567dU, + 0xe2d9af76U, 0xbb6bd6bdU, 0x4182199bU, 0x6edca579U, + 0xa557aef9U, 0xcb8b0b80U, 0x6bd6b167U, 0x95376e59U, + 0xa15fbee1U, 0xf3fbeb10U, 0xb17ffe81U, 0x0204080cU, + 0xcc851792U, 0xc49537a2U, 0x1d3a744eU, 0x14285078U, + 0xc39b2bb0U, 0x63c69157U, 0xdaa94fe6U, 0x5dba69d3U, + 0x5fbe61dfU, 0xdca557f2U, 0x7dfae913U, 0xcd871394U, + 0x7ffee11fU, 0x5ab475c1U, 0x6cd8ad75U, 0x5cb86dd5U, + 0xf7f3fb08U, 0x264c98d4U, 0xffe3db38U, 0xedc79354U, + 0xe8cd874aU, 0x9d274e69U, 0x6fdea17fU, 0x8e010203U, + 0x19326456U, 0xa05dbae7U, 0xf0fde71aU, 0x890f1e11U, + 0x0f1e3c22U, 0x070e1c12U, 0xaf4386c5U, 0xfbebcb20U, + 0x08102030U, 0x152a547eU, 0x0d1a342eU, 0x04081018U, + 0x01020406U, 0x64c88d45U, 0xdfa35bf8U, 0x76ecc529U, + 0x79f2f90bU, 0xdda753f4U, 0x3d7af48eU, 0x162c5874U, + 0x3f7efc82U, 0x376edcb2U, 0x6ddaa973U, 0x3870e090U, + 0xb96fdeb1U, 0x73e6d137U, 0xe9cf834cU, 0x356ad4beU, + 0x55aa49e3U, 0x71e2d93bU, 0x7bf6f107U, 0x8c050a0fU, + 0x72e4d531U, 0x880d1a17U, 0xf6f1ff0eU, 0x2a54a8fcU, + 0x3e7cf884U, 0x5ebc65d9U, 0x274e9cd2U, 0x468c0589U, + 0x0c183028U, 0x65ca8943U, 0x68d0bd6dU, 0x61c2995bU, + 0x03060c0aU, 0xc19f23bcU, 0x57ae41efU, 0xd6b17fceU, + 0xd9af43ecU, 0x58b07dcdU, 0xd8ad47eaU, 0x66cc8549U, + 0xd7b37bc8U, 0x3a74e89cU, 0xc88d078aU, 0x3c78f088U, + 0xfae9cf26U, 0x96316253U, 0xa753a6f5U, 0x982d5a77U, + 0xecc59752U, 0xb86ddab7U, 0xc7933ba8U, 0xae4182c3U, + 0x69d2b96bU, 0x4b9631a7U, 0xab4b96ddU, 0xa94f9ed1U, + 0x67ce814fU, 0x0a14283cU, 0x478e018fU, 0xf2f9ef16U, + 0xb577ee99U, 0x224488ccU, 0xe5d7b364U, 0xeec19f5eU, + 0xbe61c2a3U, 0x2b56acfaU, 0x811f3e21U, 0x1224486cU, + 0x831b362dU, 0x1b366c5aU, 0x0e1c3824U, 0x23468ccaU, + 0xf5f7f304U, 0x458a0983U, 0x214284c6U, 0xce811f9eU, + 0x499239abU, 0x2c58b0e8U, 0xf9efc32cU, 0xe6d1bf6eU, + 0xb671e293U, 0x2850a0f0U, 0x172e5c72U, 0x8219322bU, + 0x1a34685cU, 0x8b0b161dU, 0xfee1df3eU, 0x8a09121bU, + 0x09122436U, 0xc98f038cU, 0x87132635U, 0x4e9c25b9U, + 0xe1dfa37cU, 0x2e5cb8e4U, 0xe4d5b762U, 0xe0dda77aU, + 0xebcb8b40U, 0x903d7a47U, 0xa455aaffU, 0x1e3c7844U, + 0x85172e39U, 0x60c09d5dU, 0x00000000U, 0x254a94deU, + 0xf4f5f702U, 0xf1ffe31cU, 0x94356a5fU, 0x0b162c3aU, + 0xe7d3bb68U, 0x75eac923U, 0xefc39b58U, 0x3468d0b8U, + 0x3162c4a6U, 0xd4b577c2U, 0xd0bd67daU, 0x86112233U, + 0x7efce519U, 0xad478ec9U, 0xfde7d334U, 0x2952a4f6U, + 0x3060c0a0U, 0x3b76ec9aU, 0x9f234665U, 0xf8edc72aU, + 0xc6913faeU, 0x13264c6aU, 0x060c1814U, 0x050a141eU, + 0xc59733a4U, 0x11224466U, 0x77eec12fU, 0x7cf8ed15U, + 0x7af4f501U, 0x78f0fd0dU, 0x366cd8b4U, 0x1c387048U, + 0x3972e496U, 0x59b279cbU, 0x18306050U, 0x56ac45e9U, + 0xb37bf68dU, 0xb07dfa87U, 0x244890d8U, 0x204080c0U, + 0xb279f28bU, 0x9239724bU, 0xa35bb6edU, 0xc09d27baU, + 0x44880d85U, 0x62c49551U, 0x10204060U, 0xb475ea9fU, + 0x84152a3fU, 0x43861197U, 0x933b764dU, 0xc2992fb6U, + 0x4a9435a1U, 0xbd67cea9U, 0x8f030605U, 0x2d5ab4eeU, + 0xbc65caafU, 0x9c254a6fU, 0x6ad4b561U, 0x40801d9dU, + 0xcf831b98U, 0xa259b2ebU, 0x801d3a27U, 0x4f9e21bfU, + 0x1f3e7c42U, 0xca890f86U, 0xaa4992dbU, 0x42841591U, +}; + +static const ulong32 T1[256] = { + 0x69babbd2U, 0xa854e54dU, 0x5e2fe2bcU, 0xe87425cdU, + 0xa653f751U, 0xbbd3d06bU, 0xb9d2d66fU, 0x9a4db329U, + 0xa050fd5dU, 0x45accf8aU, 0x078d090eU, 0x63bfa5c6U, + 0xe0703dddU, 0xa452f155U, 0x299a7b52U, 0x984cb52dU, + 0xc9ea468fU, 0xb7d5c473U, 0x33975566U, 0xbfd1dc63U, + 0x6633aaccU, 0xa251fb59U, 0xb65bc771U, 0x51a6f3a2U, + 0xa1defe5fU, 0x9048ad3dU, 0x4da8d79aU, 0x2f99715eU, + 0xabdbe04bU, 0x6432acc8U, 0x73b795e6U, 0xe5fc32d7U, + 0xdbe370abU, 0x219e6342U, 0x3f91417eU, 0x2b9b7d56U, + 0xd9e276afU, 0x6bbbbdd6U, 0x82419b19U, 0xdc6e79a5U, + 0x57a5f9aeU, 0x8bcb800bU, 0xd66b67b1U, 0x3795596eU, + 0x5fa1e1beU, 0xfbf310ebU, 0x7fb181feU, 0x04020c08U, + 0x85cc9217U, 0x95c4a237U, 0x3a1d4e74U, 0x28147850U, + 0x9bc3b02bU, 0xc6635791U, 0xa9dae64fU, 0xba5dd369U, + 0xbe5fdf61U, 0xa5dcf257U, 0xfa7d13e9U, 0x87cd9413U, + 0xfe7f1fe1U, 0xb45ac175U, 0xd86c75adU, 0xb85cd56dU, + 0xf3f708fbU, 0x4c26d498U, 0xe3ff38dbU, 0xc7ed5493U, + 0xcde84a87U, 0x279d694eU, 0xde6f7fa1U, 0x018e0302U, + 0x32195664U, 0x5da0e7baU, 0xfdf01ae7U, 0x0f89111eU, + 0x1e0f223cU, 0x0e07121cU, 0x43afc586U, 0xebfb20cbU, + 0x10083020U, 0x2a157e54U, 0x1a0d2e34U, 0x08041810U, + 0x02010604U, 0xc864458dU, 0xa3dff85bU, 0xec7629c5U, + 0xf2790bf9U, 0xa7ddf453U, 0x7a3d8ef4U, 0x2c167458U, + 0x7e3f82fcU, 0x6e37b2dcU, 0xda6d73a9U, 0x703890e0U, + 0x6fb9b1deU, 0xe67337d1U, 0xcfe94c83U, 0x6a35bed4U, + 0xaa55e349U, 0xe2713bd9U, 0xf67b07f1U, 0x058c0f0aU, + 0xe47231d5U, 0x0d88171aU, 0xf1f60effU, 0x542afca8U, + 0x7c3e84f8U, 0xbc5ed965U, 0x4e27d29cU, 0x8c468905U, + 0x180c2830U, 0xca654389U, 0xd0686dbdU, 0xc2615b99U, + 0x06030a0cU, 0x9fc1bc23U, 0xae57ef41U, 0xb1d6ce7fU, + 0xafd9ec43U, 0xb058cd7dU, 0xadd8ea47U, 0xcc664985U, + 0xb3d7c87bU, 0x743a9ce8U, 0x8dc88a07U, 0x783c88f0U, + 0xe9fa26cfU, 0x31965362U, 0x53a7f5a6U, 0x2d98775aU, + 0xc5ec5297U, 0x6db8b7daU, 0x93c7a83bU, 0x41aec382U, + 0xd2696bb9U, 0x964ba731U, 0x4babdd96U, 0x4fa9d19eU, + 0xce674f81U, 0x140a3c28U, 0x8e478f01U, 0xf9f216efU, + 0x77b599eeU, 0x4422cc88U, 0xd7e564b3U, 0xc1ee5e9fU, + 0x61bea3c2U, 0x562bfaacU, 0x1f81213eU, 0x24126c48U, + 0x1b832d36U, 0x361b5a6cU, 0x1c0e2438U, 0x4623ca8cU, + 0xf7f504f3U, 0x8a458309U, 0x4221c684U, 0x81ce9e1fU, + 0x9249ab39U, 0x582ce8b0U, 0xeff92cc3U, 0xd1e66ebfU, + 0x71b693e2U, 0x5028f0a0U, 0x2e17725cU, 0x19822b32U, + 0x341a5c68U, 0x0b8b1d16U, 0xe1fe3edfU, 0x098a1b12U, + 0x12093624U, 0x8fc98c03U, 0x13873526U, 0x9c4eb925U, + 0xdfe17ca3U, 0x5c2ee4b8U, 0xd5e462b7U, 0xdde07aa7U, + 0xcbeb408bU, 0x3d90477aU, 0x55a4ffaaU, 0x3c1e4478U, + 0x1785392eU, 0xc0605d9dU, 0x00000000U, 0x4a25de94U, + 0xf5f402f7U, 0xfff11ce3U, 0x35945f6aU, 0x160b3a2cU, + 0xd3e768bbU, 0xea7523c9U, 0xc3ef589bU, 0x6834b8d0U, + 0x6231a6c4U, 0xb5d4c277U, 0xbdd0da67U, 0x11863322U, + 0xfc7e19e5U, 0x47adc98eU, 0xe7fd34d3U, 0x5229f6a4U, + 0x6030a0c0U, 0x763b9aecU, 0x239f6546U, 0xedf82ac7U, + 0x91c6ae3fU, 0x26136a4cU, 0x0c061418U, 0x0a051e14U, + 0x97c5a433U, 0x22116644U, 0xee772fc1U, 0xf87c15edU, + 0xf47a01f5U, 0xf0780dfdU, 0x6c36b4d8U, 0x381c4870U, + 0x723996e4U, 0xb259cb79U, 0x30185060U, 0xac56e945U, + 0x7bb38df6U, 0x7db087faU, 0x4824d890U, 0x4020c080U, + 0x79b28bf2U, 0x39924b72U, 0x5ba3edb6U, 0x9dc0ba27U, + 0x8844850dU, 0xc4625195U, 0x20106040U, 0x75b49feaU, + 0x15843f2aU, 0x86439711U, 0x3b934d76U, 0x99c2b62fU, + 0x944aa135U, 0x67bda9ceU, 0x038f0506U, 0x5a2deeb4U, + 0x65bcafcaU, 0x259c6f4aU, 0xd46a61b5U, 0x80409d1dU, + 0x83cf981bU, 0x59a2ebb2U, 0x1d80273aU, 0x9e4fbf21U, + 0x3e1f427cU, 0x89ca860fU, 0x49aadb92U, 0x84429115U, +}; + +static const ulong32 T2[256] = { + 0xd2bbba69U, 0x4de554a8U, 0xbce22f5eU, 0xcd2574e8U, + 0x51f753a6U, 0x6bd0d3bbU, 0x6fd6d2b9U, 0x29b34d9aU, + 0x5dfd50a0U, 0x8acfac45U, 0x0e098d07U, 0xc6a5bf63U, + 0xdd3d70e0U, 0x55f152a4U, 0x527b9a29U, 0x2db54c98U, + 0x8f46eac9U, 0x73c4d5b7U, 0x66559733U, 0x63dcd1bfU, + 0xccaa3366U, 0x59fb51a2U, 0x71c75bb6U, 0xa2f3a651U, + 0x5ffedea1U, 0x3dad4890U, 0x9ad7a84dU, 0x5e71992fU, + 0x4be0dbabU, 0xc8ac3264U, 0xe695b773U, 0xd732fce5U, + 0xab70e3dbU, 0x42639e21U, 0x7e41913fU, 0x567d9b2bU, + 0xaf76e2d9U, 0xd6bdbb6bU, 0x199b4182U, 0xa5796edcU, + 0xaef9a557U, 0x0b80cb8bU, 0xb1676bd6U, 0x6e599537U, + 0xbee1a15fU, 0xeb10f3fbU, 0xfe81b17fU, 0x080c0204U, + 0x1792cc85U, 0x37a2c495U, 0x744e1d3aU, 0x50781428U, + 0x2bb0c39bU, 0x915763c6U, 0x4fe6daa9U, 0x69d35dbaU, + 0x61df5fbeU, 0x57f2dca5U, 0xe9137dfaU, 0x1394cd87U, + 0xe11f7ffeU, 0x75c15ab4U, 0xad756cd8U, 0x6dd55cb8U, + 0xfb08f7f3U, 0x98d4264cU, 0xdb38ffe3U, 0x9354edc7U, + 0x874ae8cdU, 0x4e699d27U, 0xa17f6fdeU, 0x02038e01U, + 0x64561932U, 0xbae7a05dU, 0xe71af0fdU, 0x1e11890fU, + 0x3c220f1eU, 0x1c12070eU, 0x86c5af43U, 0xcb20fbebU, + 0x20300810U, 0x547e152aU, 0x342e0d1aU, 0x10180408U, + 0x04060102U, 0x8d4564c8U, 0x5bf8dfa3U, 0xc52976ecU, + 0xf90b79f2U, 0x53f4dda7U, 0xf48e3d7aU, 0x5874162cU, + 0xfc823f7eU, 0xdcb2376eU, 0xa9736ddaU, 0xe0903870U, + 0xdeb1b96fU, 0xd13773e6U, 0x834ce9cfU, 0xd4be356aU, + 0x49e355aaU, 0xd93b71e2U, 0xf1077bf6U, 0x0a0f8c05U, + 0xd53172e4U, 0x1a17880dU, 0xff0ef6f1U, 0xa8fc2a54U, + 0xf8843e7cU, 0x65d95ebcU, 0x9cd2274eU, 0x0589468cU, + 0x30280c18U, 0x894365caU, 0xbd6d68d0U, 0x995b61c2U, + 0x0c0a0306U, 0x23bcc19fU, 0x41ef57aeU, 0x7fced6b1U, + 0x43ecd9afU, 0x7dcd58b0U, 0x47ead8adU, 0x854966ccU, + 0x7bc8d7b3U, 0xe89c3a74U, 0x078ac88dU, 0xf0883c78U, + 0xcf26fae9U, 0x62539631U, 0xa6f5a753U, 0x5a77982dU, + 0x9752ecc5U, 0xdab7b86dU, 0x3ba8c793U, 0x82c3ae41U, + 0xb96b69d2U, 0x31a74b96U, 0x96ddab4bU, 0x9ed1a94fU, + 0x814f67ceU, 0x283c0a14U, 0x018f478eU, 0xef16f2f9U, + 0xee99b577U, 0x88cc2244U, 0xb364e5d7U, 0x9f5eeec1U, + 0xc2a3be61U, 0xacfa2b56U, 0x3e21811fU, 0x486c1224U, + 0x362d831bU, 0x6c5a1b36U, 0x38240e1cU, 0x8cca2346U, + 0xf304f5f7U, 0x0983458aU, 0x84c62142U, 0x1f9ece81U, + 0x39ab4992U, 0xb0e82c58U, 0xc32cf9efU, 0xbf6ee6d1U, + 0xe293b671U, 0xa0f02850U, 0x5c72172eU, 0x322b8219U, + 0x685c1a34U, 0x161d8b0bU, 0xdf3efee1U, 0x121b8a09U, + 0x24360912U, 0x038cc98fU, 0x26358713U, 0x25b94e9cU, + 0xa37ce1dfU, 0xb8e42e5cU, 0xb762e4d5U, 0xa77ae0ddU, + 0x8b40ebcbU, 0x7a47903dU, 0xaaffa455U, 0x78441e3cU, + 0x2e398517U, 0x9d5d60c0U, 0x00000000U, 0x94de254aU, + 0xf702f4f5U, 0xe31cf1ffU, 0x6a5f9435U, 0x2c3a0b16U, + 0xbb68e7d3U, 0xc92375eaU, 0x9b58efc3U, 0xd0b83468U, + 0xc4a63162U, 0x77c2d4b5U, 0x67dad0bdU, 0x22338611U, + 0xe5197efcU, 0x8ec9ad47U, 0xd334fde7U, 0xa4f62952U, + 0xc0a03060U, 0xec9a3b76U, 0x46659f23U, 0xc72af8edU, + 0x3faec691U, 0x4c6a1326U, 0x1814060cU, 0x141e050aU, + 0x33a4c597U, 0x44661122U, 0xc12f77eeU, 0xed157cf8U, + 0xf5017af4U, 0xfd0d78f0U, 0xd8b4366cU, 0x70481c38U, + 0xe4963972U, 0x79cb59b2U, 0x60501830U, 0x45e956acU, + 0xf68db37bU, 0xfa87b07dU, 0x90d82448U, 0x80c02040U, + 0xf28bb279U, 0x724b9239U, 0xb6eda35bU, 0x27bac09dU, + 0x0d854488U, 0x955162c4U, 0x40601020U, 0xea9fb475U, + 0x2a3f8415U, 0x11974386U, 0x764d933bU, 0x2fb6c299U, + 0x35a14a94U, 0xcea9bd67U, 0x06058f03U, 0xb4ee2d5aU, + 0xcaafbc65U, 0x4a6f9c25U, 0xb5616ad4U, 0x1d9d4080U, + 0x1b98cf83U, 0xb2eba259U, 0x3a27801dU, 0x21bf4f9eU, + 0x7c421f3eU, 0x0f86ca89U, 0x92dbaa49U, 0x15914284U, +}; + +static const ulong32 T3[256] = { + 0xbbd269baU, 0xe54da854U, 0xe2bc5e2fU, 0x25cde874U, + 0xf751a653U, 0xd06bbbd3U, 0xd66fb9d2U, 0xb3299a4dU, + 0xfd5da050U, 0xcf8a45acU, 0x090e078dU, 0xa5c663bfU, + 0x3ddde070U, 0xf155a452U, 0x7b52299aU, 0xb52d984cU, + 0x468fc9eaU, 0xc473b7d5U, 0x55663397U, 0xdc63bfd1U, + 0xaacc6633U, 0xfb59a251U, 0xc771b65bU, 0xf3a251a6U, + 0xfe5fa1deU, 0xad3d9048U, 0xd79a4da8U, 0x715e2f99U, + 0xe04babdbU, 0xacc86432U, 0x95e673b7U, 0x32d7e5fcU, + 0x70abdbe3U, 0x6342219eU, 0x417e3f91U, 0x7d562b9bU, + 0x76afd9e2U, 0xbdd66bbbU, 0x9b198241U, 0x79a5dc6eU, + 0xf9ae57a5U, 0x800b8bcbU, 0x67b1d66bU, 0x596e3795U, + 0xe1be5fa1U, 0x10ebfbf3U, 0x81fe7fb1U, 0x0c080402U, + 0x921785ccU, 0xa23795c4U, 0x4e743a1dU, 0x78502814U, + 0xb02b9bc3U, 0x5791c663U, 0xe64fa9daU, 0xd369ba5dU, + 0xdf61be5fU, 0xf257a5dcU, 0x13e9fa7dU, 0x941387cdU, + 0x1fe1fe7fU, 0xc175b45aU, 0x75add86cU, 0xd56db85cU, + 0x08fbf3f7U, 0xd4984c26U, 0x38dbe3ffU, 0x5493c7edU, + 0x4a87cde8U, 0x694e279dU, 0x7fa1de6fU, 0x0302018eU, + 0x56643219U, 0xe7ba5da0U, 0x1ae7fdf0U, 0x111e0f89U, + 0x223c1e0fU, 0x121c0e07U, 0xc58643afU, 0x20cbebfbU, + 0x30201008U, 0x7e542a15U, 0x2e341a0dU, 0x18100804U, + 0x06040201U, 0x458dc864U, 0xf85ba3dfU, 0x29c5ec76U, + 0x0bf9f279U, 0xf453a7ddU, 0x8ef47a3dU, 0x74582c16U, + 0x82fc7e3fU, 0xb2dc6e37U, 0x73a9da6dU, 0x90e07038U, + 0xb1de6fb9U, 0x37d1e673U, 0x4c83cfe9U, 0xbed46a35U, + 0xe349aa55U, 0x3bd9e271U, 0x07f1f67bU, 0x0f0a058cU, + 0x31d5e472U, 0x171a0d88U, 0x0efff1f6U, 0xfca8542aU, + 0x84f87c3eU, 0xd965bc5eU, 0xd29c4e27U, 0x89058c46U, + 0x2830180cU, 0x4389ca65U, 0x6dbdd068U, 0x5b99c261U, + 0x0a0c0603U, 0xbc239fc1U, 0xef41ae57U, 0xce7fb1d6U, + 0xec43afd9U, 0xcd7db058U, 0xea47add8U, 0x4985cc66U, + 0xc87bb3d7U, 0x9ce8743aU, 0x8a078dc8U, 0x88f0783cU, + 0x26cfe9faU, 0x53623196U, 0xf5a653a7U, 0x775a2d98U, + 0x5297c5ecU, 0xb7da6db8U, 0xa83b93c7U, 0xc38241aeU, + 0x6bb9d269U, 0xa731964bU, 0xdd964babU, 0xd19e4fa9U, + 0x4f81ce67U, 0x3c28140aU, 0x8f018e47U, 0x16eff9f2U, + 0x99ee77b5U, 0xcc884422U, 0x64b3d7e5U, 0x5e9fc1eeU, + 0xa3c261beU, 0xfaac562bU, 0x213e1f81U, 0x6c482412U, + 0x2d361b83U, 0x5a6c361bU, 0x24381c0eU, 0xca8c4623U, + 0x04f3f7f5U, 0x83098a45U, 0xc6844221U, 0x9e1f81ceU, + 0xab399249U, 0xe8b0582cU, 0x2cc3eff9U, 0x6ebfd1e6U, + 0x93e271b6U, 0xf0a05028U, 0x725c2e17U, 0x2b321982U, + 0x5c68341aU, 0x1d160b8bU, 0x3edfe1feU, 0x1b12098aU, + 0x36241209U, 0x8c038fc9U, 0x35261387U, 0xb9259c4eU, + 0x7ca3dfe1U, 0xe4b85c2eU, 0x62b7d5e4U, 0x7aa7dde0U, + 0x408bcbebU, 0x477a3d90U, 0xffaa55a4U, 0x44783c1eU, + 0x392e1785U, 0x5d9dc060U, 0x00000000U, 0xde944a25U, + 0x02f7f5f4U, 0x1ce3fff1U, 0x5f6a3594U, 0x3a2c160bU, + 0x68bbd3e7U, 0x23c9ea75U, 0x589bc3efU, 0xb8d06834U, + 0xa6c46231U, 0xc277b5d4U, 0xda67bdd0U, 0x33221186U, + 0x19e5fc7eU, 0xc98e47adU, 0x34d3e7fdU, 0xf6a45229U, + 0xa0c06030U, 0x9aec763bU, 0x6546239fU, 0x2ac7edf8U, + 0xae3f91c6U, 0x6a4c2613U, 0x14180c06U, 0x1e140a05U, + 0xa43397c5U, 0x66442211U, 0x2fc1ee77U, 0x15edf87cU, + 0x01f5f47aU, 0x0dfdf078U, 0xb4d86c36U, 0x4870381cU, + 0x96e47239U, 0xcb79b259U, 0x50603018U, 0xe945ac56U, + 0x8df67bb3U, 0x87fa7db0U, 0xd8904824U, 0xc0804020U, + 0x8bf279b2U, 0x4b723992U, 0xedb65ba3U, 0xba279dc0U, + 0x850d8844U, 0x5195c462U, 0x60402010U, 0x9fea75b4U, + 0x3f2a1584U, 0x97118643U, 0x4d763b93U, 0xb62f99c2U, + 0xa135944aU, 0xa9ce67bdU, 0x0506038fU, 0xeeb45a2dU, + 0xafca65bcU, 0x6f4a259cU, 0x61b5d46aU, 0x9d1d8040U, + 0x981b83cfU, 0xebb259a2U, 0x273a1d80U, 0xbf219e4fU, + 0x427c3e1fU, 0x860f89caU, 0xdb9249aaU, 0x91158442U, +}; + +static const ulong32 T4[256] = { + 0xbabababaU, 0x54545454U, 0x2f2f2f2fU, 0x74747474U, + 0x53535353U, 0xd3d3d3d3U, 0xd2d2d2d2U, 0x4d4d4d4dU, + 0x50505050U, 0xacacacacU, 0x8d8d8d8dU, 0xbfbfbfbfU, + 0x70707070U, 0x52525252U, 0x9a9a9a9aU, 0x4c4c4c4cU, + 0xeaeaeaeaU, 0xd5d5d5d5U, 0x97979797U, 0xd1d1d1d1U, + 0x33333333U, 0x51515151U, 0x5b5b5b5bU, 0xa6a6a6a6U, + 0xdedededeU, 0x48484848U, 0xa8a8a8a8U, 0x99999999U, + 0xdbdbdbdbU, 0x32323232U, 0xb7b7b7b7U, 0xfcfcfcfcU, + 0xe3e3e3e3U, 0x9e9e9e9eU, 0x91919191U, 0x9b9b9b9bU, + 0xe2e2e2e2U, 0xbbbbbbbbU, 0x41414141U, 0x6e6e6e6eU, + 0xa5a5a5a5U, 0xcbcbcbcbU, 0x6b6b6b6bU, 0x95959595U, + 0xa1a1a1a1U, 0xf3f3f3f3U, 0xb1b1b1b1U, 0x02020202U, + 0xccccccccU, 0xc4c4c4c4U, 0x1d1d1d1dU, 0x14141414U, + 0xc3c3c3c3U, 0x63636363U, 0xdadadadaU, 0x5d5d5d5dU, + 0x5f5f5f5fU, 0xdcdcdcdcU, 0x7d7d7d7dU, 0xcdcdcdcdU, + 0x7f7f7f7fU, 0x5a5a5a5aU, 0x6c6c6c6cU, 0x5c5c5c5cU, + 0xf7f7f7f7U, 0x26262626U, 0xffffffffU, 0xededededU, + 0xe8e8e8e8U, 0x9d9d9d9dU, 0x6f6f6f6fU, 0x8e8e8e8eU, + 0x19191919U, 0xa0a0a0a0U, 0xf0f0f0f0U, 0x89898989U, + 0x0f0f0f0fU, 0x07070707U, 0xafafafafU, 0xfbfbfbfbU, + 0x08080808U, 0x15151515U, 0x0d0d0d0dU, 0x04040404U, + 0x01010101U, 0x64646464U, 0xdfdfdfdfU, 0x76767676U, + 0x79797979U, 0xddddddddU, 0x3d3d3d3dU, 0x16161616U, + 0x3f3f3f3fU, 0x37373737U, 0x6d6d6d6dU, 0x38383838U, + 0xb9b9b9b9U, 0x73737373U, 0xe9e9e9e9U, 0x35353535U, + 0x55555555U, 0x71717171U, 0x7b7b7b7bU, 0x8c8c8c8cU, + 0x72727272U, 0x88888888U, 0xf6f6f6f6U, 0x2a2a2a2aU, + 0x3e3e3e3eU, 0x5e5e5e5eU, 0x27272727U, 0x46464646U, + 0x0c0c0c0cU, 0x65656565U, 0x68686868U, 0x61616161U, + 0x03030303U, 0xc1c1c1c1U, 0x57575757U, 0xd6d6d6d6U, + 0xd9d9d9d9U, 0x58585858U, 0xd8d8d8d8U, 0x66666666U, + 0xd7d7d7d7U, 0x3a3a3a3aU, 0xc8c8c8c8U, 0x3c3c3c3cU, + 0xfafafafaU, 0x96969696U, 0xa7a7a7a7U, 0x98989898U, + 0xececececU, 0xb8b8b8b8U, 0xc7c7c7c7U, 0xaeaeaeaeU, + 0x69696969U, 0x4b4b4b4bU, 0xababababU, 0xa9a9a9a9U, + 0x67676767U, 0x0a0a0a0aU, 0x47474747U, 0xf2f2f2f2U, + 0xb5b5b5b5U, 0x22222222U, 0xe5e5e5e5U, 0xeeeeeeeeU, + 0xbebebebeU, 0x2b2b2b2bU, 0x81818181U, 0x12121212U, + 0x83838383U, 0x1b1b1b1bU, 0x0e0e0e0eU, 0x23232323U, + 0xf5f5f5f5U, 0x45454545U, 0x21212121U, 0xcecececeU, + 0x49494949U, 0x2c2c2c2cU, 0xf9f9f9f9U, 0xe6e6e6e6U, + 0xb6b6b6b6U, 0x28282828U, 0x17171717U, 0x82828282U, + 0x1a1a1a1aU, 0x8b8b8b8bU, 0xfefefefeU, 0x8a8a8a8aU, + 0x09090909U, 0xc9c9c9c9U, 0x87878787U, 0x4e4e4e4eU, + 0xe1e1e1e1U, 0x2e2e2e2eU, 0xe4e4e4e4U, 0xe0e0e0e0U, + 0xebebebebU, 0x90909090U, 0xa4a4a4a4U, 0x1e1e1e1eU, + 0x85858585U, 0x60606060U, 0x00000000U, 0x25252525U, + 0xf4f4f4f4U, 0xf1f1f1f1U, 0x94949494U, 0x0b0b0b0bU, + 0xe7e7e7e7U, 0x75757575U, 0xefefefefU, 0x34343434U, + 0x31313131U, 0xd4d4d4d4U, 0xd0d0d0d0U, 0x86868686U, + 0x7e7e7e7eU, 0xadadadadU, 0xfdfdfdfdU, 0x29292929U, + 0x30303030U, 0x3b3b3b3bU, 0x9f9f9f9fU, 0xf8f8f8f8U, + 0xc6c6c6c6U, 0x13131313U, 0x06060606U, 0x05050505U, + 0xc5c5c5c5U, 0x11111111U, 0x77777777U, 0x7c7c7c7cU, + 0x7a7a7a7aU, 0x78787878U, 0x36363636U, 0x1c1c1c1cU, + 0x39393939U, 0x59595959U, 0x18181818U, 0x56565656U, + 0xb3b3b3b3U, 0xb0b0b0b0U, 0x24242424U, 0x20202020U, + 0xb2b2b2b2U, 0x92929292U, 0xa3a3a3a3U, 0xc0c0c0c0U, + 0x44444444U, 0x62626262U, 0x10101010U, 0xb4b4b4b4U, + 0x84848484U, 0x43434343U, 0x93939393U, 0xc2c2c2c2U, + 0x4a4a4a4aU, 0xbdbdbdbdU, 0x8f8f8f8fU, 0x2d2d2d2dU, + 0xbcbcbcbcU, 0x9c9c9c9cU, 0x6a6a6a6aU, 0x40404040U, + 0xcfcfcfcfU, 0xa2a2a2a2U, 0x80808080U, 0x4f4f4f4fU, + 0x1f1f1f1fU, 0xcacacacaU, 0xaaaaaaaaU, 0x42424242U, +}; + +static const ulong32 T5[256] = { + 0x00000000U, 0x01020608U, 0x02040c10U, 0x03060a18U, + 0x04081820U, 0x050a1e28U, 0x060c1430U, 0x070e1238U, + 0x08103040U, 0x09123648U, 0x0a143c50U, 0x0b163a58U, + 0x0c182860U, 0x0d1a2e68U, 0x0e1c2470U, 0x0f1e2278U, + 0x10206080U, 0x11226688U, 0x12246c90U, 0x13266a98U, + 0x142878a0U, 0x152a7ea8U, 0x162c74b0U, 0x172e72b8U, + 0x183050c0U, 0x193256c8U, 0x1a345cd0U, 0x1b365ad8U, + 0x1c3848e0U, 0x1d3a4ee8U, 0x1e3c44f0U, 0x1f3e42f8U, + 0x2040c01dU, 0x2142c615U, 0x2244cc0dU, 0x2346ca05U, + 0x2448d83dU, 0x254ade35U, 0x264cd42dU, 0x274ed225U, + 0x2850f05dU, 0x2952f655U, 0x2a54fc4dU, 0x2b56fa45U, + 0x2c58e87dU, 0x2d5aee75U, 0x2e5ce46dU, 0x2f5ee265U, + 0x3060a09dU, 0x3162a695U, 0x3264ac8dU, 0x3366aa85U, + 0x3468b8bdU, 0x356abeb5U, 0x366cb4adU, 0x376eb2a5U, + 0x387090ddU, 0x397296d5U, 0x3a749ccdU, 0x3b769ac5U, + 0x3c7888fdU, 0x3d7a8ef5U, 0x3e7c84edU, 0x3f7e82e5U, + 0x40809d3aU, 0x41829b32U, 0x4284912aU, 0x43869722U, + 0x4488851aU, 0x458a8312U, 0x468c890aU, 0x478e8f02U, + 0x4890ad7aU, 0x4992ab72U, 0x4a94a16aU, 0x4b96a762U, + 0x4c98b55aU, 0x4d9ab352U, 0x4e9cb94aU, 0x4f9ebf42U, + 0x50a0fdbaU, 0x51a2fbb2U, 0x52a4f1aaU, 0x53a6f7a2U, + 0x54a8e59aU, 0x55aae392U, 0x56ace98aU, 0x57aeef82U, + 0x58b0cdfaU, 0x59b2cbf2U, 0x5ab4c1eaU, 0x5bb6c7e2U, + 0x5cb8d5daU, 0x5dbad3d2U, 0x5ebcd9caU, 0x5fbedfc2U, + 0x60c05d27U, 0x61c25b2fU, 0x62c45137U, 0x63c6573fU, + 0x64c84507U, 0x65ca430fU, 0x66cc4917U, 0x67ce4f1fU, + 0x68d06d67U, 0x69d26b6fU, 0x6ad46177U, 0x6bd6677fU, + 0x6cd87547U, 0x6dda734fU, 0x6edc7957U, 0x6fde7f5fU, + 0x70e03da7U, 0x71e23bafU, 0x72e431b7U, 0x73e637bfU, + 0x74e82587U, 0x75ea238fU, 0x76ec2997U, 0x77ee2f9fU, + 0x78f00de7U, 0x79f20befU, 0x7af401f7U, 0x7bf607ffU, + 0x7cf815c7U, 0x7dfa13cfU, 0x7efc19d7U, 0x7ffe1fdfU, + 0x801d2774U, 0x811f217cU, 0x82192b64U, 0x831b2d6cU, + 0x84153f54U, 0x8517395cU, 0x86113344U, 0x8713354cU, + 0x880d1734U, 0x890f113cU, 0x8a091b24U, 0x8b0b1d2cU, + 0x8c050f14U, 0x8d07091cU, 0x8e010304U, 0x8f03050cU, + 0x903d47f4U, 0x913f41fcU, 0x92394be4U, 0x933b4decU, + 0x94355fd4U, 0x953759dcU, 0x963153c4U, 0x973355ccU, + 0x982d77b4U, 0x992f71bcU, 0x9a297ba4U, 0x9b2b7dacU, + 0x9c256f94U, 0x9d27699cU, 0x9e216384U, 0x9f23658cU, + 0xa05de769U, 0xa15fe161U, 0xa259eb79U, 0xa35bed71U, + 0xa455ff49U, 0xa557f941U, 0xa651f359U, 0xa753f551U, + 0xa84dd729U, 0xa94fd121U, 0xaa49db39U, 0xab4bdd31U, + 0xac45cf09U, 0xad47c901U, 0xae41c319U, 0xaf43c511U, + 0xb07d87e9U, 0xb17f81e1U, 0xb2798bf9U, 0xb37b8df1U, + 0xb4759fc9U, 0xb57799c1U, 0xb67193d9U, 0xb77395d1U, + 0xb86db7a9U, 0xb96fb1a1U, 0xba69bbb9U, 0xbb6bbdb1U, + 0xbc65af89U, 0xbd67a981U, 0xbe61a399U, 0xbf63a591U, + 0xc09dba4eU, 0xc19fbc46U, 0xc299b65eU, 0xc39bb056U, + 0xc495a26eU, 0xc597a466U, 0xc691ae7eU, 0xc793a876U, + 0xc88d8a0eU, 0xc98f8c06U, 0xca89861eU, 0xcb8b8016U, + 0xcc85922eU, 0xcd879426U, 0xce819e3eU, 0xcf839836U, + 0xd0bddaceU, 0xd1bfdcc6U, 0xd2b9d6deU, 0xd3bbd0d6U, + 0xd4b5c2eeU, 0xd5b7c4e6U, 0xd6b1cefeU, 0xd7b3c8f6U, + 0xd8adea8eU, 0xd9afec86U, 0xdaa9e69eU, 0xdbabe096U, + 0xdca5f2aeU, 0xdda7f4a6U, 0xdea1febeU, 0xdfa3f8b6U, + 0xe0dd7a53U, 0xe1df7c5bU, 0xe2d97643U, 0xe3db704bU, + 0xe4d56273U, 0xe5d7647bU, 0xe6d16e63U, 0xe7d3686bU, + 0xe8cd4a13U, 0xe9cf4c1bU, 0xeac94603U, 0xebcb400bU, + 0xecc55233U, 0xedc7543bU, 0xeec15e23U, 0xefc3582bU, + 0xf0fd1ad3U, 0xf1ff1cdbU, 0xf2f916c3U, 0xf3fb10cbU, + 0xf4f502f3U, 0xf5f704fbU, 0xf6f10ee3U, 0xf7f308ebU, + 0xf8ed2a93U, 0xf9ef2c9bU, 0xfae92683U, 0xfbeb208bU, + 0xfce532b3U, 0xfde734bbU, 0xfee13ea3U, 0xffe338abU, +}; + +/** + * The round constants. + */ +static const ulong32 rc[] = { + 0xba542f74U, 0x53d3d24dU, 0x50ac8dbfU, 0x70529a4cU, + 0xead597d1U, 0x33515ba6U, 0xde48a899U, 0xdb32b7fcU, + 0xe39e919bU, 0xe2bb416eU, 0xa5cb6b95U, 0xa1f3b102U, + 0xccc41d14U, 0xc363da5dU, 0x5fdc7dcdU, 0x7f5a6c5cU, + 0xf726ffedU, 0xe89d6f8eU, 0x19a0f089U, +}; + + + +#else + + +static const ulong32 T0[256] = { + 0xa753a6f5U, 0xd3bb6bd0U, 0xe6d1bf6eU, 0x71e2d93bU, + 0xd0bd67daU, 0xac458acfU, 0x4d9a29b3U, 0x79f2f90bU, + 0x3a74e89cU, 0xc98f038cU, 0x913f7e41U, 0xfce5d732U, + 0x1e3c7844U, 0x478e018fU, 0x54a84de5U, 0xbd67cea9U, + 0x8c050a0fU, 0xa557aef9U, 0x7af4f501U, 0xfbebcb20U, + 0x63c69157U, 0xb86ddab7U, 0xdda753f4U, 0xd4b577c2U, + 0xe5d7b364U, 0xb37bf68dU, 0xc59733a4U, 0xbe61c2a3U, + 0xa94f9ed1U, 0x880d1a17U, 0x0c183028U, 0xa259b2ebU, + 0x3972e496U, 0xdfa35bf8U, 0x2952a4f6U, 0xdaa94fe6U, + 0x2b56acfaU, 0xa84d9ad7U, 0xcb8b0b80U, 0x4c982db5U, + 0x4b9631a7U, 0x224488ccU, 0xaa4992dbU, 0x244890d8U, + 0x4182199bU, 0x70e0dd3dU, 0xa651a2f3U, 0xf9efc32cU, + 0x5ab475c1U, 0xe2d9af76U, 0xb07dfa87U, 0x366cd8b4U, + 0x7dfae913U, 0xe4d5b762U, 0x3366ccaaU, 0xffe3db38U, + 0x60c09d5dU, 0x204080c0U, 0x08102030U, 0x8b0b161dU, + 0x5ebc65d9U, 0xab4b96ddU, 0x7ffee11fU, 0x78f0fd0dU, + 0x7cf8ed15U, 0x2c58b0e8U, 0x57ae41efU, 0xd2b96fd6U, + 0xdca557f2U, 0x6ddaa973U, 0x7efce519U, 0x0d1a342eU, + 0x53a651f7U, 0x94356a5fU, 0xc39b2bb0U, 0x2850a0f0U, + 0x274e9cd2U, 0x060c1814U, 0x5fbe61dfU, 0xad478ec9U, + 0x67ce814fU, 0x5cb86dd5U, 0x55aa49e3U, 0x48903dadU, + 0x0e1c3824U, 0x52a455f1U, 0xeac98f46U, 0x42841591U, + 0x5bb671c7U, 0x5dba69d3U, 0x3060c0a0U, 0x58b07dcdU, + 0x51a259fbU, 0x59b279cbU, 0x3c78f088U, 0x4e9c25b9U, + 0x3870e090U, 0x8a09121bU, 0x72e4d531U, 0x14285078U, + 0xe7d3bb68U, 0xc6913faeU, 0xdea15ffeU, 0x50a05dfdU, + 0x8e010203U, 0x9239724bU, 0xd1bf63dcU, 0x77eec12fU, + 0x933b764dU, 0x458a0983U, 0x9a29527bU, 0xce811f9eU, + 0x2d5ab4eeU, 0x03060c0aU, 0x62c49551U, 0xb671e293U, + 0xb96fdeb1U, 0xbf63c6a5U, 0x96316253U, 0x6bd6b167U, + 0x3f7efc82U, 0x070e1c12U, 0x1224486cU, 0xae4182c3U, + 0x40801d9dU, 0x3468d0b8U, 0x468c0589U, 0x3e7cf884U, + 0xdbab4be0U, 0xcf831b98U, 0xecc59752U, 0xcc851792U, + 0xc19f23bcU, 0xa15fbee1U, 0xc09d27baU, 0xd6b17fceU, + 0x1d3a744eU, 0xf4f5f702U, 0x61c2995bU, 0x3b76ec9aU, + 0x10204060U, 0xd8ad47eaU, 0x68d0bd6dU, 0xa05dbae7U, + 0xb17ffe81U, 0x0a14283cU, 0x69d2b96bU, 0x6cd8ad75U, + 0x499239abU, 0xfae9cf26U, 0x76ecc529U, 0xc49537a2U, + 0x9e214263U, 0x9b2b567dU, 0x6edca579U, 0x992f5e71U, + 0xc2992fb6U, 0xb773e695U, 0x982d5a77U, 0xbc65caafU, + 0x8f030605U, 0x85172e39U, 0x1f3e7c42U, 0xb475ea9fU, + 0xf8edc72aU, 0x11224466U, 0x2e5cb8e4U, 0x00000000U, + 0x254a94deU, 0x1c387048U, 0x2a54a8fcU, 0x3d7af48eU, + 0x050a141eU, 0x4f9e21bfU, 0x7bf6f107U, 0xb279f28bU, + 0x3264c8acU, 0x903d7a47U, 0xaf4386c5U, 0x19326456U, + 0xa35bb6edU, 0xf7f3fb08U, 0x73e6d137U, 0x9d274e69U, + 0x152a547eU, 0x74e8cd25U, 0xeec19f5eU, 0xca890f86U, + 0x9f234665U, 0x0f1e3c22U, 0x1b366c5aU, 0x75eac923U, + 0x86112233U, 0x84152a3fU, 0x9c254a6fU, 0x4a9435a1U, + 0x97336655U, 0x1a34685cU, 0x65ca8943U, 0xf6f1ff0eU, + 0xedc79354U, 0x09122436U, 0xbb6bd6bdU, 0x264c98d4U, + 0x831b362dU, 0xebcb8b40U, 0x6fdea17fU, 0x811f3e21U, + 0x04081018U, 0x6ad4b561U, 0x43861197U, 0x01020406U, + 0x172e5c72U, 0xe1dfa37cU, 0x87132635U, 0xf5f7f304U, + 0x8d070e09U, 0xe3dbab70U, 0x23468ccaU, 0x801d3a27U, + 0x44880d85U, 0x162c5874U, 0x66cc8549U, 0x214284c6U, + 0xfee1df3eU, 0xd5b773c4U, 0x3162c4a6U, 0xd9af43ecU, + 0x356ad4beU, 0x18306050U, 0x0204080cU, 0x64c88d45U, + 0xf2f9ef16U, 0xf1ffe31cU, 0x56ac45e9U, 0xcd871394U, + 0x8219322bU, 0xc88d078aU, 0xba69d2bbU, 0xf0fde71aU, + 0xefc39b58U, 0xe9cf834cU, 0xe8cd874aU, 0xfde7d334U, + 0x890f1e11U, 0xd7b37bc8U, 0xc7933ba8U, 0xb577ee99U, + 0xa455aaffU, 0x2f5ebce2U, 0x95376e59U, 0x13264c6aU, + 0x0b162c3aU, 0xf3fbeb10U, 0xe0dda77aU, 0x376edcb2U, +}; + +static const ulong32 T1[256] = { + 0x53a7f5a6U, 0xbbd3d06bU, 0xd1e66ebfU, 0xe2713bd9U, + 0xbdd0da67U, 0x45accf8aU, 0x9a4db329U, 0xf2790bf9U, + 0x743a9ce8U, 0x8fc98c03U, 0x3f91417eU, 0xe5fc32d7U, + 0x3c1e4478U, 0x8e478f01U, 0xa854e54dU, 0x67bda9ceU, + 0x058c0f0aU, 0x57a5f9aeU, 0xf47a01f5U, 0xebfb20cbU, + 0xc6635791U, 0x6db8b7daU, 0xa7ddf453U, 0xb5d4c277U, + 0xd7e564b3U, 0x7bb38df6U, 0x97c5a433U, 0x61bea3c2U, + 0x4fa9d19eU, 0x0d88171aU, 0x180c2830U, 0x59a2ebb2U, + 0x723996e4U, 0xa3dff85bU, 0x5229f6a4U, 0xa9dae64fU, + 0x562bfaacU, 0x4da8d79aU, 0x8bcb800bU, 0x984cb52dU, + 0x964ba731U, 0x4422cc88U, 0x49aadb92U, 0x4824d890U, + 0x82419b19U, 0xe0703dddU, 0x51a6f3a2U, 0xeff92cc3U, + 0xb45ac175U, 0xd9e276afU, 0x7db087faU, 0x6c36b4d8U, + 0xfa7d13e9U, 0xd5e462b7U, 0x6633aaccU, 0xe3ff38dbU, + 0xc0605d9dU, 0x4020c080U, 0x10083020U, 0x0b8b1d16U, + 0xbc5ed965U, 0x4babdd96U, 0xfe7f1fe1U, 0xf0780dfdU, + 0xf87c15edU, 0x582ce8b0U, 0xae57ef41U, 0xb9d2d66fU, + 0xa5dcf257U, 0xda6d73a9U, 0xfc7e19e5U, 0x1a0d2e34U, + 0xa653f751U, 0x35945f6aU, 0x9bc3b02bU, 0x5028f0a0U, + 0x4e27d29cU, 0x0c061418U, 0xbe5fdf61U, 0x47adc98eU, + 0xce674f81U, 0xb85cd56dU, 0xaa55e349U, 0x9048ad3dU, + 0x1c0e2438U, 0xa452f155U, 0xc9ea468fU, 0x84429115U, + 0xb65bc771U, 0xba5dd369U, 0x6030a0c0U, 0xb058cd7dU, + 0xa251fb59U, 0xb259cb79U, 0x783c88f0U, 0x9c4eb925U, + 0x703890e0U, 0x098a1b12U, 0xe47231d5U, 0x28147850U, + 0xd3e768bbU, 0x91c6ae3fU, 0xa1defe5fU, 0xa050fd5dU, + 0x018e0302U, 0x39924b72U, 0xbfd1dc63U, 0xee772fc1U, + 0x3b934d76U, 0x8a458309U, 0x299a7b52U, 0x81ce9e1fU, + 0x5a2deeb4U, 0x06030a0cU, 0xc4625195U, 0x71b693e2U, + 0x6fb9b1deU, 0x63bfa5c6U, 0x31965362U, 0xd66b67b1U, + 0x7e3f82fcU, 0x0e07121cU, 0x24126c48U, 0x41aec382U, + 0x80409d1dU, 0x6834b8d0U, 0x8c468905U, 0x7c3e84f8U, + 0xabdbe04bU, 0x83cf981bU, 0xc5ec5297U, 0x85cc9217U, + 0x9fc1bc23U, 0x5fa1e1beU, 0x9dc0ba27U, 0xb1d6ce7fU, + 0x3a1d4e74U, 0xf5f402f7U, 0xc2615b99U, 0x763b9aecU, + 0x20106040U, 0xadd8ea47U, 0xd0686dbdU, 0x5da0e7baU, + 0x7fb181feU, 0x140a3c28U, 0xd2696bb9U, 0xd86c75adU, + 0x9249ab39U, 0xe9fa26cfU, 0xec7629c5U, 0x95c4a237U, + 0x219e6342U, 0x2b9b7d56U, 0xdc6e79a5U, 0x2f99715eU, + 0x99c2b62fU, 0x73b795e6U, 0x2d98775aU, 0x65bcafcaU, + 0x038f0506U, 0x1785392eU, 0x3e1f427cU, 0x75b49feaU, + 0xedf82ac7U, 0x22116644U, 0x5c2ee4b8U, 0x00000000U, + 0x4a25de94U, 0x381c4870U, 0x542afca8U, 0x7a3d8ef4U, + 0x0a051e14U, 0x9e4fbf21U, 0xf67b07f1U, 0x79b28bf2U, + 0x6432acc8U, 0x3d90477aU, 0x43afc586U, 0x32195664U, + 0x5ba3edb6U, 0xf3f708fbU, 0xe67337d1U, 0x279d694eU, + 0x2a157e54U, 0xe87425cdU, 0xc1ee5e9fU, 0x89ca860fU, + 0x239f6546U, 0x1e0f223cU, 0x361b5a6cU, 0xea7523c9U, + 0x11863322U, 0x15843f2aU, 0x259c6f4aU, 0x944aa135U, + 0x33975566U, 0x341a5c68U, 0xca654389U, 0xf1f60effU, + 0xc7ed5493U, 0x12093624U, 0x6bbbbdd6U, 0x4c26d498U, + 0x1b832d36U, 0xcbeb408bU, 0xde6f7fa1U, 0x1f81213eU, + 0x08041810U, 0xd46a61b5U, 0x86439711U, 0x02010604U, + 0x2e17725cU, 0xdfe17ca3U, 0x13873526U, 0xf7f504f3U, + 0x078d090eU, 0xdbe370abU, 0x4623ca8cU, 0x1d80273aU, + 0x8844850dU, 0x2c167458U, 0xcc664985U, 0x4221c684U, + 0xe1fe3edfU, 0xb7d5c473U, 0x6231a6c4U, 0xafd9ec43U, + 0x6a35bed4U, 0x30185060U, 0x04020c08U, 0xc864458dU, + 0xf9f216efU, 0xfff11ce3U, 0xac56e945U, 0x87cd9413U, + 0x19822b32U, 0x8dc88a07U, 0x69babbd2U, 0xfdf01ae7U, + 0xc3ef589bU, 0xcfe94c83U, 0xcde84a87U, 0xe7fd34d3U, + 0x0f89111eU, 0xb3d7c87bU, 0x93c7a83bU, 0x77b599eeU, + 0x55a4ffaaU, 0x5e2fe2bcU, 0x3795596eU, 0x26136a4cU, + 0x160b3a2cU, 0xfbf310ebU, 0xdde07aa7U, 0x6e37b2dcU, +}; + +static const ulong32 T2[256] = { + 0xa6f5a753U, 0x6bd0d3bbU, 0xbf6ee6d1U, 0xd93b71e2U, + 0x67dad0bdU, 0x8acfac45U, 0x29b34d9aU, 0xf90b79f2U, + 0xe89c3a74U, 0x038cc98fU, 0x7e41913fU, 0xd732fce5U, + 0x78441e3cU, 0x018f478eU, 0x4de554a8U, 0xcea9bd67U, + 0x0a0f8c05U, 0xaef9a557U, 0xf5017af4U, 0xcb20fbebU, + 0x915763c6U, 0xdab7b86dU, 0x53f4dda7U, 0x77c2d4b5U, + 0xb364e5d7U, 0xf68db37bU, 0x33a4c597U, 0xc2a3be61U, + 0x9ed1a94fU, 0x1a17880dU, 0x30280c18U, 0xb2eba259U, + 0xe4963972U, 0x5bf8dfa3U, 0xa4f62952U, 0x4fe6daa9U, + 0xacfa2b56U, 0x9ad7a84dU, 0x0b80cb8bU, 0x2db54c98U, + 0x31a74b96U, 0x88cc2244U, 0x92dbaa49U, 0x90d82448U, + 0x199b4182U, 0xdd3d70e0U, 0xa2f3a651U, 0xc32cf9efU, + 0x75c15ab4U, 0xaf76e2d9U, 0xfa87b07dU, 0xd8b4366cU, + 0xe9137dfaU, 0xb762e4d5U, 0xccaa3366U, 0xdb38ffe3U, + 0x9d5d60c0U, 0x80c02040U, 0x20300810U, 0x161d8b0bU, + 0x65d95ebcU, 0x96ddab4bU, 0xe11f7ffeU, 0xfd0d78f0U, + 0xed157cf8U, 0xb0e82c58U, 0x41ef57aeU, 0x6fd6d2b9U, + 0x57f2dca5U, 0xa9736ddaU, 0xe5197efcU, 0x342e0d1aU, + 0x51f753a6U, 0x6a5f9435U, 0x2bb0c39bU, 0xa0f02850U, + 0x9cd2274eU, 0x1814060cU, 0x61df5fbeU, 0x8ec9ad47U, + 0x814f67ceU, 0x6dd55cb8U, 0x49e355aaU, 0x3dad4890U, + 0x38240e1cU, 0x55f152a4U, 0x8f46eac9U, 0x15914284U, + 0x71c75bb6U, 0x69d35dbaU, 0xc0a03060U, 0x7dcd58b0U, + 0x59fb51a2U, 0x79cb59b2U, 0xf0883c78U, 0x25b94e9cU, + 0xe0903870U, 0x121b8a09U, 0xd53172e4U, 0x50781428U, + 0xbb68e7d3U, 0x3faec691U, 0x5ffedea1U, 0x5dfd50a0U, + 0x02038e01U, 0x724b9239U, 0x63dcd1bfU, 0xc12f77eeU, + 0x764d933bU, 0x0983458aU, 0x527b9a29U, 0x1f9ece81U, + 0xb4ee2d5aU, 0x0c0a0306U, 0x955162c4U, 0xe293b671U, + 0xdeb1b96fU, 0xc6a5bf63U, 0x62539631U, 0xb1676bd6U, + 0xfc823f7eU, 0x1c12070eU, 0x486c1224U, 0x82c3ae41U, + 0x1d9d4080U, 0xd0b83468U, 0x0589468cU, 0xf8843e7cU, + 0x4be0dbabU, 0x1b98cf83U, 0x9752ecc5U, 0x1792cc85U, + 0x23bcc19fU, 0xbee1a15fU, 0x27bac09dU, 0x7fced6b1U, + 0x744e1d3aU, 0xf702f4f5U, 0x995b61c2U, 0xec9a3b76U, + 0x40601020U, 0x47ead8adU, 0xbd6d68d0U, 0xbae7a05dU, + 0xfe81b17fU, 0x283c0a14U, 0xb96b69d2U, 0xad756cd8U, + 0x39ab4992U, 0xcf26fae9U, 0xc52976ecU, 0x37a2c495U, + 0x42639e21U, 0x567d9b2bU, 0xa5796edcU, 0x5e71992fU, + 0x2fb6c299U, 0xe695b773U, 0x5a77982dU, 0xcaafbc65U, + 0x06058f03U, 0x2e398517U, 0x7c421f3eU, 0xea9fb475U, + 0xc72af8edU, 0x44661122U, 0xb8e42e5cU, 0x00000000U, + 0x94de254aU, 0x70481c38U, 0xa8fc2a54U, 0xf48e3d7aU, + 0x141e050aU, 0x21bf4f9eU, 0xf1077bf6U, 0xf28bb279U, + 0xc8ac3264U, 0x7a47903dU, 0x86c5af43U, 0x64561932U, + 0xb6eda35bU, 0xfb08f7f3U, 0xd13773e6U, 0x4e699d27U, + 0x547e152aU, 0xcd2574e8U, 0x9f5eeec1U, 0x0f86ca89U, + 0x46659f23U, 0x3c220f1eU, 0x6c5a1b36U, 0xc92375eaU, + 0x22338611U, 0x2a3f8415U, 0x4a6f9c25U, 0x35a14a94U, + 0x66559733U, 0x685c1a34U, 0x894365caU, 0xff0ef6f1U, + 0x9354edc7U, 0x24360912U, 0xd6bdbb6bU, 0x98d4264cU, + 0x362d831bU, 0x8b40ebcbU, 0xa17f6fdeU, 0x3e21811fU, + 0x10180408U, 0xb5616ad4U, 0x11974386U, 0x04060102U, + 0x5c72172eU, 0xa37ce1dfU, 0x26358713U, 0xf304f5f7U, + 0x0e098d07U, 0xab70e3dbU, 0x8cca2346U, 0x3a27801dU, + 0x0d854488U, 0x5874162cU, 0x854966ccU, 0x84c62142U, + 0xdf3efee1U, 0x73c4d5b7U, 0xc4a63162U, 0x43ecd9afU, + 0xd4be356aU, 0x60501830U, 0x080c0204U, 0x8d4564c8U, + 0xef16f2f9U, 0xe31cf1ffU, 0x45e956acU, 0x1394cd87U, + 0x322b8219U, 0x078ac88dU, 0xd2bbba69U, 0xe71af0fdU, + 0x9b58efc3U, 0x834ce9cfU, 0x874ae8cdU, 0xd334fde7U, + 0x1e11890fU, 0x7bc8d7b3U, 0x3ba8c793U, 0xee99b577U, + 0xaaffa455U, 0xbce22f5eU, 0x6e599537U, 0x4c6a1326U, + 0x2c3a0b16U, 0xeb10f3fbU, 0xa77ae0ddU, 0xdcb2376eU, +}; + +static const ulong32 T3[256] = { + 0xf5a653a7U, 0xd06bbbd3U, 0x6ebfd1e6U, 0x3bd9e271U, + 0xda67bdd0U, 0xcf8a45acU, 0xb3299a4dU, 0x0bf9f279U, + 0x9ce8743aU, 0x8c038fc9U, 0x417e3f91U, 0x32d7e5fcU, + 0x44783c1eU, 0x8f018e47U, 0xe54da854U, 0xa9ce67bdU, + 0x0f0a058cU, 0xf9ae57a5U, 0x01f5f47aU, 0x20cbebfbU, + 0x5791c663U, 0xb7da6db8U, 0xf453a7ddU, 0xc277b5d4U, + 0x64b3d7e5U, 0x8df67bb3U, 0xa43397c5U, 0xa3c261beU, + 0xd19e4fa9U, 0x171a0d88U, 0x2830180cU, 0xebb259a2U, + 0x96e47239U, 0xf85ba3dfU, 0xf6a45229U, 0xe64fa9daU, + 0xfaac562bU, 0xd79a4da8U, 0x800b8bcbU, 0xb52d984cU, + 0xa731964bU, 0xcc884422U, 0xdb9249aaU, 0xd8904824U, + 0x9b198241U, 0x3ddde070U, 0xf3a251a6U, 0x2cc3eff9U, + 0xc175b45aU, 0x76afd9e2U, 0x87fa7db0U, 0xb4d86c36U, + 0x13e9fa7dU, 0x62b7d5e4U, 0xaacc6633U, 0x38dbe3ffU, + 0x5d9dc060U, 0xc0804020U, 0x30201008U, 0x1d160b8bU, + 0xd965bc5eU, 0xdd964babU, 0x1fe1fe7fU, 0x0dfdf078U, + 0x15edf87cU, 0xe8b0582cU, 0xef41ae57U, 0xd66fb9d2U, + 0xf257a5dcU, 0x73a9da6dU, 0x19e5fc7eU, 0x2e341a0dU, + 0xf751a653U, 0x5f6a3594U, 0xb02b9bc3U, 0xf0a05028U, + 0xd29c4e27U, 0x14180c06U, 0xdf61be5fU, 0xc98e47adU, + 0x4f81ce67U, 0xd56db85cU, 0xe349aa55U, 0xad3d9048U, + 0x24381c0eU, 0xf155a452U, 0x468fc9eaU, 0x91158442U, + 0xc771b65bU, 0xd369ba5dU, 0xa0c06030U, 0xcd7db058U, + 0xfb59a251U, 0xcb79b259U, 0x88f0783cU, 0xb9259c4eU, + 0x90e07038U, 0x1b12098aU, 0x31d5e472U, 0x78502814U, + 0x68bbd3e7U, 0xae3f91c6U, 0xfe5fa1deU, 0xfd5da050U, + 0x0302018eU, 0x4b723992U, 0xdc63bfd1U, 0x2fc1ee77U, + 0x4d763b93U, 0x83098a45U, 0x7b52299aU, 0x9e1f81ceU, + 0xeeb45a2dU, 0x0a0c0603U, 0x5195c462U, 0x93e271b6U, + 0xb1de6fb9U, 0xa5c663bfU, 0x53623196U, 0x67b1d66bU, + 0x82fc7e3fU, 0x121c0e07U, 0x6c482412U, 0xc38241aeU, + 0x9d1d8040U, 0xb8d06834U, 0x89058c46U, 0x84f87c3eU, + 0xe04babdbU, 0x981b83cfU, 0x5297c5ecU, 0x921785ccU, + 0xbc239fc1U, 0xe1be5fa1U, 0xba279dc0U, 0xce7fb1d6U, + 0x4e743a1dU, 0x02f7f5f4U, 0x5b99c261U, 0x9aec763bU, + 0x60402010U, 0xea47add8U, 0x6dbdd068U, 0xe7ba5da0U, + 0x81fe7fb1U, 0x3c28140aU, 0x6bb9d269U, 0x75add86cU, + 0xab399249U, 0x26cfe9faU, 0x29c5ec76U, 0xa23795c4U, + 0x6342219eU, 0x7d562b9bU, 0x79a5dc6eU, 0x715e2f99U, + 0xb62f99c2U, 0x95e673b7U, 0x775a2d98U, 0xafca65bcU, + 0x0506038fU, 0x392e1785U, 0x427c3e1fU, 0x9fea75b4U, + 0x2ac7edf8U, 0x66442211U, 0xe4b85c2eU, 0x00000000U, + 0xde944a25U, 0x4870381cU, 0xfca8542aU, 0x8ef47a3dU, + 0x1e140a05U, 0xbf219e4fU, 0x07f1f67bU, 0x8bf279b2U, + 0xacc86432U, 0x477a3d90U, 0xc58643afU, 0x56643219U, + 0xedb65ba3U, 0x08fbf3f7U, 0x37d1e673U, 0x694e279dU, + 0x7e542a15U, 0x25cde874U, 0x5e9fc1eeU, 0x860f89caU, + 0x6546239fU, 0x223c1e0fU, 0x5a6c361bU, 0x23c9ea75U, + 0x33221186U, 0x3f2a1584U, 0x6f4a259cU, 0xa135944aU, + 0x55663397U, 0x5c68341aU, 0x4389ca65U, 0x0efff1f6U, + 0x5493c7edU, 0x36241209U, 0xbdd66bbbU, 0xd4984c26U, + 0x2d361b83U, 0x408bcbebU, 0x7fa1de6fU, 0x213e1f81U, + 0x18100804U, 0x61b5d46aU, 0x97118643U, 0x06040201U, + 0x725c2e17U, 0x7ca3dfe1U, 0x35261387U, 0x04f3f7f5U, + 0x090e078dU, 0x70abdbe3U, 0xca8c4623U, 0x273a1d80U, + 0x850d8844U, 0x74582c16U, 0x4985cc66U, 0xc6844221U, + 0x3edfe1feU, 0xc473b7d5U, 0xa6c46231U, 0xec43afd9U, + 0xbed46a35U, 0x50603018U, 0x0c080402U, 0x458dc864U, + 0x16eff9f2U, 0x1ce3fff1U, 0xe945ac56U, 0x941387cdU, + 0x2b321982U, 0x8a078dc8U, 0xbbd269baU, 0x1ae7fdf0U, + 0x589bc3efU, 0x4c83cfe9U, 0x4a87cde8U, 0x34d3e7fdU, + 0x111e0f89U, 0xc87bb3d7U, 0xa83b93c7U, 0x99ee77b5U, + 0xffaa55a4U, 0xe2bc5e2fU, 0x596e3795U, 0x6a4c2613U, + 0x3a2c160bU, 0x10ebfbf3U, 0x7aa7dde0U, 0xb2dc6e37U, +}; + +static const ulong32 T4[256] = { + 0xa7a7a7a7U, 0xd3d3d3d3U, 0xe6e6e6e6U, 0x71717171U, + 0xd0d0d0d0U, 0xacacacacU, 0x4d4d4d4dU, 0x79797979U, + 0x3a3a3a3aU, 0xc9c9c9c9U, 0x91919191U, 0xfcfcfcfcU, + 0x1e1e1e1eU, 0x47474747U, 0x54545454U, 0xbdbdbdbdU, + 0x8c8c8c8cU, 0xa5a5a5a5U, 0x7a7a7a7aU, 0xfbfbfbfbU, + 0x63636363U, 0xb8b8b8b8U, 0xddddddddU, 0xd4d4d4d4U, + 0xe5e5e5e5U, 0xb3b3b3b3U, 0xc5c5c5c5U, 0xbebebebeU, + 0xa9a9a9a9U, 0x88888888U, 0x0c0c0c0cU, 0xa2a2a2a2U, + 0x39393939U, 0xdfdfdfdfU, 0x29292929U, 0xdadadadaU, + 0x2b2b2b2bU, 0xa8a8a8a8U, 0xcbcbcbcbU, 0x4c4c4c4cU, + 0x4b4b4b4bU, 0x22222222U, 0xaaaaaaaaU, 0x24242424U, + 0x41414141U, 0x70707070U, 0xa6a6a6a6U, 0xf9f9f9f9U, + 0x5a5a5a5aU, 0xe2e2e2e2U, 0xb0b0b0b0U, 0x36363636U, + 0x7d7d7d7dU, 0xe4e4e4e4U, 0x33333333U, 0xffffffffU, + 0x60606060U, 0x20202020U, 0x08080808U, 0x8b8b8b8bU, + 0x5e5e5e5eU, 0xababababU, 0x7f7f7f7fU, 0x78787878U, + 0x7c7c7c7cU, 0x2c2c2c2cU, 0x57575757U, 0xd2d2d2d2U, + 0xdcdcdcdcU, 0x6d6d6d6dU, 0x7e7e7e7eU, 0x0d0d0d0dU, + 0x53535353U, 0x94949494U, 0xc3c3c3c3U, 0x28282828U, + 0x27272727U, 0x06060606U, 0x5f5f5f5fU, 0xadadadadU, + 0x67676767U, 0x5c5c5c5cU, 0x55555555U, 0x48484848U, + 0x0e0e0e0eU, 0x52525252U, 0xeaeaeaeaU, 0x42424242U, + 0x5b5b5b5bU, 0x5d5d5d5dU, 0x30303030U, 0x58585858U, + 0x51515151U, 0x59595959U, 0x3c3c3c3cU, 0x4e4e4e4eU, + 0x38383838U, 0x8a8a8a8aU, 0x72727272U, 0x14141414U, + 0xe7e7e7e7U, 0xc6c6c6c6U, 0xdedededeU, 0x50505050U, + 0x8e8e8e8eU, 0x92929292U, 0xd1d1d1d1U, 0x77777777U, + 0x93939393U, 0x45454545U, 0x9a9a9a9aU, 0xcecececeU, + 0x2d2d2d2dU, 0x03030303U, 0x62626262U, 0xb6b6b6b6U, + 0xb9b9b9b9U, 0xbfbfbfbfU, 0x96969696U, 0x6b6b6b6bU, + 0x3f3f3f3fU, 0x07070707U, 0x12121212U, 0xaeaeaeaeU, + 0x40404040U, 0x34343434U, 0x46464646U, 0x3e3e3e3eU, + 0xdbdbdbdbU, 0xcfcfcfcfU, 0xececececU, 0xccccccccU, + 0xc1c1c1c1U, 0xa1a1a1a1U, 0xc0c0c0c0U, 0xd6d6d6d6U, + 0x1d1d1d1dU, 0xf4f4f4f4U, 0x61616161U, 0x3b3b3b3bU, + 0x10101010U, 0xd8d8d8d8U, 0x68686868U, 0xa0a0a0a0U, + 0xb1b1b1b1U, 0x0a0a0a0aU, 0x69696969U, 0x6c6c6c6cU, + 0x49494949U, 0xfafafafaU, 0x76767676U, 0xc4c4c4c4U, + 0x9e9e9e9eU, 0x9b9b9b9bU, 0x6e6e6e6eU, 0x99999999U, + 0xc2c2c2c2U, 0xb7b7b7b7U, 0x98989898U, 0xbcbcbcbcU, + 0x8f8f8f8fU, 0x85858585U, 0x1f1f1f1fU, 0xb4b4b4b4U, + 0xf8f8f8f8U, 0x11111111U, 0x2e2e2e2eU, 0x00000000U, + 0x25252525U, 0x1c1c1c1cU, 0x2a2a2a2aU, 0x3d3d3d3dU, + 0x05050505U, 0x4f4f4f4fU, 0x7b7b7b7bU, 0xb2b2b2b2U, + 0x32323232U, 0x90909090U, 0xafafafafU, 0x19191919U, + 0xa3a3a3a3U, 0xf7f7f7f7U, 0x73737373U, 0x9d9d9d9dU, + 0x15151515U, 0x74747474U, 0xeeeeeeeeU, 0xcacacacaU, + 0x9f9f9f9fU, 0x0f0f0f0fU, 0x1b1b1b1bU, 0x75757575U, + 0x86868686U, 0x84848484U, 0x9c9c9c9cU, 0x4a4a4a4aU, + 0x97979797U, 0x1a1a1a1aU, 0x65656565U, 0xf6f6f6f6U, + 0xededededU, 0x09090909U, 0xbbbbbbbbU, 0x26262626U, + 0x83838383U, 0xebebebebU, 0x6f6f6f6fU, 0x81818181U, + 0x04040404U, 0x6a6a6a6aU, 0x43434343U, 0x01010101U, + 0x17171717U, 0xe1e1e1e1U, 0x87878787U, 0xf5f5f5f5U, + 0x8d8d8d8dU, 0xe3e3e3e3U, 0x23232323U, 0x80808080U, + 0x44444444U, 0x16161616U, 0x66666666U, 0x21212121U, + 0xfefefefeU, 0xd5d5d5d5U, 0x31313131U, 0xd9d9d9d9U, + 0x35353535U, 0x18181818U, 0x02020202U, 0x64646464U, + 0xf2f2f2f2U, 0xf1f1f1f1U, 0x56565656U, 0xcdcdcdcdU, + 0x82828282U, 0xc8c8c8c8U, 0xbabababaU, 0xf0f0f0f0U, + 0xefefefefU, 0xe9e9e9e9U, 0xe8e8e8e8U, 0xfdfdfdfdU, + 0x89898989U, 0xd7d7d7d7U, 0xc7c7c7c7U, 0xb5b5b5b5U, + 0xa4a4a4a4U, 0x2f2f2f2fU, 0x95959595U, 0x13131313U, + 0x0b0b0b0bU, 0xf3f3f3f3U, 0xe0e0e0e0U, 0x37373737U, +}; + +static const ulong32 T5[256] = { + 0x00000000U, 0x01020608U, 0x02040c10U, 0x03060a18U, + 0x04081820U, 0x050a1e28U, 0x060c1430U, 0x070e1238U, + 0x08103040U, 0x09123648U, 0x0a143c50U, 0x0b163a58U, + 0x0c182860U, 0x0d1a2e68U, 0x0e1c2470U, 0x0f1e2278U, + 0x10206080U, 0x11226688U, 0x12246c90U, 0x13266a98U, + 0x142878a0U, 0x152a7ea8U, 0x162c74b0U, 0x172e72b8U, + 0x183050c0U, 0x193256c8U, 0x1a345cd0U, 0x1b365ad8U, + 0x1c3848e0U, 0x1d3a4ee8U, 0x1e3c44f0U, 0x1f3e42f8U, + 0x2040c01dU, 0x2142c615U, 0x2244cc0dU, 0x2346ca05U, + 0x2448d83dU, 0x254ade35U, 0x264cd42dU, 0x274ed225U, + 0x2850f05dU, 0x2952f655U, 0x2a54fc4dU, 0x2b56fa45U, + 0x2c58e87dU, 0x2d5aee75U, 0x2e5ce46dU, 0x2f5ee265U, + 0x3060a09dU, 0x3162a695U, 0x3264ac8dU, 0x3366aa85U, + 0x3468b8bdU, 0x356abeb5U, 0x366cb4adU, 0x376eb2a5U, + 0x387090ddU, 0x397296d5U, 0x3a749ccdU, 0x3b769ac5U, + 0x3c7888fdU, 0x3d7a8ef5U, 0x3e7c84edU, 0x3f7e82e5U, + 0x40809d3aU, 0x41829b32U, 0x4284912aU, 0x43869722U, + 0x4488851aU, 0x458a8312U, 0x468c890aU, 0x478e8f02U, + 0x4890ad7aU, 0x4992ab72U, 0x4a94a16aU, 0x4b96a762U, + 0x4c98b55aU, 0x4d9ab352U, 0x4e9cb94aU, 0x4f9ebf42U, + 0x50a0fdbaU, 0x51a2fbb2U, 0x52a4f1aaU, 0x53a6f7a2U, + 0x54a8e59aU, 0x55aae392U, 0x56ace98aU, 0x57aeef82U, + 0x58b0cdfaU, 0x59b2cbf2U, 0x5ab4c1eaU, 0x5bb6c7e2U, + 0x5cb8d5daU, 0x5dbad3d2U, 0x5ebcd9caU, 0x5fbedfc2U, + 0x60c05d27U, 0x61c25b2fU, 0x62c45137U, 0x63c6573fU, + 0x64c84507U, 0x65ca430fU, 0x66cc4917U, 0x67ce4f1fU, + 0x68d06d67U, 0x69d26b6fU, 0x6ad46177U, 0x6bd6677fU, + 0x6cd87547U, 0x6dda734fU, 0x6edc7957U, 0x6fde7f5fU, + 0x70e03da7U, 0x71e23bafU, 0x72e431b7U, 0x73e637bfU, + 0x74e82587U, 0x75ea238fU, 0x76ec2997U, 0x77ee2f9fU, + 0x78f00de7U, 0x79f20befU, 0x7af401f7U, 0x7bf607ffU, + 0x7cf815c7U, 0x7dfa13cfU, 0x7efc19d7U, 0x7ffe1fdfU, + 0x801d2774U, 0x811f217cU, 0x82192b64U, 0x831b2d6cU, + 0x84153f54U, 0x8517395cU, 0x86113344U, 0x8713354cU, + 0x880d1734U, 0x890f113cU, 0x8a091b24U, 0x8b0b1d2cU, + 0x8c050f14U, 0x8d07091cU, 0x8e010304U, 0x8f03050cU, + 0x903d47f4U, 0x913f41fcU, 0x92394be4U, 0x933b4decU, + 0x94355fd4U, 0x953759dcU, 0x963153c4U, 0x973355ccU, + 0x982d77b4U, 0x992f71bcU, 0x9a297ba4U, 0x9b2b7dacU, + 0x9c256f94U, 0x9d27699cU, 0x9e216384U, 0x9f23658cU, + 0xa05de769U, 0xa15fe161U, 0xa259eb79U, 0xa35bed71U, + 0xa455ff49U, 0xa557f941U, 0xa651f359U, 0xa753f551U, + 0xa84dd729U, 0xa94fd121U, 0xaa49db39U, 0xab4bdd31U, + 0xac45cf09U, 0xad47c901U, 0xae41c319U, 0xaf43c511U, + 0xb07d87e9U, 0xb17f81e1U, 0xb2798bf9U, 0xb37b8df1U, + 0xb4759fc9U, 0xb57799c1U, 0xb67193d9U, 0xb77395d1U, + 0xb86db7a9U, 0xb96fb1a1U, 0xba69bbb9U, 0xbb6bbdb1U, + 0xbc65af89U, 0xbd67a981U, 0xbe61a399U, 0xbf63a591U, + 0xc09dba4eU, 0xc19fbc46U, 0xc299b65eU, 0xc39bb056U, + 0xc495a26eU, 0xc597a466U, 0xc691ae7eU, 0xc793a876U, + 0xc88d8a0eU, 0xc98f8c06U, 0xca89861eU, 0xcb8b8016U, + 0xcc85922eU, 0xcd879426U, 0xce819e3eU, 0xcf839836U, + 0xd0bddaceU, 0xd1bfdcc6U, 0xd2b9d6deU, 0xd3bbd0d6U, + 0xd4b5c2eeU, 0xd5b7c4e6U, 0xd6b1cefeU, 0xd7b3c8f6U, + 0xd8adea8eU, 0xd9afec86U, 0xdaa9e69eU, 0xdbabe096U, + 0xdca5f2aeU, 0xdda7f4a6U, 0xdea1febeU, 0xdfa3f8b6U, + 0xe0dd7a53U, 0xe1df7c5bU, 0xe2d97643U, 0xe3db704bU, + 0xe4d56273U, 0xe5d7647bU, 0xe6d16e63U, 0xe7d3686bU, + 0xe8cd4a13U, 0xe9cf4c1bU, 0xeac94603U, 0xebcb400bU, + 0xecc55233U, 0xedc7543bU, 0xeec15e23U, 0xefc3582bU, + 0xf0fd1ad3U, 0xf1ff1cdbU, 0xf2f916c3U, 0xf3fb10cbU, + 0xf4f502f3U, 0xf5f704fbU, 0xf6f10ee3U, 0xf7f308ebU, + 0xf8ed2a93U, 0xf9ef2c9bU, 0xfae92683U, 0xfbeb208bU, + 0xfce532b3U, 0xfde734bbU, 0xfee13ea3U, 0xffe338abU, +}; + +/** + * The round constants. + */ +static const ulong32 rc[] = { + 0xa7d3e671U, 0xd0ac4d79U, 0x3ac991fcU, 0x1e4754bdU, + 0x8ca57afbU, 0x63b8ddd4U, 0xe5b3c5beU, 0xa9880ca2U, + 0x39df29daU, 0x2ba8cb4cU, 0x4b22aa24U, 0x4170a6f9U, + 0x5ae2b036U, 0x7de433ffU, 0x6020088bU, 0x5eab7f78U, + 0x7c2c57d2U, 0xdc6d7e0dU, 0x5394c328U, +}; + +#endif + + /** + Initialize the Anubis block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +#ifdef CLEAN_STACK +static int _anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) +#else +int anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) +#endif +{ + int N, R, i, pos, r; + ulong32 kappa[MAX_N]; + ulong32 inter[MAX_N]; + ulong32 v, K0, K1, K2, K3; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); + + /* Valid sizes (in bytes) are 16, 20, 24, 28, 32, 36, and 40. */ + if ((keylen & 3) || (keylen < 16) || (keylen > 40)) { + return CRYPT_INVALID_KEYSIZE; + } + skey->anubis.keyBits = keylen*8; + + /* + * determine the N length parameter: + * (N.B. it is assumed that the key length is valid!) + */ + N = skey->anubis.keyBits >> 5; + + /* + * determine number of rounds from key size: + */ + skey->anubis.R = R = 8 + N; + + if (num_rounds != 0 && num_rounds != skey->anubis.R) { + return CRYPT_INVALID_ROUNDS; + } + + /* + * map cipher key to initial key state (mu): + */ + for (i = 0, pos = 0; i < N; i++, pos += 4) { + kappa[i] = + (key[pos ] << 24) ^ + (key[pos + 1] << 16) ^ + (key[pos + 2] << 8) ^ + (key[pos + 3] ); + } + + /* + * generate R + 1 round keys: + */ + for (r = 0; r <= R; r++) { + /* + * generate r-th round key K^r: + */ + K0 = T4[(kappa[N - 1] >> 24) ]; + K1 = T4[(kappa[N - 1] >> 16) & 0xff]; + K2 = T4[(kappa[N - 1] >> 8) & 0xff]; + K3 = T4[(kappa[N - 1] ) & 0xff]; + for (i = N - 2; i >= 0; i--) { + K0 = T4[(kappa[i] >> 24) ] ^ + (T5[(K0 >> 24) ] & 0xff000000U) ^ + (T5[(K0 >> 16) & 0xff] & 0x00ff0000U) ^ + (T5[(K0 >> 8) & 0xff] & 0x0000ff00U) ^ + (T5[(K0 ) & 0xff] & 0x000000ffU); + K1 = T4[(kappa[i] >> 16) & 0xff] ^ + (T5[(K1 >> 24) ] & 0xff000000U) ^ + (T5[(K1 >> 16) & 0xff] & 0x00ff0000U) ^ + (T5[(K1 >> 8) & 0xff] & 0x0000ff00U) ^ + (T5[(K1 ) & 0xff] & 0x000000ffU); + K2 = T4[(kappa[i] >> 8) & 0xff] ^ + (T5[(K2 >> 24) ] & 0xff000000U) ^ + (T5[(K2 >> 16) & 0xff] & 0x00ff0000U) ^ + (T5[(K2 >> 8) & 0xff] & 0x0000ff00U) ^ + (T5[(K2 ) & 0xff] & 0x000000ffU); + K3 = T4[(kappa[i] ) & 0xff] ^ + (T5[(K3 >> 24) ] & 0xff000000U) ^ + (T5[(K3 >> 16) & 0xff] & 0x00ff0000U) ^ + (T5[(K3 >> 8) & 0xff] & 0x0000ff00U) ^ + (T5[(K3 ) & 0xff] & 0x000000ffU); + } + /* + -- this is the code to use with the large U tables: + K0 = K1 = K2 = K3 = 0; + for (i = 0; i < N; i++) { + K0 ^= U[i][(kappa[i] >> 24) ]; + K1 ^= U[i][(kappa[i] >> 16) & 0xff]; + K2 ^= U[i][(kappa[i] >> 8) & 0xff]; + K3 ^= U[i][(kappa[i] ) & 0xff]; + } + */ + skey->anubis.roundKeyEnc[r][0] = K0; + skey->anubis.roundKeyEnc[r][1] = K1; + skey->anubis.roundKeyEnc[r][2] = K2; + skey->anubis.roundKeyEnc[r][3] = K3; + + /* + * compute kappa^{r+1} from kappa^r: + */ + if (r == R) { + break; + } + for (i = 0; i < N; i++) { + int j = i; + inter[i] = T0[(kappa[j--] >> 24) ]; if (j < 0) j = N - 1; + inter[i] ^= T1[(kappa[j--] >> 16) & 0xff]; if (j < 0) j = N - 1; + inter[i] ^= T2[(kappa[j--] >> 8) & 0xff]; if (j < 0) j = N - 1; + inter[i] ^= T3[(kappa[j ] ) & 0xff]; + } + kappa[0] = inter[0] ^ rc[r]; + for (i = 1; i < N; i++) { + kappa[i] = inter[i]; + } + } + + /* + * generate inverse key schedule: K'^0 = K^R, K'^R = K^0, K'^r = theta(K^{R-r}): + */ + for (i = 0; i < 4; i++) { + skey->anubis.roundKeyDec[0][i] = skey->anubis.roundKeyEnc[R][i]; + skey->anubis.roundKeyDec[R][i] = skey->anubis.roundKeyEnc[0][i]; + } + for (r = 1; r < R; r++) { + for (i = 0; i < 4; i++) { + v = skey->anubis.roundKeyEnc[R - r][i]; + skey->anubis.roundKeyDec[r][i] = + T0[T4[(v >> 24) ] & 0xff] ^ + T1[T4[(v >> 16) & 0xff] & 0xff] ^ + T2[T4[(v >> 8) & 0xff] & 0xff] ^ + T3[T4[(v ) & 0xff] & 0xff]; + } + } + + return CRYPT_OK; +} + +#ifdef CLEAN_STACK +int anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) +{ + int err; + err = _anubis_setup(key, keylen, num_rounds, skey); + burn_stack(sizeof(int) * 5 + sizeof(ulong32) * (MAX_N + MAX_N + 5)); + return err; +} +#endif + + +static void anubis_crypt(const unsigned char *plaintext, unsigned char *ciphertext, + ulong32 roundKey[18 + 1][4], int R) { + int i, pos, r; + ulong32 state[4]; + ulong32 inter[4]; + + /* + * map plaintext block to cipher state (mu) + * and add initial round key (sigma[K^0]): + */ + for (i = 0, pos = 0; i < 4; i++, pos += 4) { + state[i] = + (plaintext[pos ] << 24) ^ + (plaintext[pos + 1] << 16) ^ + (plaintext[pos + 2] << 8) ^ + (plaintext[pos + 3] ) ^ + roundKey[0][i]; + } + + /* + * R - 1 full rounds: + */ + for (r = 1; r < R; r++) { + inter[0] = + T0[(state[0] >> 24) ] ^ + T1[(state[1] >> 24) ] ^ + T2[(state[2] >> 24) ] ^ + T3[(state[3] >> 24) ] ^ + roundKey[r][0]; + inter[1] = + T0[(state[0] >> 16) & 0xff] ^ + T1[(state[1] >> 16) & 0xff] ^ + T2[(state[2] >> 16) & 0xff] ^ + T3[(state[3] >> 16) & 0xff] ^ + roundKey[r][1]; + inter[2] = + T0[(state[0] >> 8) & 0xff] ^ + T1[(state[1] >> 8) & 0xff] ^ + T2[(state[2] >> 8) & 0xff] ^ + T3[(state[3] >> 8) & 0xff] ^ + roundKey[r][2]; + inter[3] = + T0[(state[0] ) & 0xff] ^ + T1[(state[1] ) & 0xff] ^ + T2[(state[2] ) & 0xff] ^ + T3[(state[3] ) & 0xff] ^ + roundKey[r][3]; + state[0] = inter[0]; + state[1] = inter[1]; + state[2] = inter[2]; + state[3] = inter[3]; + } + + /* + * last round: + */ + inter[0] = + (T0[(state[0] >> 24) ] & 0xff000000U) ^ + (T1[(state[1] >> 24) ] & 0x00ff0000U) ^ + (T2[(state[2] >> 24) ] & 0x0000ff00U) ^ + (T3[(state[3] >> 24) ] & 0x000000ffU) ^ + roundKey[R][0]; + inter[1] = + (T0[(state[0] >> 16) & 0xff] & 0xff000000U) ^ + (T1[(state[1] >> 16) & 0xff] & 0x00ff0000U) ^ + (T2[(state[2] >> 16) & 0xff] & 0x0000ff00U) ^ + (T3[(state[3] >> 16) & 0xff] & 0x000000ffU) ^ + roundKey[R][1]; + inter[2] = + (T0[(state[0] >> 8) & 0xff] & 0xff000000U) ^ + (T1[(state[1] >> 8) & 0xff] & 0x00ff0000U) ^ + (T2[(state[2] >> 8) & 0xff] & 0x0000ff00U) ^ + (T3[(state[3] >> 8) & 0xff] & 0x000000ffU) ^ + roundKey[R][2]; + inter[3] = + (T0[(state[0] ) & 0xff] & 0xff000000U) ^ + (T1[(state[1] ) & 0xff] & 0x00ff0000U) ^ + (T2[(state[2] ) & 0xff] & 0x0000ff00U) ^ + (T3[(state[3] ) & 0xff] & 0x000000ffU) ^ + roundKey[R][3]; + + /* + * map cipher state to ciphertext block (mu^{-1}): + */ + for (i = 0, pos = 0; i < 4; i++, pos += 4) { + ulong32 w = inter[i]; + ciphertext[pos ] = (unsigned char)(w >> 24); + ciphertext[pos + 1] = (unsigned char)(w >> 16); + ciphertext[pos + 2] = (unsigned char)(w >> 8); + ciphertext[pos + 3] = (unsigned char)(w ); + } +} + +/** + Encrypts a block of text with Anubis + @param pt The input plaintext (16 bytes) + @param ct The output ciphertext (16 bytes) + @param skey The key as scheduled +*/ +void anubis_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) +{ + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + anubis_crypt(pt, ct, skey->anubis.roundKeyEnc, skey->anubis.R); +} + +/** + Decrypts a block of text with Anubis + @param ct The input ciphertext (16 bytes) + @param pt The output plaintext (16 bytes) + @param skey The key as scheduled +*/ +void anubis_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) +{ + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + anubis_crypt(ct, pt, skey->anubis.roundKeyDec, skey->anubis.R); +} + +/** + Performs a self-test of the Anubis block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ +int anubis_test(void) +{ +#if !defined(LTC_TEST) + return CRYPT_NOP; +#else + static const struct test { + int keylen; + unsigned char pt[16], ct[16], key[40]; + } tests[] = { +#ifndef ANUBIS_TWEAK + /**** ORIGINAL ANUBIS ****/ + /* 128 bit keys */ +{ + 16, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xF0, 0x68, 0x60, 0xFC, 0x67, 0x30, 0xE8, 0x18, + 0xF1, 0x32, 0xC7, 0x8A, 0xF4, 0x13, 0x2A, 0xFE }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 16, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xA8, 0x66, 0x84, 0x80, 0x07, 0x74, 0x5C, 0x89, + 0xFC, 0x5E, 0xB5, 0xBA, 0xD4, 0xFE, 0x32, 0x6D }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +}, + + /* 160-bit keys */ +{ + 20, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xBD, 0x5E, 0x32, 0xBE, 0x51, 0x67, 0xA8, 0xE2, + 0x72, 0xD7, 0x95, 0x0F, 0x83, 0xC6, 0x8C, 0x31 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 } +}, { + 20, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x4C, 0x1F, 0x86, 0x2E, 0x11, 0xEB, 0xCE, 0xEB, + 0xFE, 0xB9, 0x73, 0xC9, 0xDF, 0xEF, 0x7A, 0xDB }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x01 } +}, + + /* 192-bit keys */ +{ + 24, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x17, 0xAC, 0x57, 0x44, 0x9D, 0x59, 0x61, 0x66, + 0xD0, 0xC7, 0x9E, 0x04, 0x7C, 0xC7, 0x58, 0xF0 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 24, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x71, 0x52, 0xB4, 0xEB, 0x1D, 0xAA, 0x36, 0xFD, + 0x57, 0x14, 0x5F, 0x57, 0x04, 0x9F, 0x70, 0x74 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +}, + + /* 224-bit keys */ +{ + 28, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xA2, 0xF0, 0xA6, 0xB9, 0x17, 0x93, 0x2A, 0x3B, + 0xEF, 0x08, 0xE8, 0x7A, 0x58, 0xD6, 0xF8, 0x53 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 } +}, { + 28, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xF0, 0xCA, 0xFC, 0x78, 0x8B, 0x4B, 0x4E, 0x53, + 0x8B, 0xC4, 0x32, 0x6A, 0xF5, 0xB9, 0x1B, 0x5F }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x01 } +}, + + /* 256-bit keys */ +{ + 32, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xE0, 0x86, 0xAC, 0x45, 0x6B, 0x3C, 0xE5, 0x13, + 0xED, 0xF5, 0xDF, 0xDD, 0xD6, 0x3B, 0x71, 0x93 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 32, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x50, 0x01, 0xB9, 0xF5, 0x21, 0xC1, 0xC1, 0x29, + 0x00, 0xD5, 0xEC, 0x98, 0x2B, 0x9E, 0xE8, 0x21 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +}, + + /* 288-bit keys */ +{ + 36, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xE8, 0xF4, 0xAF, 0x2B, 0x21, 0xA0, 0x87, 0x9B, + 0x41, 0x95, 0xB9, 0x71, 0x75, 0x79, 0x04, 0x7C }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 } +}, { + 36, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xE6, 0xA6, 0xA5, 0xBC, 0x8B, 0x63, 0x6F, 0xE2, + 0xBD, 0xA7, 0xA7, 0x53, 0xAB, 0x40, 0x22, 0xE0 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x01 } +}, + + /* 320-bit keys */ +{ + 40, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x17, 0x04, 0xD7, 0x2C, 0xC6, 0x85, 0x76, 0x02, + 0x4B, 0xCC, 0x39, 0x80, 0xD8, 0x22, 0xEA, 0xA4 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 40, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x7A, 0x41, 0xE6, 0x7D, 0x4F, 0xD8, 0x64, 0xF0, + 0x44, 0xA8, 0x3C, 0x73, 0x81, 0x7E, 0x53, 0xD8 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +} +#else + /**** Tweaked ANUBIS ****/ + /* 128 bit keys */ +{ + 16, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xB8, 0x35, 0xBD, 0xC3, 0x34, 0x82, 0x9D, 0x83, + 0x71, 0xBF, 0xA3, 0x71, 0xE4, 0xB3, 0xC4, 0xFD }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 16, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xE6, 0x14, 0x1E, 0xAF, 0xEB, 0xE0, 0x59, 0x3C, + 0x48, 0xE1, 0xCD, 0xF2, 0x1B, 0xBA, 0xA1, 0x89 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +}, + + /* 160-bit keys */ +{ + 20, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x97, 0x59, 0x79, 0x4B, 0x5C, 0xA0, 0x70, 0x73, + 0x24, 0xEF, 0xB3, 0x58, 0x67, 0xCA, 0xD4, 0xB3 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 } +}, { + 20, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xB8, 0x0D, 0xFB, 0x9B, 0xE4, 0xA1, 0x58, 0x87, + 0xB3, 0x76, 0xD5, 0x02, 0x18, 0x95, 0xC1, 0x2E }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x01 } +}, + + /* 192-bit keys */ +{ + 24, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x7D, 0x62, 0x3B, 0x52, 0xC7, 0x4C, 0x64, 0xD8, + 0xEB, 0xC7, 0x2D, 0x57, 0x97, 0x85, 0x43, 0x8F }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 24, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xB1, 0x0A, 0x59, 0xDD, 0x5D, 0x5D, 0x8D, 0x67, + 0xEC, 0xEE, 0x4A, 0xC4, 0xBE, 0x4F, 0xA8, 0x4F }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +}, + + /* 224-bit keys */ +{ + 28, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x68, 0x9E, 0x05, 0x94, 0x6A, 0x94, 0x43, 0x8F, + 0xE7, 0x8E, 0x37, 0x3D, 0x24, 0x97, 0x92, 0xF5 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 } +}, { + 28, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xDD, 0xB7, 0xB0, 0xB4, 0xE9, 0xB4, 0x9B, 0x9C, + 0x38, 0x20, 0x25, 0x0B, 0x47, 0xC2, 0x1F, 0x89 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x01 } +}, + + /* 256-bit keys */ +{ + 32, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x96, 0x00, 0xF0, 0x76, 0x91, 0x69, 0x29, 0x87, + 0xF5, 0xE5, 0x97, 0xDB, 0xDB, 0xAF, 0x1B, 0x0A }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 32, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x69, 0x9C, 0xAF, 0xDD, 0x94, 0xC7, 0xBC, 0x60, + 0x44, 0xFE, 0x02, 0x05, 0x8A, 0x6E, 0xEF, 0xBD }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +}, + + /* 288-bit keys */ +{ + 36, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x0F, 0xC7, 0xA2, 0xC0, 0x11, 0x17, 0xAC, 0x43, + 0x52, 0x5E, 0xDF, 0x6C, 0xF3, 0x96, 0x33, 0x6C }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00 } +}, { + 36, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xAD, 0x08, 0x4F, 0xED, 0x55, 0xA6, 0x94, 0x3E, + 0x7E, 0x5E, 0xED, 0x05, 0xA1, 0x9D, 0x41, 0xB4 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x01 } +}, + + /* 320-bit keys */ +{ + 40, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0xFE, 0xE2, 0x0E, 0x2A, 0x9D, 0xC5, 0x83, 0xBA, + 0xA3, 0xA6, 0xD6, 0xA6, 0xF2, 0xE8, 0x06, 0xA5 }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + 40, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x86, 0x3D, 0xCC, 0x4A, 0x60, 0x34, 0x9C, 0x28, + 0xA7, 0xDA, 0xA4, 0x3B, 0x0A, 0xD7, 0xFD, 0xC7 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +} +#endif +}; + int x, y; + unsigned char buf[2][16]; + symmetric_key skey; + + for (x = 0; x < (int)(sizeof(tests)/sizeof(tests[0])); x++) { + anubis_setup(tests[x].key, tests[x].keylen, 0, &skey); + anubis_ecb_encrypt(tests[x].pt, buf[0], &skey); + anubis_ecb_decrypt(buf[0], buf[1], &skey); + if (memcmp(buf[0], tests[x].ct, 16) || memcmp(buf[1], tests[x].pt, 16)) { + return CRYPT_FAIL_TESTVECTOR; + } + + for (y = 0; y < 1000; y++) anubis_ecb_encrypt(buf[0], buf[0], &skey); + for (y = 0; y < 1000; y++) anubis_ecb_decrypt(buf[0], buf[0], &skey); + if (memcmp(buf[0], tests[x].ct, 16)) { + return CRYPT_FAIL_TESTVECTOR; + } + + } + return CRYPT_OK; +#endif +} + +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int anubis_keysize(int *keysize) +{ + LTC_ARGCHK(keysize != NULL); + if (*keysize >= 40) { + *keysize = 40; + } else if (*keysize >= 36) { + *keysize = 36; + } else if (*keysize >= 32) { + *keysize = 32; + } else if (*keysize >= 28) { + *keysize = 28; + } else if (*keysize >= 24) { + *keysize = 24; + } else if (*keysize >= 20) { + *keysize = 20; + } else if (*keysize >= 16) { + *keysize = 16; + } else { + return CRYPT_INVALID_KEYSIZE; + } + return CRYPT_OK; +} + +#endif + diff --git a/blowfish.c b/src/ciphers/blowfish.c similarity index 88% rename from blowfish.c rename to src/ciphers/blowfish.c index 229ba88..d136794 100644 --- a/blowfish.c +++ b/src/ciphers/blowfish.c @@ -8,11 +8,15 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +/** + @file blowfish.c + Implementation of the Blowfish block cipher, Tom St Denis +*/ +#include "tomcrypt.h" #ifdef BLOWFISH -const struct _cipher_descriptor blowfish_desc = +const struct ltc_cipher_descriptor blowfish_desc = { "blowfish", 0, @@ -291,14 +295,22 @@ static const ulong32 ORIG_S[4][256] = { 0xB74E6132UL, 0xCE77E25BUL, 0x578FDFE3UL, 0x3AC372E6UL } }; + /** + Initialize the Blowfish block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ int blowfish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { ulong32 x, y, z, A; unsigned char B[8]; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); /* check key length */ if (keylen < 8 || keylen > 56) { @@ -353,7 +365,7 @@ int blowfish_setup(const unsigned char *key, int keylen, int num_rounds, } } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(B, sizeof(B)); #endif @@ -363,13 +375,19 @@ int blowfish_setup(const unsigned char *key, int keylen, int num_rounds, #ifndef __GNUC__ #define F(x) ((S1[byte(x,3)] + S2[byte(x,2)]) ^ S3[byte(x,1)]) + S4[byte(x,0)] #else -#define F(x) ((key->blowfish.S[0][byte(x,3)] + key->blowfish.S[1][byte(x,2)]) ^ key->blowfish.S[2][byte(x,1)]) + key->blowfish.S[3][byte(x,0)] +#define F(x) ((skey->blowfish.S[0][byte(x,3)] + skey->blowfish.S[1][byte(x,2)]) ^ skey->blowfish.S[2][byte(x,1)]) + skey->blowfish.S[3][byte(x,0)] #endif -#ifdef CLEAN_STACK -static void _blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with Blowfish + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else -void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #endif { ulong32 L, R; @@ -378,15 +396,15 @@ void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ ulong32 *S1, *S2, *S3, *S4; #endif - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); #ifndef __GNUC__ - S1 = key->blowfish.S[0]; - S2 = key->blowfish.S[1]; - S3 = key->blowfish.S[2]; - S4 = key->blowfish.S[3]; + S1 = skey->blowfish.S[0]; + S2 = skey->blowfish.S[1]; + S3 = skey->blowfish.S[2]; + S4 = skey->blowfish.S[3]; #endif /* load it */ @@ -395,33 +413,39 @@ void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ /* do 16 rounds */ for (r = 0; r < 16; ) { - L ^= key->blowfish.K[r++]; R ^= F(L); - R ^= key->blowfish.K[r++]; L ^= F(R); - L ^= key->blowfish.K[r++]; R ^= F(L); - R ^= key->blowfish.K[r++]; L ^= F(R); + L ^= skey->blowfish.K[r++]; R ^= F(L); + R ^= skey->blowfish.K[r++]; L ^= F(R); + L ^= skey->blowfish.K[r++]; R ^= F(L); + R ^= skey->blowfish.K[r++]; L ^= F(R); } /* last keying */ - R ^= key->blowfish.K[17]; - L ^= key->blowfish.K[16]; + R ^= skey->blowfish.K[17]; + L ^= skey->blowfish.K[16]; /* store */ STORE32H(R, &ct[0]); STORE32H(L, &ct[4]); } -#ifdef CLEAN_STACK -void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { - _blowfish_ecb_encrypt(pt, ct, key); + _blowfish_ecb_encrypt(pt, ct, skey); burn_stack(sizeof(ulong32) * 2 + sizeof(int)); } #endif -#ifdef CLEAN_STACK -static void _blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with Blowfish + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else -void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #endif { ulong32 L, R; @@ -430,15 +454,15 @@ void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ ulong32 *S1, *S2, *S3, *S4; #endif - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); #ifndef __GNUC__ - S1 = key->blowfish.S[0]; - S2 = key->blowfish.S[1]; - S3 = key->blowfish.S[2]; - S4 = key->blowfish.S[3]; + S1 = skey->blowfish.S[0]; + S2 = skey->blowfish.S[1]; + S3 = skey->blowfish.S[2]; + S4 = skey->blowfish.S[3]; #endif /* load it */ @@ -446,15 +470,15 @@ void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ LOAD32H(L, &ct[4]); /* undo last keying */ - R ^= key->blowfish.K[17]; - L ^= key->blowfish.K[16]; + R ^= skey->blowfish.K[17]; + L ^= skey->blowfish.K[16]; /* do 16 rounds */ for (r = 15; r > 0; ) { - L ^= F(R); R ^= key->blowfish.K[r--]; - R ^= F(L); L ^= key->blowfish.K[r--]; - L ^= F(R); R ^= key->blowfish.K[r--]; - R ^= F(L); L ^= key->blowfish.K[r--]; + L ^= F(R); R ^= skey->blowfish.K[r--]; + R ^= F(L); L ^= skey->blowfish.K[r--]; + L ^= F(R); R ^= skey->blowfish.K[r--]; + R ^= F(L); L ^= skey->blowfish.K[r--]; } /* store */ @@ -462,15 +486,19 @@ void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ STORE32H(R, &pt[4]); } -#ifdef CLEAN_STACK -void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { - _blowfish_ecb_decrypt(ct, pt, key); + _blowfish_ecb_decrypt(ct, pt, skey); burn_stack(sizeof(ulong32) * 2 + sizeof(int)); } #endif +/** + Performs a self-test of the Blowfish block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int blowfish_test(void) { #ifndef LTC_TEST @@ -525,14 +553,19 @@ int blowfish_test(void) #endif } -int blowfish_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int blowfish_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); + LTC_ARGCHK(keysize != NULL); - if (*desired_keysize < 8) { + if (*keysize < 8) { return CRYPT_INVALID_KEYSIZE; - } else if (*desired_keysize > 56) { - *desired_keysize = 56; + } else if (*keysize > 56) { + *keysize = 56; } return CRYPT_OK; } diff --git a/cast5.c b/src/ciphers/cast5.c similarity index 91% rename from cast5.c rename to src/ciphers/cast5.c index dcb78ab..2a2c714 100644 --- a/cast5.c +++ b/src/ciphers/cast5.c @@ -8,12 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Implementation of CAST5 (RFC 2144) by Tom St Denis */ -#include "mycrypt.h" + + /** + @file cast5.c + Implementation of CAST5 (RFC 2144) by Tom St Denis + */ +#include "tomcrypt.h" #ifdef CAST5 -const struct _cipher_descriptor cast5_desc = { +const struct ltc_cipher_descriptor cast5_desc = { "cast5", 15, 5, 16, 8, 16, @@ -391,7 +395,15 @@ static const ulong32 S8[256] = { #define GB(x, i) (((x[(15-i)>>2])>>(unsigned)(8*((15-i)&3)))&255) #endif -#ifdef CLEAN_STACK + /** + Initialize the CAST5 block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +#ifdef LTC_CLEAN_STACK static int _cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) #else int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) @@ -401,8 +413,8 @@ int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ unsigned char buf[16]; int y, i; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (num_rounds != 12 && num_rounds != 16 && num_rounds != 0) { return CRYPT_INVALID_ROUNDS; @@ -466,7 +478,7 @@ int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ skey->cast5.keylen = keylen; -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, sizeof(buf)); zeromem(x, sizeof(x)); zeromem(z, sizeof(z)); @@ -475,7 +487,7 @@ int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { int z; @@ -515,95 +527,111 @@ INLINE static ulong32 FIII(ulong32 R, ulong32 Km, ulong32 Kr) return ((S1[byte(I, 3)] + S2[byte(I,2)]) ^ S3[byte(I,1)]) - S4[byte(I,0)]; } -#ifdef CLEAN_STACK -static void _cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with CAST5 + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else -void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #endif { ulong32 R, L; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32H(L,&pt[0]); LOAD32H(R,&pt[4]); - L ^= FI(R, key->cast5.K[0], key->cast5.K[16]); - R ^= FII(L, key->cast5.K[1], key->cast5.K[17]); - L ^= FIII(R, key->cast5.K[2], key->cast5.K[18]); - R ^= FI(L, key->cast5.K[3], key->cast5.K[19]); - L ^= FII(R, key->cast5.K[4], key->cast5.K[20]); - R ^= FIII(L, key->cast5.K[5], key->cast5.K[21]); - L ^= FI(R, key->cast5.K[6], key->cast5.K[22]); - R ^= FII(L, key->cast5.K[7], key->cast5.K[23]); - L ^= FIII(R, key->cast5.K[8], key->cast5.K[24]); - R ^= FI(L, key->cast5.K[9], key->cast5.K[25]); - L ^= FII(R, key->cast5.K[10], key->cast5.K[26]); - R ^= FIII(L, key->cast5.K[11], key->cast5.K[27]); - if (key->cast5.keylen > 10) { - L ^= FI(R, key->cast5.K[12], key->cast5.K[28]); - R ^= FII(L, key->cast5.K[13], key->cast5.K[29]); - L ^= FIII(R, key->cast5.K[14], key->cast5.K[30]); - R ^= FI(L, key->cast5.K[15], key->cast5.K[31]); + L ^= FI(R, skey->cast5.K[0], skey->cast5.K[16]); + R ^= FII(L, skey->cast5.K[1], skey->cast5.K[17]); + L ^= FIII(R, skey->cast5.K[2], skey->cast5.K[18]); + R ^= FI(L, skey->cast5.K[3], skey->cast5.K[19]); + L ^= FII(R, skey->cast5.K[4], skey->cast5.K[20]); + R ^= FIII(L, skey->cast5.K[5], skey->cast5.K[21]); + L ^= FI(R, skey->cast5.K[6], skey->cast5.K[22]); + R ^= FII(L, skey->cast5.K[7], skey->cast5.K[23]); + L ^= FIII(R, skey->cast5.K[8], skey->cast5.K[24]); + R ^= FI(L, skey->cast5.K[9], skey->cast5.K[25]); + L ^= FII(R, skey->cast5.K[10], skey->cast5.K[26]); + R ^= FIII(L, skey->cast5.K[11], skey->cast5.K[27]); + if (skey->cast5.keylen > 10) { + L ^= FI(R, skey->cast5.K[12], skey->cast5.K[28]); + R ^= FII(L, skey->cast5.K[13], skey->cast5.K[29]); + L ^= FIII(R, skey->cast5.K[14], skey->cast5.K[30]); + R ^= FI(L, skey->cast5.K[15], skey->cast5.K[31]); } STORE32H(R,&ct[0]); STORE32H(L,&ct[4]); } -#ifdef CLEAN_STACK -void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { - _cast5_ecb_encrypt(pt,ct,key); + _cast5_ecb_encrypt(pt,ct,skey); burn_stack(sizeof(ulong32)*3); } #endif -#ifdef CLEAN_STACK -static void _cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with CAST5 + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else -void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #endif { ulong32 R, L; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32H(R,&ct[0]); LOAD32H(L,&ct[4]); - if (key->cast5.keylen > 10) { - R ^= FI(L, key->cast5.K[15], key->cast5.K[31]); - L ^= FIII(R, key->cast5.K[14], key->cast5.K[30]); - R ^= FII(L, key->cast5.K[13], key->cast5.K[29]); - L ^= FI(R, key->cast5.K[12], key->cast5.K[28]); + if (skey->cast5.keylen > 10) { + R ^= FI(L, skey->cast5.K[15], skey->cast5.K[31]); + L ^= FIII(R, skey->cast5.K[14], skey->cast5.K[30]); + R ^= FII(L, skey->cast5.K[13], skey->cast5.K[29]); + L ^= FI(R, skey->cast5.K[12], skey->cast5.K[28]); } - R ^= FIII(L, key->cast5.K[11], key->cast5.K[27]); - L ^= FII(R, key->cast5.K[10], key->cast5.K[26]); - R ^= FI(L, key->cast5.K[9], key->cast5.K[25]); - L ^= FIII(R, key->cast5.K[8], key->cast5.K[24]); - R ^= FII(L, key->cast5.K[7], key->cast5.K[23]); - L ^= FI(R, key->cast5.K[6], key->cast5.K[22]); - R ^= FIII(L, key->cast5.K[5], key->cast5.K[21]); - L ^= FII(R, key->cast5.K[4], key->cast5.K[20]); - R ^= FI(L, key->cast5.K[3], key->cast5.K[19]); - L ^= FIII(R, key->cast5.K[2], key->cast5.K[18]); - R ^= FII(L, key->cast5.K[1], key->cast5.K[17]); - L ^= FI(R, key->cast5.K[0], key->cast5.K[16]); + R ^= FIII(L, skey->cast5.K[11], skey->cast5.K[27]); + L ^= FII(R, skey->cast5.K[10], skey->cast5.K[26]); + R ^= FI(L, skey->cast5.K[9], skey->cast5.K[25]); + L ^= FIII(R, skey->cast5.K[8], skey->cast5.K[24]); + R ^= FII(L, skey->cast5.K[7], skey->cast5.K[23]); + L ^= FI(R, skey->cast5.K[6], skey->cast5.K[22]); + R ^= FIII(L, skey->cast5.K[5], skey->cast5.K[21]); + L ^= FII(R, skey->cast5.K[4], skey->cast5.K[20]); + R ^= FI(L, skey->cast5.K[3], skey->cast5.K[19]); + L ^= FIII(R, skey->cast5.K[2], skey->cast5.K[18]); + R ^= FII(L, skey->cast5.K[1], skey->cast5.K[17]); + L ^= FI(R, skey->cast5.K[0], skey->cast5.K[16]); STORE32H(L,&pt[0]); STORE32H(R,&pt[4]); } -#ifdef CLEAN_STACK -void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { - _cast5_ecb_decrypt(ct,pt,key); + _cast5_ecb_decrypt(ct,pt,skey); burn_stack(sizeof(ulong32)*3); } #endif +/** + Performs a self-test of the CAST5 block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int cast5_test(void) { #ifndef LTC_TEST @@ -655,13 +683,18 @@ int cast5_test(void) #endif } -int cast5_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int cast5_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if (*desired_keysize < 5) { + LTC_ARGCHK(keysize != NULL); + if (*keysize < 5) { return CRYPT_INVALID_KEYSIZE; - } else if (*desired_keysize > 16) { - *desired_keysize = 16; + } else if (*keysize > 16) { + *keysize = 16; } return CRYPT_OK; } diff --git a/des.c b/src/ciphers/des.c similarity index 97% rename from des.c rename to src/ciphers/des.c index e609014..a8c4500 100644 --- a/des.c +++ b/src/ciphers/des.c @@ -8,15 +8,19 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* DES code submitted by Dobes Vandermeer */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file des.c + DES code submitted by Dobes Vandermeer +*/ #ifdef DES #define EN0 0 #define DE1 1 -const struct _cipher_descriptor des_desc = +const struct ltc_cipher_descriptor des_desc = { "des", 13, @@ -28,7 +32,7 @@ const struct _cipher_descriptor des_desc = &des_keysize }; -const struct _cipher_descriptor des3_desc = +const struct ltc_cipher_descriptor des3_desc = { "3des", 14, @@ -239,7 +243,7 @@ static const ulong32 SP8[64] = 0x00001040UL, 0x00040040UL, 0x10000000UL, 0x10041000UL }; -#ifndef SMALL_CODE +#ifndef LTC_SMALL_CODE static const ulong64 des_ip[8][256] = { @@ -1292,10 +1296,10 @@ static const ulong64 des_fp[8][256] = { static void cookey(const ulong32 *raw1, ulong32 *keyout); -#ifdef CLEAN_STACK -void _deskey(const unsigned char *key, short edf, ulong32 *keyout) +#ifdef LTC_CLEAN_STACK +static void _deskey(const unsigned char *key, short edf, ulong32 *keyout) #else -void deskey(const unsigned char *key, short edf, ulong32 *keyout) +static void deskey(const unsigned char *key, short edf, ulong32 *keyout) #endif { ulong32 i, j, l, m, n, kn[32]; @@ -1344,15 +1348,15 @@ void deskey(const unsigned char *key, short edf, ulong32 *keyout) cookey(kn, keyout); } -#ifdef CLEAN_STACK -void deskey(const unsigned char *key, short edf, ulong32 *keyout) +#ifdef LTC_CLEAN_STACK +static void deskey(const unsigned char *key, short edf, ulong32 *keyout) { _deskey(key, edf, keyout); burn_stack(sizeof(int)*5 + sizeof(ulong32)*32 + sizeof(unsigned char)*112); } #endif -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static void _cookey(const ulong32 *raw1, ulong32 *keyout) #else static void cookey(const ulong32 *raw1, ulong32 *keyout) @@ -1380,7 +1384,7 @@ static void cookey(const ulong32 *raw1, ulong32 *keyout) XMEMCPY(keyout, dough, sizeof dough); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static void cookey(const ulong32 *raw1, ulong32 *keyout) { _cookey(raw1, keyout); @@ -1388,7 +1392,7 @@ static void cookey(const ulong32 *raw1, ulong32 *keyout) } #endif -#ifndef CLEAN_STACK +#ifndef LTC_CLEAN_STACK static void desfunc(ulong32 *block, const ulong32 *keys) #else static void _desfunc(ulong32 *block, const ulong32 *keys) @@ -1400,7 +1404,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys) leftt = block[0]; right = block[1]; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE work = ((leftt >> 4) ^ right) & 0x0f0f0f0fL; right ^= work; leftt ^= (work << 4); @@ -1417,12 +1421,12 @@ static void _desfunc(ulong32 *block, const ulong32 *keys) leftt ^= work; right ^= (work << 8); - right = ROL(right, 1); + right = ROLc(right, 1); work = (leftt ^ right) & 0xaaaaaaaaL; leftt ^= work; right ^= work; - leftt = ROL(leftt, 1); + leftt = ROLc(leftt, 1); #else { ulong64 tmp; @@ -1440,7 +1444,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys) #endif for (cur_round = 0; cur_round < 8; cur_round++) { - work = ROR(right, 4) ^ *keys++; + work = RORc(right, 4) ^ *keys++; leftt ^= SP7[work & 0x3fL] ^ SP5[(work >> 8) & 0x3fL] ^ SP3[(work >> 16) & 0x3fL] @@ -1451,7 +1455,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys) ^ SP4[(work >> 16) & 0x3fL] ^ SP2[(work >> 24) & 0x3fL]; - work = ROR(leftt, 4) ^ *keys++; + work = RORc(leftt, 4) ^ *keys++; right ^= SP7[ work & 0x3fL] ^ SP5[(work >> 8) & 0x3fL] ^ SP3[(work >> 16) & 0x3fL] @@ -1463,12 +1467,12 @@ static void _desfunc(ulong32 *block, const ulong32 *keys) ^ SP2[(work >> 24) & 0x3fL]; } -#ifdef SMALL_CODE - right = ROR(right, 1); +#ifdef LTC_SMALL_CODE + right = RORc(right, 1); work = (leftt ^ right) & 0xaaaaaaaaL; leftt ^= work; right ^= work; - leftt = ROR(leftt, 1); + leftt = RORc(leftt, 1); work = ((leftt >> 8) ^ right) & 0x00ff00ffL; right ^= work; leftt ^= (work << 8); @@ -1502,7 +1506,7 @@ static void _desfunc(ulong32 *block, const ulong32 *keys) block[1] = leftt; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static void desfunc(ulong32 *block, const ulong32 *keys) { _desfunc(block, keys); @@ -1510,10 +1514,18 @@ static void desfunc(ulong32 *block, const ulong32 *keys) } #endif + /** + Initialize the DES block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (num_rounds != 0 && num_rounds != 16) { return CRYPT_INVALID_ROUNDS; @@ -1529,10 +1541,18 @@ int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke return CRYPT_OK; } + /** + Initialize the 3DES-EDE block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if(num_rounds != 0 && num_rounds != 16) { return CRYPT_INVALID_ROUNDS; @@ -1553,63 +1573,91 @@ int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_k return CRYPT_OK; } -void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with DES + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { ulong32 work[2]; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32H(work[0], pt+0); LOAD32H(work[1], pt+4); - desfunc(work, key->des.ek); + desfunc(work, skey->des.ek); STORE32H(work[0],ct+0); STORE32H(work[1],ct+4); } -void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with DES + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { ulong32 work[2]; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32H(work[0], ct+0); LOAD32H(work[1], ct+4); - desfunc(work, key->des.dk); + desfunc(work, skey->des.dk); STORE32H(work[0],pt+0); STORE32H(work[1],pt+4); } -void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with 3DES-EDE + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { ulong32 work[2]; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32H(work[0], pt+0); LOAD32H(work[1], pt+4); - desfunc(work, key->des3.ek[0]); - desfunc(work, key->des3.ek[1]); - desfunc(work, key->des3.ek[2]); + desfunc(work, skey->des3.ek[0]); + desfunc(work, skey->des3.ek[1]); + desfunc(work, skey->des3.ek[2]); STORE32H(work[0],ct+0); STORE32H(work[1],ct+4); } -void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with 3DES-EDE + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { ulong32 work[2]; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32H(work[0], ct+0); LOAD32H(work[1], ct+4); - desfunc(work, key->des3.dk[0]); - desfunc(work, key->des3.dk[1]); - desfunc(work, key->des3.dk[2]); + desfunc(work, skey->des3.dk[0]); + desfunc(work, skey->des3.dk[1]); + desfunc(work, skey->des3.dk[2]); STORE32H(work[0],pt+0); STORE32H(work[1],pt+4); } +/** + Performs a self-test of the DES block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int des_test(void) { #ifndef LTC_TEST @@ -1789,23 +1837,33 @@ int des3_test(void) #endif } -int des_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int des_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if(*desired_keysize < 8) { + LTC_ARGCHK(keysize != NULL); + if(*keysize < 8) { return CRYPT_INVALID_KEYSIZE; } - *desired_keysize = 8; + *keysize = 8; return CRYPT_OK; } -int des3_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int des3_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if(*desired_keysize < 24) { + LTC_ARGCHK(keysize != NULL); + if(*keysize < 24) { return CRYPT_INVALID_KEYSIZE; } - *desired_keysize = 24; + *keysize = 24; return CRYPT_OK; } diff --git a/src/ciphers/khazad.c b/src/ciphers/khazad.c new file mode 100644 index 0000000..207ea6f --- /dev/null +++ b/src/ciphers/khazad.c @@ -0,0 +1,838 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file khazad.c + Khazad implementation derived from public domain source + Authors: Paulo S.L.M. Barreto and Vincent Rijmen. +*/ + +#ifdef KHAZAD + +const struct ltc_cipher_descriptor khazad_desc = { + "khazad", + 18, + 16, 16, 8, 8, + &khazad_setup, + &khazad_ecb_encrypt, + &khazad_ecb_decrypt, + &khazad_test, + &khazad_keysize +}; + +#define R 8 +#define KEYSIZE 128 +#define KEYSIZEB (KEYSIZE/8) +#define BLOCKSIZE 64 +#define BLOCKSIZEB (BLOCKSIZE/8) + +static const ulong64 T0[256] = { + CONST64(0xbad3d268bbb96a01), CONST64(0x54fc4d19e59a66b1), CONST64(0x2f71bc93e26514cd), CONST64(0x749ccdb925871b51), + CONST64(0x53f55102f7a257a4), CONST64(0xd3686bb8d0d6be03), CONST64(0xd26b6fbdd6deb504), CONST64(0x4dd72964b35285fe), + CONST64(0x50f05d0dfdba4aad), CONST64(0xace98a26cf09e063), CONST64(0x8d8a0e83091c9684), CONST64(0xbfdcc679a5914d1a), + CONST64(0x7090ddad3da7374d), CONST64(0x52f65507f1aa5ca3), CONST64(0x9ab352c87ba417e1), CONST64(0x4cd42d61b55a8ef9), + CONST64(0xea238f65460320ac), CONST64(0xd56273a6c4e68411), CONST64(0x97a466f155cc68c2), CONST64(0xd16e63b2dcc6a80d), + CONST64(0x3355ccffaa85d099), CONST64(0x51f35908fbb241aa), CONST64(0x5bed712ac7e20f9c), CONST64(0xa6f7a204f359ae55), + CONST64(0xde7f5f81febec120), CONST64(0x48d83d75ad7aa2e5), CONST64(0xa8e59a32d729cc7f), CONST64(0x99b65ec771bc0ae8), + CONST64(0xdb704b90e096e63b), CONST64(0x3256c8faac8ddb9e), CONST64(0xb7c4e65195d11522), CONST64(0xfc19d72b32b3aace), + CONST64(0xe338ab48704b7393), CONST64(0x9ebf42dc63843bfd), CONST64(0x91ae7eef41fc52d0), CONST64(0x9bb056cd7dac1ce6), + CONST64(0xe23baf4d76437894), CONST64(0xbbd0d66dbdb16106), CONST64(0x41c319589b32f1da), CONST64(0x6eb2a5cb7957e517), + CONST64(0xa5f2ae0bf941b35c), CONST64(0xcb400bc08016564b), CONST64(0x6bbdb1da677fc20c), CONST64(0x95a26efb59dc7ecc), + CONST64(0xa1febe1fe1619f40), CONST64(0xf308eb1810cbc3e3), CONST64(0xb1cefe4f81e12f30), CONST64(0x0206080a0c10160e), + CONST64(0xcc4917db922e675e), CONST64(0xc45137f3a26e3f66), CONST64(0x1d2774694ee8cf53), CONST64(0x143c504478a09c6c), + CONST64(0xc3582be8b0560e73), CONST64(0x63a591f2573f9a34), CONST64(0xda734f95e69eed3c), CONST64(0x5de76934d3d2358e), + CONST64(0x5fe1613edfc22380), CONST64(0xdc79578bf2aed72e), CONST64(0x7d87e99413cf486e), CONST64(0xcd4a13de94266c59), + CONST64(0x7f81e19e1fdf5e60), CONST64(0x5aee752fc1ea049b), CONST64(0x6cb4adc17547f319), CONST64(0x5ce46d31d5da3e89), + CONST64(0xf704fb0c08ebefff), CONST64(0x266a98bed42d47f2), CONST64(0xff1cdb2438abb7c7), CONST64(0xed2a937e543b11b9), + CONST64(0xe825876f4a1336a2), CONST64(0x9dba4ed3699c26f4), CONST64(0x6fb1a1ce7f5fee10), CONST64(0x8e8f028c03048b8d), + CONST64(0x192b647d56c8e34f), CONST64(0xa0fdba1ae7699447), CONST64(0xf00de7171ad3deea), CONST64(0x89861e97113cba98), + CONST64(0x0f113c332278692d), CONST64(0x07091c1b12383115), CONST64(0xafec8629c511fd6a), CONST64(0xfb10cb30208b9bdb), + CONST64(0x0818202830405838), CONST64(0x153f54417ea8976b), CONST64(0x0d1734392e687f23), CONST64(0x040c101418202c1c), + CONST64(0x0103040506080b07), CONST64(0x64ac8de94507ab21), CONST64(0xdf7c5b84f8b6ca27), CONST64(0x769ac5b329970d5f), + CONST64(0x798bf9800bef6472), CONST64(0xdd7a538ef4a6dc29), CONST64(0x3d47f4c98ef5b2b3), CONST64(0x163a584e74b08a62), + CONST64(0x3f41fcc382e5a4bd), CONST64(0x3759dcebb2a5fc85), CONST64(0x6db7a9c4734ff81e), CONST64(0x3848e0d890dd95a8), + CONST64(0xb9d6de67b1a17708), CONST64(0x7395d1a237bf2a44), CONST64(0xe926836a4c1b3da5), CONST64(0x355fd4e1beb5ea8b), + CONST64(0x55ff491ce3926db6), CONST64(0x7193d9a83baf3c4a), CONST64(0x7b8df18a07ff727c), CONST64(0x8c890a860f149d83), + CONST64(0x7296d5a731b72143), CONST64(0x88851a921734b19f), CONST64(0xf607ff090ee3e4f8), CONST64(0x2a7ea882fc4d33d6), + CONST64(0x3e42f8c684edafba), CONST64(0x5ee2653bd9ca2887), CONST64(0x27699cbbd2254cf5), CONST64(0x46ca0543890ac0cf), + CONST64(0x0c14303c28607424), CONST64(0x65af89ec430fa026), CONST64(0x68b8bdd56d67df05), CONST64(0x61a399f85b2f8c3a), + CONST64(0x03050c0f0a181d09), CONST64(0xc15e23e2bc46187d), CONST64(0x57f94116ef827bb8), CONST64(0xd6677fa9cefe9918), + CONST64(0xd976439aec86f035), CONST64(0x58e87d25cdfa1295), CONST64(0xd875479fea8efb32), CONST64(0x66aa85e34917bd2f), + CONST64(0xd7647bacc8f6921f), CONST64(0x3a4ee8d29ccd83a6), CONST64(0xc84507cf8a0e4b42), CONST64(0x3c44f0cc88fdb9b4), + CONST64(0xfa13cf35268390dc), CONST64(0x96a762f453c463c5), CONST64(0xa7f4a601f551a552), CONST64(0x98b55ac277b401ef), + CONST64(0xec29977b52331abe), CONST64(0xb8d5da62b7a97c0f), CONST64(0xc7543bfca876226f), CONST64(0xaeef822cc319f66d), + CONST64(0x69bbb9d06b6fd402), CONST64(0x4bdd317aa762bfec), CONST64(0xabe0963ddd31d176), CONST64(0xa9e69e37d121c778), + CONST64(0x67a981e64f1fb628), CONST64(0x0a1e28223c504e36), CONST64(0x47c901468f02cbc8), CONST64(0xf20bef1d16c3c8e4), + CONST64(0xb5c2ee5b99c1032c), CONST64(0x226688aacc0d6bee), CONST64(0xe532b356647b4981), CONST64(0xee2f9f715e230cb0), + CONST64(0xbedfc27ca399461d), CONST64(0x2b7dac87fa4538d1), CONST64(0x819e3ebf217ce2a0), CONST64(0x1236485a6c90a67e), + CONST64(0x839836b52d6cf4ae), CONST64(0x1b2d6c775ad8f541), CONST64(0x0e1238362470622a), CONST64(0x23658cafca0560e9), + CONST64(0xf502f30604fbf9f1), CONST64(0x45cf094c8312ddc6), CONST64(0x216384a5c61576e7), CONST64(0xce4f1fd19e3e7150), + CONST64(0x49db3970ab72a9e2), CONST64(0x2c74b09ce87d09c4), CONST64(0xf916c33a2c9b8dd5), CONST64(0xe637bf596e635488), + CONST64(0xb6c7e25493d91e25), CONST64(0x2878a088f05d25d8), CONST64(0x17395c4b72b88165), CONST64(0x829b32b02b64ffa9), + CONST64(0x1a2e68725cd0fe46), CONST64(0x8b80169d1d2cac96), CONST64(0xfe1fdf213ea3bcc0), CONST64(0x8a8312981b24a791), + CONST64(0x091b242d3648533f), CONST64(0xc94603ca8c064045), CONST64(0x879426a1354cd8b2), CONST64(0x4ed2256bb94a98f7), + CONST64(0xe13ea3427c5b659d), CONST64(0x2e72b896e46d1fca), CONST64(0xe431b75362734286), CONST64(0xe03da7477a536e9a), + CONST64(0xeb208b60400b2bab), CONST64(0x90ad7aea47f459d7), CONST64(0xa4f1aa0eff49b85b), CONST64(0x1e22786644f0d25a), + CONST64(0x85922eab395ccebc), CONST64(0x60a09dfd5d27873d), CONST64(0x0000000000000000), CONST64(0x256f94b1de355afb), + CONST64(0xf401f70302f3f2f6), CONST64(0xf10ee3121cdbd5ed), CONST64(0x94a16afe5fd475cb), CONST64(0x0b1d2c273a584531), + CONST64(0xe734bb5c686b5f8f), CONST64(0x759fc9bc238f1056), CONST64(0xef2c9b74582b07b7), CONST64(0x345cd0e4b8bde18c), + CONST64(0x3153c4f5a695c697), CONST64(0xd46177a3c2ee8f16), CONST64(0xd06d67b7dacea30a), CONST64(0x869722a43344d3b5), + CONST64(0x7e82e59b19d75567), CONST64(0xadea8e23c901eb64), CONST64(0xfd1ad32e34bba1c9), CONST64(0x297ba48df6552edf), + CONST64(0x3050c0f0a09dcd90), CONST64(0x3b4decd79ac588a1), CONST64(0x9fbc46d9658c30fa), CONST64(0xf815c73f2a9386d2), + CONST64(0xc6573ff9ae7e2968), CONST64(0x13354c5f6a98ad79), CONST64(0x060a181e14303a12), CONST64(0x050f14111e28271b), + CONST64(0xc55233f6a4663461), CONST64(0x113344556688bb77), CONST64(0x7799c1b62f9f0658), CONST64(0x7c84ed9115c74369), + CONST64(0x7a8ef58f01f7797b), CONST64(0x7888fd850de76f75), CONST64(0x365ad8eeb4adf782), CONST64(0x1c24706c48e0c454), + CONST64(0x394be4dd96d59eaf), CONST64(0x59eb7920cbf21992), CONST64(0x1828607850c0e848), CONST64(0x56fa4513e98a70bf), + CONST64(0xb3c8f6458df1393e), CONST64(0xb0cdfa4a87e92437), CONST64(0x246c90b4d83d51fc), CONST64(0x206080a0c01d7de0), + CONST64(0xb2cbf2408bf93239), CONST64(0x92ab72e04be44fd9), CONST64(0xa3f8b615ed71894e), CONST64(0xc05d27e7ba4e137a), + CONST64(0x44cc0d49851ad6c1), CONST64(0x62a695f751379133), CONST64(0x103040506080b070), CONST64(0xb4c1ea5e9fc9082b), + CONST64(0x84912aae3f54c5bb), CONST64(0x43c511529722e7d4), CONST64(0x93a876e54dec44de), CONST64(0xc25b2fedb65e0574), + CONST64(0x4ade357fa16ab4eb), CONST64(0xbddace73a9815b14), CONST64(0x8f8c0689050c808a), CONST64(0x2d77b499ee7502c3), + CONST64(0xbcd9ca76af895013), CONST64(0x9cb94ad66f942df3), CONST64(0x6abeb5df6177c90b), CONST64(0x40c01d5d9d3afadd), + CONST64(0xcf4c1bd498367a57), CONST64(0xa2fbb210eb798249), CONST64(0x809d3aba2774e9a7), CONST64(0x4fd1216ebf4293f0), + CONST64(0x1f217c6342f8d95d), CONST64(0xca430fc5861e5d4c), CONST64(0xaae39238db39da71), CONST64(0x42c61557912aecd3), +}; + +static const ulong64 T1[256] = { + CONST64(0xd3ba68d2b9bb016a), CONST64(0xfc54194d9ae5b166), CONST64(0x712f93bc65e2cd14), CONST64(0x9c74b9cd8725511b), + CONST64(0xf5530251a2f7a457), CONST64(0x68d3b86bd6d003be), CONST64(0x6bd2bd6fded604b5), CONST64(0xd74d642952b3fe85), + CONST64(0xf0500d5dbafdad4a), CONST64(0xe9ac268a09cf63e0), CONST64(0x8a8d830e1c098496), CONST64(0xdcbf79c691a51a4d), + CONST64(0x9070addda73d4d37), CONST64(0xf6520755aaf1a35c), CONST64(0xb39ac852a47be117), CONST64(0xd44c612d5ab5f98e), + CONST64(0x23ea658f0346ac20), CONST64(0x62d5a673e6c41184), CONST64(0xa497f166cc55c268), CONST64(0x6ed1b263c6dc0da8), + CONST64(0x5533ffcc85aa99d0), CONST64(0xf3510859b2fbaa41), CONST64(0xed5b2a71e2c79c0f), CONST64(0xf7a604a259f355ae), + CONST64(0x7fde815fbefe20c1), CONST64(0xd848753d7aade5a2), CONST64(0xe5a8329a29d77fcc), CONST64(0xb699c75ebc71e80a), + CONST64(0x70db904b96e03be6), CONST64(0x5632fac88dac9edb), CONST64(0xc4b751e6d1952215), CONST64(0x19fc2bd7b332ceaa), + CONST64(0x38e348ab4b709373), CONST64(0xbf9edc428463fd3b), CONST64(0xae91ef7efc41d052), CONST64(0xb09bcd56ac7de61c), + CONST64(0x3be24daf43769478), CONST64(0xd0bb6dd6b1bd0661), CONST64(0xc3415819329bdaf1), CONST64(0xb26ecba5577917e5), + CONST64(0xf2a50bae41f95cb3), CONST64(0x40cbc00b16804b56), CONST64(0xbd6bdab17f670cc2), CONST64(0xa295fb6edc59cc7e), + CONST64(0xfea11fbe61e1409f), CONST64(0x08f318ebcb10e3c3), CONST64(0xceb14ffee181302f), CONST64(0x06020a08100c0e16), + CONST64(0x49ccdb172e925e67), CONST64(0x51c4f3376ea2663f), CONST64(0x271d6974e84e53cf), CONST64(0x3c144450a0786c9c), + CONST64(0x58c3e82b56b0730e), CONST64(0xa563f2913f57349a), CONST64(0x73da954f9ee63ced), CONST64(0xe75d3469d2d38e35), + CONST64(0xe15f3e61c2df8023), CONST64(0x79dc8b57aef22ed7), CONST64(0x877d94e9cf136e48), CONST64(0x4acdde132694596c), + CONST64(0x817f9ee1df1f605e), CONST64(0xee5a2f75eac19b04), CONST64(0xb46cc1ad477519f3), CONST64(0xe45c316ddad5893e), + CONST64(0x04f70cfbeb08ffef), CONST64(0x6a26be982dd4f247), CONST64(0x1cff24dbab38c7b7), CONST64(0x2aed7e933b54b911), + CONST64(0x25e86f87134aa236), CONST64(0xba9dd34e9c69f426), CONST64(0xb16fcea15f7f10ee), CONST64(0x8f8e8c0204038d8b), + CONST64(0x2b197d64c8564fe3), CONST64(0xfda01aba69e74794), CONST64(0x0df017e7d31aeade), CONST64(0x8689971e3c1198ba), + CONST64(0x110f333c78222d69), CONST64(0x09071b1c38121531), CONST64(0xecaf298611c56afd), CONST64(0x10fb30cb8b20db9b), + CONST64(0x1808282040303858), CONST64(0x3f154154a87e6b97), CONST64(0x170d3934682e237f), CONST64(0x0c04141020181c2c), + CONST64(0x030105040806070b), CONST64(0xac64e98d074521ab), CONST64(0x7cdf845bb6f827ca), CONST64(0x9a76b3c597295f0d), + CONST64(0x8b7980f9ef0b7264), CONST64(0x7add8e53a6f429dc), CONST64(0x473dc9f4f58eb3b2), CONST64(0x3a164e58b074628a), + CONST64(0x413fc3fce582bda4), CONST64(0x5937ebdca5b285fc), CONST64(0xb76dc4a94f731ef8), CONST64(0x4838d8e0dd90a895), + CONST64(0xd6b967dea1b10877), CONST64(0x9573a2d1bf37442a), CONST64(0x26e96a831b4ca53d), CONST64(0x5f35e1d4b5be8bea), + CONST64(0xff551c4992e3b66d), CONST64(0x9371a8d9af3b4a3c), CONST64(0x8d7b8af1ff077c72), CONST64(0x898c860a140f839d), + CONST64(0x9672a7d5b7314321), CONST64(0x8588921a34179fb1), CONST64(0x07f609ffe30ef8e4), CONST64(0x7e2a82a84dfcd633), + CONST64(0x423ec6f8ed84baaf), CONST64(0xe25e3b65cad98728), CONST64(0x6927bb9c25d2f54c), CONST64(0xca4643050a89cfc0), + CONST64(0x140c3c3060282474), CONST64(0xaf65ec890f4326a0), CONST64(0xb868d5bd676d05df), CONST64(0xa361f8992f5b3a8c), + CONST64(0x05030f0c180a091d), CONST64(0x5ec1e22346bc7d18), CONST64(0xf957164182efb87b), CONST64(0x67d6a97ffece1899), + CONST64(0x76d99a4386ec35f0), CONST64(0xe858257dfacd9512), CONST64(0x75d89f478eea32fb), CONST64(0xaa66e38517492fbd), + CONST64(0x64d7ac7bf6c81f92), CONST64(0x4e3ad2e8cd9ca683), CONST64(0x45c8cf070e8a424b), CONST64(0x443cccf0fd88b4b9), + CONST64(0x13fa35cf8326dc90), CONST64(0xa796f462c453c563), CONST64(0xf4a701a651f552a5), CONST64(0xb598c25ab477ef01), + CONST64(0x29ec7b973352be1a), CONST64(0xd5b862daa9b70f7c), CONST64(0x54c7fc3b76a86f22), CONST64(0xefae2c8219c36df6), + CONST64(0xbb69d0b96f6b02d4), CONST64(0xdd4b7a3162a7ecbf), CONST64(0xe0ab3d9631dd76d1), CONST64(0xe6a9379e21d178c7), + CONST64(0xa967e6811f4f28b6), CONST64(0x1e0a2228503c364e), CONST64(0xc9474601028fc8cb), CONST64(0x0bf21defc316e4c8), + CONST64(0xc2b55beec1992c03), CONST64(0x6622aa880dccee6b), CONST64(0x32e556b37b648149), CONST64(0x2fee719f235eb00c), + CONST64(0xdfbe7cc299a31d46), CONST64(0x7d2b87ac45fad138), CONST64(0x9e81bf3e7c21a0e2), CONST64(0x36125a48906c7ea6), + CONST64(0x9883b5366c2daef4), CONST64(0x2d1b776cd85a41f5), CONST64(0x120e363870242a62), CONST64(0x6523af8c05cae960), + CONST64(0x02f506f3fb04f1f9), CONST64(0xcf454c091283c6dd), CONST64(0x6321a58415c6e776), CONST64(0x4fced11f3e9e5071), + CONST64(0xdb49703972abe2a9), CONST64(0x742c9cb07de8c409), CONST64(0x16f93ac39b2cd58d), CONST64(0x37e659bf636e8854), + CONST64(0xc7b654e2d993251e), CONST64(0x782888a05df0d825), CONST64(0x39174b5cb8726581), CONST64(0x9b82b032642ba9ff), + CONST64(0x2e1a7268d05c46fe), CONST64(0x808b9d162c1d96ac), CONST64(0x1ffe21dfa33ec0bc), CONST64(0x838a9812241b91a7), + CONST64(0x1b092d2448363f53), CONST64(0x46c9ca03068c4540), CONST64(0x9487a1264c35b2d8), CONST64(0xd24e6b254ab9f798), + CONST64(0x3ee142a35b7c9d65), CONST64(0x722e96b86de4ca1f), CONST64(0x31e453b773628642), CONST64(0x3de047a7537a9a6e), + CONST64(0x20eb608b0b40ab2b), CONST64(0xad90ea7af447d759), CONST64(0xf1a40eaa49ff5bb8), CONST64(0x221e6678f0445ad2), + CONST64(0x9285ab2e5c39bcce), CONST64(0xa060fd9d275d3d87), CONST64(0x0000000000000000), CONST64(0x6f25b19435defb5a), + CONST64(0x01f403f7f302f6f2), CONST64(0x0ef112e3db1cedd5), CONST64(0xa194fe6ad45fcb75), CONST64(0x1d0b272c583a3145), + CONST64(0x34e75cbb6b688f5f), CONST64(0x9f75bcc98f235610), CONST64(0x2cef749b2b58b707), CONST64(0x5c34e4d0bdb88ce1), + CONST64(0x5331f5c495a697c6), CONST64(0x61d4a377eec2168f), CONST64(0x6dd0b767ceda0aa3), CONST64(0x9786a4224433b5d3), + CONST64(0x827e9be5d7196755), CONST64(0xeaad238e01c964eb), CONST64(0x1afd2ed3bb34c9a1), CONST64(0x7b298da455f6df2e), + CONST64(0x5030f0c09da090cd), CONST64(0x4d3bd7ecc59aa188), CONST64(0xbc9fd9468c65fa30), CONST64(0x15f83fc7932ad286), + CONST64(0x57c6f93f7eae6829), CONST64(0x35135f4c986a79ad), CONST64(0x0a061e183014123a), CONST64(0x0f051114281e1b27), + CONST64(0x52c5f63366a46134), CONST64(0x33115544886677bb), CONST64(0x9977b6c19f2f5806), CONST64(0x847c91edc7156943), + CONST64(0x8e7a8ff5f7017b79), CONST64(0x887885fde70d756f), CONST64(0x5a36eed8adb482f7), CONST64(0x241c6c70e04854c4), + CONST64(0x4b39dde4d596af9e), CONST64(0xeb592079f2cb9219), CONST64(0x28187860c05048e8), CONST64(0xfa5613458ae9bf70), + CONST64(0xc8b345f6f18d3e39), CONST64(0xcdb04afae9873724), CONST64(0x6c24b4903dd8fc51), CONST64(0x6020a0801dc0e07d), + CONST64(0xcbb240f2f98b3932), CONST64(0xab92e072e44bd94f), CONST64(0xf8a315b671ed4e89), CONST64(0x5dc0e7274eba7a13), + CONST64(0xcc44490d1a85c1d6), CONST64(0xa662f79537513391), CONST64(0x30105040806070b0), CONST64(0xc1b45eeac99f2b08), + CONST64(0x9184ae2a543fbbc5), CONST64(0xc54352112297d4e7), CONST64(0xa893e576ec4dde44), CONST64(0x5bc2ed2f5eb67405), + CONST64(0xde4a7f356aa1ebb4), CONST64(0xdabd73ce81a9145b), CONST64(0x8c8f89060c058a80), CONST64(0x772d99b475eec302), + CONST64(0xd9bc76ca89af1350), CONST64(0xb99cd64a946ff32d), CONST64(0xbe6adfb577610bc9), CONST64(0xc0405d1d3a9dddfa), + CONST64(0x4ccfd41b3698577a), CONST64(0xfba210b279eb4982), CONST64(0x9d80ba3a7427a7e9), CONST64(0xd14f6e2142bff093), + CONST64(0x211f637cf8425dd9), CONST64(0x43cac50f1e864c5d), CONST64(0xe3aa389239db71da), CONST64(0xc64257152a91d3ec), +}; + +static const ulong64 T2[256] = { + CONST64(0xd268bad36a01bbb9), CONST64(0x4d1954fc66b1e59a), CONST64(0xbc932f7114cde265), CONST64(0xcdb9749c1b512587), + CONST64(0x510253f557a4f7a2), CONST64(0x6bb8d368be03d0d6), CONST64(0x6fbdd26bb504d6de), CONST64(0x29644dd785feb352), + CONST64(0x5d0d50f04aadfdba), CONST64(0x8a26ace9e063cf09), CONST64(0x0e838d8a9684091c), CONST64(0xc679bfdc4d1aa591), + CONST64(0xddad7090374d3da7), CONST64(0x550752f65ca3f1aa), CONST64(0x52c89ab317e17ba4), CONST64(0x2d614cd48ef9b55a), + CONST64(0x8f65ea2320ac4603), CONST64(0x73a6d5628411c4e6), CONST64(0x66f197a468c255cc), CONST64(0x63b2d16ea80ddcc6), + CONST64(0xccff3355d099aa85), CONST64(0x590851f341aafbb2), CONST64(0x712a5bed0f9cc7e2), CONST64(0xa204a6f7ae55f359), + CONST64(0x5f81de7fc120febe), CONST64(0x3d7548d8a2e5ad7a), CONST64(0x9a32a8e5cc7fd729), CONST64(0x5ec799b60ae871bc), + CONST64(0x4b90db70e63be096), CONST64(0xc8fa3256db9eac8d), CONST64(0xe651b7c4152295d1), CONST64(0xd72bfc19aace32b3), + CONST64(0xab48e3387393704b), CONST64(0x42dc9ebf3bfd6384), CONST64(0x7eef91ae52d041fc), CONST64(0x56cd9bb01ce67dac), + CONST64(0xaf4de23b78947643), CONST64(0xd66dbbd06106bdb1), CONST64(0x195841c3f1da9b32), CONST64(0xa5cb6eb2e5177957), + CONST64(0xae0ba5f2b35cf941), CONST64(0x0bc0cb40564b8016), CONST64(0xb1da6bbdc20c677f), CONST64(0x6efb95a27ecc59dc), + CONST64(0xbe1fa1fe9f40e161), CONST64(0xeb18f308c3e310cb), CONST64(0xfe4fb1ce2f3081e1), CONST64(0x080a0206160e0c10), + CONST64(0x17dbcc49675e922e), CONST64(0x37f3c4513f66a26e), CONST64(0x74691d27cf534ee8), CONST64(0x5044143c9c6c78a0), + CONST64(0x2be8c3580e73b056), CONST64(0x91f263a59a34573f), CONST64(0x4f95da73ed3ce69e), CONST64(0x69345de7358ed3d2), + CONST64(0x613e5fe12380dfc2), CONST64(0x578bdc79d72ef2ae), CONST64(0xe9947d87486e13cf), CONST64(0x13decd4a6c599426), + CONST64(0xe19e7f815e601fdf), CONST64(0x752f5aee049bc1ea), CONST64(0xadc16cb4f3197547), CONST64(0x6d315ce43e89d5da), + CONST64(0xfb0cf704efff08eb), CONST64(0x98be266a47f2d42d), CONST64(0xdb24ff1cb7c738ab), CONST64(0x937eed2a11b9543b), + CONST64(0x876fe82536a24a13), CONST64(0x4ed39dba26f4699c), CONST64(0xa1ce6fb1ee107f5f), CONST64(0x028c8e8f8b8d0304), + CONST64(0x647d192be34f56c8), CONST64(0xba1aa0fd9447e769), CONST64(0xe717f00ddeea1ad3), CONST64(0x1e978986ba98113c), + CONST64(0x3c330f11692d2278), CONST64(0x1c1b070931151238), CONST64(0x8629afecfd6ac511), CONST64(0xcb30fb109bdb208b), + CONST64(0x2028081858383040), CONST64(0x5441153f976b7ea8), CONST64(0x34390d177f232e68), CONST64(0x1014040c2c1c1820), + CONST64(0x040501030b070608), CONST64(0x8de964acab214507), CONST64(0x5b84df7cca27f8b6), CONST64(0xc5b3769a0d5f2997), + CONST64(0xf980798b64720bef), CONST64(0x538edd7adc29f4a6), CONST64(0xf4c93d47b2b38ef5), CONST64(0x584e163a8a6274b0), + CONST64(0xfcc33f41a4bd82e5), CONST64(0xdceb3759fc85b2a5), CONST64(0xa9c46db7f81e734f), CONST64(0xe0d8384895a890dd), + CONST64(0xde67b9d67708b1a1), CONST64(0xd1a273952a4437bf), CONST64(0x836ae9263da54c1b), CONST64(0xd4e1355fea8bbeb5), + CONST64(0x491c55ff6db6e392), CONST64(0xd9a871933c4a3baf), CONST64(0xf18a7b8d727c07ff), CONST64(0x0a868c899d830f14), + CONST64(0xd5a77296214331b7), CONST64(0x1a928885b19f1734), CONST64(0xff09f607e4f80ee3), CONST64(0xa8822a7e33d6fc4d), + CONST64(0xf8c63e42afba84ed), CONST64(0x653b5ee22887d9ca), CONST64(0x9cbb27694cf5d225), CONST64(0x054346cac0cf890a), + CONST64(0x303c0c1474242860), CONST64(0x89ec65afa026430f), CONST64(0xbdd568b8df056d67), CONST64(0x99f861a38c3a5b2f), + CONST64(0x0c0f03051d090a18), CONST64(0x23e2c15e187dbc46), CONST64(0x411657f97bb8ef82), CONST64(0x7fa9d6679918cefe), + CONST64(0x439ad976f035ec86), CONST64(0x7d2558e81295cdfa), CONST64(0x479fd875fb32ea8e), CONST64(0x85e366aabd2f4917), + CONST64(0x7bacd764921fc8f6), CONST64(0xe8d23a4e83a69ccd), CONST64(0x07cfc8454b428a0e), CONST64(0xf0cc3c44b9b488fd), + CONST64(0xcf35fa1390dc2683), CONST64(0x62f496a763c553c4), CONST64(0xa601a7f4a552f551), CONST64(0x5ac298b501ef77b4), + CONST64(0x977bec291abe5233), CONST64(0xda62b8d57c0fb7a9), CONST64(0x3bfcc754226fa876), CONST64(0x822caeeff66dc319), + CONST64(0xb9d069bbd4026b6f), CONST64(0x317a4bddbfeca762), CONST64(0x963dabe0d176dd31), CONST64(0x9e37a9e6c778d121), + CONST64(0x81e667a9b6284f1f), CONST64(0x28220a1e4e363c50), CONST64(0x014647c9cbc88f02), CONST64(0xef1df20bc8e416c3), + CONST64(0xee5bb5c2032c99c1), CONST64(0x88aa22666beecc0d), CONST64(0xb356e5324981647b), CONST64(0x9f71ee2f0cb05e23), + CONST64(0xc27cbedf461da399), CONST64(0xac872b7d38d1fa45), CONST64(0x3ebf819ee2a0217c), CONST64(0x485a1236a67e6c90), + CONST64(0x36b58398f4ae2d6c), CONST64(0x6c771b2df5415ad8), CONST64(0x38360e12622a2470), CONST64(0x8caf236560e9ca05), + CONST64(0xf306f502f9f104fb), CONST64(0x094c45cfddc68312), CONST64(0x84a5216376e7c615), CONST64(0x1fd1ce4f71509e3e), + CONST64(0x397049dba9e2ab72), CONST64(0xb09c2c7409c4e87d), CONST64(0xc33af9168dd52c9b), CONST64(0xbf59e63754886e63), + CONST64(0xe254b6c71e2593d9), CONST64(0xa088287825d8f05d), CONST64(0x5c4b1739816572b8), CONST64(0x32b0829bffa92b64), + CONST64(0x68721a2efe465cd0), CONST64(0x169d8b80ac961d2c), CONST64(0xdf21fe1fbcc03ea3), CONST64(0x12988a83a7911b24), + CONST64(0x242d091b533f3648), CONST64(0x03cac94640458c06), CONST64(0x26a18794d8b2354c), CONST64(0x256b4ed298f7b94a), + CONST64(0xa342e13e659d7c5b), CONST64(0xb8962e721fcae46d), CONST64(0xb753e43142866273), CONST64(0xa747e03d6e9a7a53), + CONST64(0x8b60eb202bab400b), CONST64(0x7aea90ad59d747f4), CONST64(0xaa0ea4f1b85bff49), CONST64(0x78661e22d25a44f0), + CONST64(0x2eab8592cebc395c), CONST64(0x9dfd60a0873d5d27), CONST64(0x0000000000000000), CONST64(0x94b1256f5afbde35), + CONST64(0xf703f401f2f602f3), CONST64(0xe312f10ed5ed1cdb), CONST64(0x6afe94a175cb5fd4), CONST64(0x2c270b1d45313a58), + CONST64(0xbb5ce7345f8f686b), CONST64(0xc9bc759f1056238f), CONST64(0x9b74ef2c07b7582b), CONST64(0xd0e4345ce18cb8bd), + CONST64(0xc4f53153c697a695), CONST64(0x77a3d4618f16c2ee), CONST64(0x67b7d06da30adace), CONST64(0x22a48697d3b53344), + CONST64(0xe59b7e82556719d7), CONST64(0x8e23adeaeb64c901), CONST64(0xd32efd1aa1c934bb), CONST64(0xa48d297b2edff655), + CONST64(0xc0f03050cd90a09d), CONST64(0xecd73b4d88a19ac5), CONST64(0x46d99fbc30fa658c), CONST64(0xc73ff81586d22a93), + CONST64(0x3ff9c6572968ae7e), CONST64(0x4c5f1335ad796a98), CONST64(0x181e060a3a121430), CONST64(0x1411050f271b1e28), + CONST64(0x33f6c5523461a466), CONST64(0x44551133bb776688), CONST64(0xc1b6779906582f9f), CONST64(0xed917c84436915c7), + CONST64(0xf58f7a8e797b01f7), CONST64(0xfd8578886f750de7), CONST64(0xd8ee365af782b4ad), CONST64(0x706c1c24c45448e0), + CONST64(0xe4dd394b9eaf96d5), CONST64(0x792059eb1992cbf2), CONST64(0x60781828e84850c0), CONST64(0x451356fa70bfe98a), + CONST64(0xf645b3c8393e8df1), CONST64(0xfa4ab0cd243787e9), CONST64(0x90b4246c51fcd83d), CONST64(0x80a020607de0c01d), + CONST64(0xf240b2cb32398bf9), CONST64(0x72e092ab4fd94be4), CONST64(0xb615a3f8894eed71), CONST64(0x27e7c05d137aba4e), + CONST64(0x0d4944ccd6c1851a), CONST64(0x95f762a691335137), CONST64(0x40501030b0706080), CONST64(0xea5eb4c1082b9fc9), + CONST64(0x2aae8491c5bb3f54), CONST64(0x115243c5e7d49722), CONST64(0x76e593a844de4dec), CONST64(0x2fedc25b0574b65e), + CONST64(0x357f4adeb4eba16a), CONST64(0xce73bdda5b14a981), CONST64(0x06898f8c808a050c), CONST64(0xb4992d7702c3ee75), + CONST64(0xca76bcd95013af89), CONST64(0x4ad69cb92df36f94), CONST64(0xb5df6abec90b6177), CONST64(0x1d5d40c0fadd9d3a), + CONST64(0x1bd4cf4c7a579836), CONST64(0xb210a2fb8249eb79), CONST64(0x3aba809de9a72774), CONST64(0x216e4fd193f0bf42), + CONST64(0x7c631f21d95d42f8), CONST64(0x0fc5ca435d4c861e), CONST64(0x9238aae3da71db39), CONST64(0x155742c6ecd3912a), +}; + +static const ulong64 T3[256] = { + CONST64(0x68d2d3ba016ab9bb), CONST64(0x194dfc54b1669ae5), CONST64(0x93bc712fcd1465e2), CONST64(0xb9cd9c74511b8725), + CONST64(0x0251f553a457a2f7), CONST64(0xb86b68d303bed6d0), CONST64(0xbd6f6bd204b5ded6), CONST64(0x6429d74dfe8552b3), + CONST64(0x0d5df050ad4abafd), CONST64(0x268ae9ac63e009cf), CONST64(0x830e8a8d84961c09), CONST64(0x79c6dcbf1a4d91a5), + CONST64(0xaddd90704d37a73d), CONST64(0x0755f652a35caaf1), CONST64(0xc852b39ae117a47b), CONST64(0x612dd44cf98e5ab5), + CONST64(0x658f23eaac200346), CONST64(0xa67362d51184e6c4), CONST64(0xf166a497c268cc55), CONST64(0xb2636ed10da8c6dc), + CONST64(0xffcc553399d085aa), CONST64(0x0859f351aa41b2fb), CONST64(0x2a71ed5b9c0fe2c7), CONST64(0x04a2f7a655ae59f3), + CONST64(0x815f7fde20c1befe), CONST64(0x753dd848e5a27aad), CONST64(0x329ae5a87fcc29d7), CONST64(0xc75eb699e80abc71), + CONST64(0x904b70db3be696e0), CONST64(0xfac856329edb8dac), CONST64(0x51e6c4b72215d195), CONST64(0x2bd719fcceaab332), + CONST64(0x48ab38e393734b70), CONST64(0xdc42bf9efd3b8463), CONST64(0xef7eae91d052fc41), CONST64(0xcd56b09be61cac7d), + CONST64(0x4daf3be294784376), CONST64(0x6dd6d0bb0661b1bd), CONST64(0x5819c341daf1329b), CONST64(0xcba5b26e17e55779), + CONST64(0x0baef2a55cb341f9), CONST64(0xc00b40cb4b561680), CONST64(0xdab1bd6b0cc27f67), CONST64(0xfb6ea295cc7edc59), + CONST64(0x1fbefea1409f61e1), CONST64(0x18eb08f3e3c3cb10), CONST64(0x4ffeceb1302fe181), CONST64(0x0a0806020e16100c), + CONST64(0xdb1749cc5e672e92), CONST64(0xf33751c4663f6ea2), CONST64(0x6974271d53cfe84e), CONST64(0x44503c146c9ca078), + CONST64(0xe82b58c3730e56b0), CONST64(0xf291a563349a3f57), CONST64(0x954f73da3ced9ee6), CONST64(0x3469e75d8e35d2d3), + CONST64(0x3e61e15f8023c2df), CONST64(0x8b5779dc2ed7aef2), CONST64(0x94e9877d6e48cf13), CONST64(0xde134acd596c2694), + CONST64(0x9ee1817f605edf1f), CONST64(0x2f75ee5a9b04eac1), CONST64(0xc1adb46c19f34775), CONST64(0x316de45c893edad5), + CONST64(0x0cfb04f7ffefeb08), CONST64(0xbe986a26f2472dd4), CONST64(0x24db1cffc7b7ab38), CONST64(0x7e932aedb9113b54), + CONST64(0x6f8725e8a236134a), CONST64(0xd34eba9df4269c69), CONST64(0xcea1b16f10ee5f7f), CONST64(0x8c028f8e8d8b0403), + CONST64(0x7d642b194fe3c856), CONST64(0x1abafda0479469e7), CONST64(0x17e70df0eaded31a), CONST64(0x971e868998ba3c11), + CONST64(0x333c110f2d697822), CONST64(0x1b1c090715313812), CONST64(0x2986ecaf6afd11c5), CONST64(0x30cb10fbdb9b8b20), + CONST64(0x2820180838584030), CONST64(0x41543f156b97a87e), CONST64(0x3934170d237f682e), CONST64(0x14100c041c2c2018), + CONST64(0x05040301070b0806), CONST64(0xe98dac6421ab0745), CONST64(0x845b7cdf27cab6f8), CONST64(0xb3c59a765f0d9729), + CONST64(0x80f98b797264ef0b), CONST64(0x8e537add29dca6f4), CONST64(0xc9f4473db3b2f58e), CONST64(0x4e583a16628ab074), + CONST64(0xc3fc413fbda4e582), CONST64(0xebdc593785fca5b2), CONST64(0xc4a9b76d1ef84f73), CONST64(0xd8e04838a895dd90), + CONST64(0x67ded6b90877a1b1), CONST64(0xa2d19573442abf37), CONST64(0x6a8326e9a53d1b4c), CONST64(0xe1d45f358beab5be), + CONST64(0x1c49ff55b66d92e3), CONST64(0xa8d993714a3caf3b), CONST64(0x8af18d7b7c72ff07), CONST64(0x860a898c839d140f), + CONST64(0xa7d596724321b731), CONST64(0x921a85889fb13417), CONST64(0x09ff07f6f8e4e30e), CONST64(0x82a87e2ad6334dfc), + CONST64(0xc6f8423ebaafed84), CONST64(0x3b65e25e8728cad9), CONST64(0xbb9c6927f54c25d2), CONST64(0x4305ca46cfc00a89), + CONST64(0x3c30140c24746028), CONST64(0xec89af6526a00f43), CONST64(0xd5bdb86805df676d), CONST64(0xf899a3613a8c2f5b), + CONST64(0x0f0c0503091d180a), CONST64(0xe2235ec17d1846bc), CONST64(0x1641f957b87b82ef), CONST64(0xa97f67d61899fece), + CONST64(0x9a4376d935f086ec), CONST64(0x257de8589512facd), CONST64(0x9f4775d832fb8eea), CONST64(0xe385aa662fbd1749), + CONST64(0xac7b64d71f92f6c8), CONST64(0xd2e84e3aa683cd9c), CONST64(0xcf0745c8424b0e8a), CONST64(0xccf0443cb4b9fd88), + CONST64(0x35cf13fadc908326), CONST64(0xf462a796c563c453), CONST64(0x01a6f4a752a551f5), CONST64(0xc25ab598ef01b477), + CONST64(0x7b9729ecbe1a3352), CONST64(0x62dad5b80f7ca9b7), CONST64(0xfc3b54c76f2276a8), CONST64(0x2c82efae6df619c3), + CONST64(0xd0b9bb6902d46f6b), CONST64(0x7a31dd4becbf62a7), CONST64(0x3d96e0ab76d131dd), CONST64(0x379ee6a978c721d1), + CONST64(0xe681a96728b61f4f), CONST64(0x22281e0a364e503c), CONST64(0x4601c947c8cb028f), CONST64(0x1def0bf2e4c8c316), + CONST64(0x5beec2b52c03c199), CONST64(0xaa886622ee6b0dcc), CONST64(0x56b332e581497b64), CONST64(0x719f2feeb00c235e), + CONST64(0x7cc2dfbe1d4699a3), CONST64(0x87ac7d2bd13845fa), CONST64(0xbf3e9e81a0e27c21), CONST64(0x5a4836127ea6906c), + CONST64(0xb5369883aef46c2d), CONST64(0x776c2d1b41f5d85a), CONST64(0x3638120e2a627024), CONST64(0xaf8c6523e96005ca), + CONST64(0x06f302f5f1f9fb04), CONST64(0x4c09cf45c6dd1283), CONST64(0xa5846321e77615c6), CONST64(0xd11f4fce50713e9e), + CONST64(0x7039db49e2a972ab), CONST64(0x9cb0742cc4097de8), CONST64(0x3ac316f9d58d9b2c), CONST64(0x59bf37e68854636e), + CONST64(0x54e2c7b6251ed993), CONST64(0x88a07828d8255df0), CONST64(0x4b5c39176581b872), CONST64(0xb0329b82a9ff642b), + CONST64(0x72682e1a46fed05c), CONST64(0x9d16808b96ac2c1d), CONST64(0x21df1ffec0bca33e), CONST64(0x9812838a91a7241b), + CONST64(0x2d241b093f534836), CONST64(0xca0346c94540068c), CONST64(0xa1269487b2d84c35), CONST64(0x6b25d24ef7984ab9), + CONST64(0x42a33ee19d655b7c), CONST64(0x96b8722eca1f6de4), CONST64(0x53b731e486427362), CONST64(0x47a73de09a6e537a), + CONST64(0x608b20ebab2b0b40), CONST64(0xea7aad90d759f447), CONST64(0x0eaaf1a45bb849ff), CONST64(0x6678221e5ad2f044), + CONST64(0xab2e9285bcce5c39), CONST64(0xfd9da0603d87275d), CONST64(0x0000000000000000), CONST64(0xb1946f25fb5a35de), + CONST64(0x03f701f4f6f2f302), CONST64(0x12e30ef1edd5db1c), CONST64(0xfe6aa194cb75d45f), CONST64(0x272c1d0b3145583a), + CONST64(0x5cbb34e78f5f6b68), CONST64(0xbcc99f7556108f23), CONST64(0x749b2cefb7072b58), CONST64(0xe4d05c348ce1bdb8), + CONST64(0xf5c4533197c695a6), CONST64(0xa37761d4168feec2), CONST64(0xb7676dd00aa3ceda), CONST64(0xa4229786b5d34433), + CONST64(0x9be5827e6755d719), CONST64(0x238eeaad64eb01c9), CONST64(0x2ed31afdc9a1bb34), CONST64(0x8da47b29df2e55f6), + CONST64(0xf0c0503090cd9da0), CONST64(0xd7ec4d3ba188c59a), CONST64(0xd946bc9ffa308c65), CONST64(0x3fc715f8d286932a), + CONST64(0xf93f57c668297eae), CONST64(0x5f4c351379ad986a), CONST64(0x1e180a06123a3014), CONST64(0x11140f051b27281e), + CONST64(0xf63352c5613466a4), CONST64(0x5544331177bb8866), CONST64(0xb6c1997758069f2f), CONST64(0x91ed847c6943c715), + CONST64(0x8ff58e7a7b79f701), CONST64(0x85fd8878756fe70d), CONST64(0xeed85a3682f7adb4), CONST64(0x6c70241c54c4e048), + CONST64(0xdde44b39af9ed596), CONST64(0x2079eb599219f2cb), CONST64(0x7860281848e8c050), CONST64(0x1345fa56bf708ae9), + CONST64(0x45f6c8b33e39f18d), CONST64(0x4afacdb03724e987), CONST64(0xb4906c24fc513dd8), CONST64(0xa0806020e07d1dc0), + CONST64(0x40f2cbb23932f98b), CONST64(0xe072ab92d94fe44b), CONST64(0x15b6f8a34e8971ed), CONST64(0xe7275dc07a134eba), + CONST64(0x490dcc44c1d61a85), CONST64(0xf795a66233913751), CONST64(0x5040301070b08060), CONST64(0x5eeac1b42b08c99f), + CONST64(0xae2a9184bbc5543f), CONST64(0x5211c543d4e72297), CONST64(0xe576a893de44ec4d), CONST64(0xed2f5bc274055eb6), + CONST64(0x7f35de4aebb46aa1), CONST64(0x73cedabd145b81a9), CONST64(0x89068c8f8a800c05), CONST64(0x99b4772dc30275ee), + CONST64(0x76cad9bc135089af), CONST64(0xd64ab99cf32d946f), CONST64(0xdfb5be6a0bc97761), CONST64(0x5d1dc040ddfa3a9d), + CONST64(0xd41b4ccf577a3698), CONST64(0x10b2fba2498279eb), CONST64(0xba3a9d80a7e97427), CONST64(0x6e21d14ff09342bf), + CONST64(0x637c211f5dd9f842), CONST64(0xc50f43ca4c5d1e86), CONST64(0x3892e3aa71da39db), CONST64(0x5715c642d3ec2a91), +}; + +static const ulong64 T4[256] = { + CONST64(0xbbb96a01bad3d268), CONST64(0xe59a66b154fc4d19), CONST64(0xe26514cd2f71bc93), CONST64(0x25871b51749ccdb9), + CONST64(0xf7a257a453f55102), CONST64(0xd0d6be03d3686bb8), CONST64(0xd6deb504d26b6fbd), CONST64(0xb35285fe4dd72964), + CONST64(0xfdba4aad50f05d0d), CONST64(0xcf09e063ace98a26), CONST64(0x091c96848d8a0e83), CONST64(0xa5914d1abfdcc679), + CONST64(0x3da7374d7090ddad), CONST64(0xf1aa5ca352f65507), CONST64(0x7ba417e19ab352c8), CONST64(0xb55a8ef94cd42d61), + CONST64(0x460320acea238f65), CONST64(0xc4e68411d56273a6), CONST64(0x55cc68c297a466f1), CONST64(0xdcc6a80dd16e63b2), + CONST64(0xaa85d0993355ccff), CONST64(0xfbb241aa51f35908), CONST64(0xc7e20f9c5bed712a), CONST64(0xf359ae55a6f7a204), + CONST64(0xfebec120de7f5f81), CONST64(0xad7aa2e548d83d75), CONST64(0xd729cc7fa8e59a32), CONST64(0x71bc0ae899b65ec7), + CONST64(0xe096e63bdb704b90), CONST64(0xac8ddb9e3256c8fa), CONST64(0x95d11522b7c4e651), CONST64(0x32b3aacefc19d72b), + CONST64(0x704b7393e338ab48), CONST64(0x63843bfd9ebf42dc), CONST64(0x41fc52d091ae7eef), CONST64(0x7dac1ce69bb056cd), + CONST64(0x76437894e23baf4d), CONST64(0xbdb16106bbd0d66d), CONST64(0x9b32f1da41c31958), CONST64(0x7957e5176eb2a5cb), + CONST64(0xf941b35ca5f2ae0b), CONST64(0x8016564bcb400bc0), CONST64(0x677fc20c6bbdb1da), CONST64(0x59dc7ecc95a26efb), + CONST64(0xe1619f40a1febe1f), CONST64(0x10cbc3e3f308eb18), CONST64(0x81e12f30b1cefe4f), CONST64(0x0c10160e0206080a), + CONST64(0x922e675ecc4917db), CONST64(0xa26e3f66c45137f3), CONST64(0x4ee8cf531d277469), CONST64(0x78a09c6c143c5044), + CONST64(0xb0560e73c3582be8), CONST64(0x573f9a3463a591f2), CONST64(0xe69eed3cda734f95), CONST64(0xd3d2358e5de76934), + CONST64(0xdfc223805fe1613e), CONST64(0xf2aed72edc79578b), CONST64(0x13cf486e7d87e994), CONST64(0x94266c59cd4a13de), + CONST64(0x1fdf5e607f81e19e), CONST64(0xc1ea049b5aee752f), CONST64(0x7547f3196cb4adc1), CONST64(0xd5da3e895ce46d31), + CONST64(0x08ebeffff704fb0c), CONST64(0xd42d47f2266a98be), CONST64(0x38abb7c7ff1cdb24), CONST64(0x543b11b9ed2a937e), + CONST64(0x4a1336a2e825876f), CONST64(0x699c26f49dba4ed3), CONST64(0x7f5fee106fb1a1ce), CONST64(0x03048b8d8e8f028c), + CONST64(0x56c8e34f192b647d), CONST64(0xe7699447a0fdba1a), CONST64(0x1ad3deeaf00de717), CONST64(0x113cba9889861e97), + CONST64(0x2278692d0f113c33), CONST64(0x1238311507091c1b), CONST64(0xc511fd6aafec8629), CONST64(0x208b9bdbfb10cb30), + CONST64(0x3040583808182028), CONST64(0x7ea8976b153f5441), CONST64(0x2e687f230d173439), CONST64(0x18202c1c040c1014), + CONST64(0x06080b0701030405), CONST64(0x4507ab2164ac8de9), CONST64(0xf8b6ca27df7c5b84), CONST64(0x29970d5f769ac5b3), + CONST64(0x0bef6472798bf980), CONST64(0xf4a6dc29dd7a538e), CONST64(0x8ef5b2b33d47f4c9), CONST64(0x74b08a62163a584e), + CONST64(0x82e5a4bd3f41fcc3), CONST64(0xb2a5fc853759dceb), CONST64(0x734ff81e6db7a9c4), CONST64(0x90dd95a83848e0d8), + CONST64(0xb1a17708b9d6de67), CONST64(0x37bf2a447395d1a2), CONST64(0x4c1b3da5e926836a), CONST64(0xbeb5ea8b355fd4e1), + CONST64(0xe3926db655ff491c), CONST64(0x3baf3c4a7193d9a8), CONST64(0x07ff727c7b8df18a), CONST64(0x0f149d838c890a86), + CONST64(0x31b721437296d5a7), CONST64(0x1734b19f88851a92), CONST64(0x0ee3e4f8f607ff09), CONST64(0xfc4d33d62a7ea882), + CONST64(0x84edafba3e42f8c6), CONST64(0xd9ca28875ee2653b), CONST64(0xd2254cf527699cbb), CONST64(0x890ac0cf46ca0543), + CONST64(0x286074240c14303c), CONST64(0x430fa02665af89ec), CONST64(0x6d67df0568b8bdd5), CONST64(0x5b2f8c3a61a399f8), + CONST64(0x0a181d0903050c0f), CONST64(0xbc46187dc15e23e2), CONST64(0xef827bb857f94116), CONST64(0xcefe9918d6677fa9), + CONST64(0xec86f035d976439a), CONST64(0xcdfa129558e87d25), CONST64(0xea8efb32d875479f), CONST64(0x4917bd2f66aa85e3), + CONST64(0xc8f6921fd7647bac), CONST64(0x9ccd83a63a4ee8d2), CONST64(0x8a0e4b42c84507cf), CONST64(0x88fdb9b43c44f0cc), + CONST64(0x268390dcfa13cf35), CONST64(0x53c463c596a762f4), CONST64(0xf551a552a7f4a601), CONST64(0x77b401ef98b55ac2), + CONST64(0x52331abeec29977b), CONST64(0xb7a97c0fb8d5da62), CONST64(0xa876226fc7543bfc), CONST64(0xc319f66daeef822c), + CONST64(0x6b6fd40269bbb9d0), CONST64(0xa762bfec4bdd317a), CONST64(0xdd31d176abe0963d), CONST64(0xd121c778a9e69e37), + CONST64(0x4f1fb62867a981e6), CONST64(0x3c504e360a1e2822), CONST64(0x8f02cbc847c90146), CONST64(0x16c3c8e4f20bef1d), + CONST64(0x99c1032cb5c2ee5b), CONST64(0xcc0d6bee226688aa), CONST64(0x647b4981e532b356), CONST64(0x5e230cb0ee2f9f71), + CONST64(0xa399461dbedfc27c), CONST64(0xfa4538d12b7dac87), CONST64(0x217ce2a0819e3ebf), CONST64(0x6c90a67e1236485a), + CONST64(0x2d6cf4ae839836b5), CONST64(0x5ad8f5411b2d6c77), CONST64(0x2470622a0e123836), CONST64(0xca0560e923658caf), + CONST64(0x04fbf9f1f502f306), CONST64(0x8312ddc645cf094c), CONST64(0xc61576e7216384a5), CONST64(0x9e3e7150ce4f1fd1), + CONST64(0xab72a9e249db3970), CONST64(0xe87d09c42c74b09c), CONST64(0x2c9b8dd5f916c33a), CONST64(0x6e635488e637bf59), + CONST64(0x93d91e25b6c7e254), CONST64(0xf05d25d82878a088), CONST64(0x72b8816517395c4b), CONST64(0x2b64ffa9829b32b0), + CONST64(0x5cd0fe461a2e6872), CONST64(0x1d2cac968b80169d), CONST64(0x3ea3bcc0fe1fdf21), CONST64(0x1b24a7918a831298), + CONST64(0x3648533f091b242d), CONST64(0x8c064045c94603ca), CONST64(0x354cd8b2879426a1), CONST64(0xb94a98f74ed2256b), + CONST64(0x7c5b659de13ea342), CONST64(0xe46d1fca2e72b896), CONST64(0x62734286e431b753), CONST64(0x7a536e9ae03da747), + CONST64(0x400b2babeb208b60), CONST64(0x47f459d790ad7aea), CONST64(0xff49b85ba4f1aa0e), CONST64(0x44f0d25a1e227866), + CONST64(0x395ccebc85922eab), CONST64(0x5d27873d60a09dfd), CONST64(0x0000000000000000), CONST64(0xde355afb256f94b1), + CONST64(0x02f3f2f6f401f703), CONST64(0x1cdbd5edf10ee312), CONST64(0x5fd475cb94a16afe), CONST64(0x3a5845310b1d2c27), + CONST64(0x686b5f8fe734bb5c), CONST64(0x238f1056759fc9bc), CONST64(0x582b07b7ef2c9b74), CONST64(0xb8bde18c345cd0e4), + CONST64(0xa695c6973153c4f5), CONST64(0xc2ee8f16d46177a3), CONST64(0xdacea30ad06d67b7), CONST64(0x3344d3b5869722a4), + CONST64(0x19d755677e82e59b), CONST64(0xc901eb64adea8e23), CONST64(0x34bba1c9fd1ad32e), CONST64(0xf6552edf297ba48d), + CONST64(0xa09dcd903050c0f0), CONST64(0x9ac588a13b4decd7), CONST64(0x658c30fa9fbc46d9), CONST64(0x2a9386d2f815c73f), + CONST64(0xae7e2968c6573ff9), CONST64(0x6a98ad7913354c5f), CONST64(0x14303a12060a181e), CONST64(0x1e28271b050f1411), + CONST64(0xa4663461c55233f6), CONST64(0x6688bb7711334455), CONST64(0x2f9f06587799c1b6), CONST64(0x15c743697c84ed91), + CONST64(0x01f7797b7a8ef58f), CONST64(0x0de76f757888fd85), CONST64(0xb4adf782365ad8ee), CONST64(0x48e0c4541c24706c), + CONST64(0x96d59eaf394be4dd), CONST64(0xcbf2199259eb7920), CONST64(0x50c0e84818286078), CONST64(0xe98a70bf56fa4513), + CONST64(0x8df1393eb3c8f645), CONST64(0x87e92437b0cdfa4a), CONST64(0xd83d51fc246c90b4), CONST64(0xc01d7de0206080a0), + CONST64(0x8bf93239b2cbf240), CONST64(0x4be44fd992ab72e0), CONST64(0xed71894ea3f8b615), CONST64(0xba4e137ac05d27e7), + CONST64(0x851ad6c144cc0d49), CONST64(0x5137913362a695f7), CONST64(0x6080b07010304050), CONST64(0x9fc9082bb4c1ea5e), + CONST64(0x3f54c5bb84912aae), CONST64(0x9722e7d443c51152), CONST64(0x4dec44de93a876e5), CONST64(0xb65e0574c25b2fed), + CONST64(0xa16ab4eb4ade357f), CONST64(0xa9815b14bddace73), CONST64(0x050c808a8f8c0689), CONST64(0xee7502c32d77b499), + CONST64(0xaf895013bcd9ca76), CONST64(0x6f942df39cb94ad6), CONST64(0x6177c90b6abeb5df), CONST64(0x9d3afadd40c01d5d), + CONST64(0x98367a57cf4c1bd4), CONST64(0xeb798249a2fbb210), CONST64(0x2774e9a7809d3aba), CONST64(0xbf4293f04fd1216e), + CONST64(0x42f8d95d1f217c63), CONST64(0x861e5d4cca430fc5), CONST64(0xdb39da71aae39238), CONST64(0x912aecd342c61557), +}; + +static const ulong64 T5[256] = { + CONST64(0xb9bb016ad3ba68d2), CONST64(0x9ae5b166fc54194d), CONST64(0x65e2cd14712f93bc), CONST64(0x8725511b9c74b9cd), + CONST64(0xa2f7a457f5530251), CONST64(0xd6d003be68d3b86b), CONST64(0xded604b56bd2bd6f), CONST64(0x52b3fe85d74d6429), + CONST64(0xbafdad4af0500d5d), CONST64(0x09cf63e0e9ac268a), CONST64(0x1c0984968a8d830e), CONST64(0x91a51a4ddcbf79c6), + CONST64(0xa73d4d379070addd), CONST64(0xaaf1a35cf6520755), CONST64(0xa47be117b39ac852), CONST64(0x5ab5f98ed44c612d), + CONST64(0x0346ac2023ea658f), CONST64(0xe6c4118462d5a673), CONST64(0xcc55c268a497f166), CONST64(0xc6dc0da86ed1b263), + CONST64(0x85aa99d05533ffcc), CONST64(0xb2fbaa41f3510859), CONST64(0xe2c79c0fed5b2a71), CONST64(0x59f355aef7a604a2), + CONST64(0xbefe20c17fde815f), CONST64(0x7aade5a2d848753d), CONST64(0x29d77fcce5a8329a), CONST64(0xbc71e80ab699c75e), + CONST64(0x96e03be670db904b), CONST64(0x8dac9edb5632fac8), CONST64(0xd1952215c4b751e6), CONST64(0xb332ceaa19fc2bd7), + CONST64(0x4b70937338e348ab), CONST64(0x8463fd3bbf9edc42), CONST64(0xfc41d052ae91ef7e), CONST64(0xac7de61cb09bcd56), + CONST64(0x437694783be24daf), CONST64(0xb1bd0661d0bb6dd6), CONST64(0x329bdaf1c3415819), CONST64(0x577917e5b26ecba5), + CONST64(0x41f95cb3f2a50bae), CONST64(0x16804b5640cbc00b), CONST64(0x7f670cc2bd6bdab1), CONST64(0xdc59cc7ea295fb6e), + CONST64(0x61e1409ffea11fbe), CONST64(0xcb10e3c308f318eb), CONST64(0xe181302fceb14ffe), CONST64(0x100c0e1606020a08), + CONST64(0x2e925e6749ccdb17), CONST64(0x6ea2663f51c4f337), CONST64(0xe84e53cf271d6974), CONST64(0xa0786c9c3c144450), + CONST64(0x56b0730e58c3e82b), CONST64(0x3f57349aa563f291), CONST64(0x9ee63ced73da954f), CONST64(0xd2d38e35e75d3469), + CONST64(0xc2df8023e15f3e61), CONST64(0xaef22ed779dc8b57), CONST64(0xcf136e48877d94e9), CONST64(0x2694596c4acdde13), + CONST64(0xdf1f605e817f9ee1), CONST64(0xeac19b04ee5a2f75), CONST64(0x477519f3b46cc1ad), CONST64(0xdad5893ee45c316d), + CONST64(0xeb08ffef04f70cfb), CONST64(0x2dd4f2476a26be98), CONST64(0xab38c7b71cff24db), CONST64(0x3b54b9112aed7e93), + CONST64(0x134aa23625e86f87), CONST64(0x9c69f426ba9dd34e), CONST64(0x5f7f10eeb16fcea1), CONST64(0x04038d8b8f8e8c02), + CONST64(0xc8564fe32b197d64), CONST64(0x69e74794fda01aba), CONST64(0xd31aeade0df017e7), CONST64(0x3c1198ba8689971e), + CONST64(0x78222d69110f333c), CONST64(0x3812153109071b1c), CONST64(0x11c56afdecaf2986), CONST64(0x8b20db9b10fb30cb), + CONST64(0x4030385818082820), CONST64(0xa87e6b973f154154), CONST64(0x682e237f170d3934), CONST64(0x20181c2c0c041410), + CONST64(0x0806070b03010504), CONST64(0x074521abac64e98d), CONST64(0xb6f827ca7cdf845b), CONST64(0x97295f0d9a76b3c5), + CONST64(0xef0b72648b7980f9), CONST64(0xa6f429dc7add8e53), CONST64(0xf58eb3b2473dc9f4), CONST64(0xb074628a3a164e58), + CONST64(0xe582bda4413fc3fc), CONST64(0xa5b285fc5937ebdc), CONST64(0x4f731ef8b76dc4a9), CONST64(0xdd90a8954838d8e0), + CONST64(0xa1b10877d6b967de), CONST64(0xbf37442a9573a2d1), CONST64(0x1b4ca53d26e96a83), CONST64(0xb5be8bea5f35e1d4), + CONST64(0x92e3b66dff551c49), CONST64(0xaf3b4a3c9371a8d9), CONST64(0xff077c728d7b8af1), CONST64(0x140f839d898c860a), + CONST64(0xb73143219672a7d5), CONST64(0x34179fb18588921a), CONST64(0xe30ef8e407f609ff), CONST64(0x4dfcd6337e2a82a8), + CONST64(0xed84baaf423ec6f8), CONST64(0xcad98728e25e3b65), CONST64(0x25d2f54c6927bb9c), CONST64(0x0a89cfc0ca464305), + CONST64(0x60282474140c3c30), CONST64(0x0f4326a0af65ec89), CONST64(0x676d05dfb868d5bd), CONST64(0x2f5b3a8ca361f899), + CONST64(0x180a091d05030f0c), CONST64(0x46bc7d185ec1e223), CONST64(0x82efb87bf9571641), CONST64(0xfece189967d6a97f), + CONST64(0x86ec35f076d99a43), CONST64(0xfacd9512e858257d), CONST64(0x8eea32fb75d89f47), CONST64(0x17492fbdaa66e385), + CONST64(0xf6c81f9264d7ac7b), CONST64(0xcd9ca6834e3ad2e8), CONST64(0x0e8a424b45c8cf07), CONST64(0xfd88b4b9443cccf0), + CONST64(0x8326dc9013fa35cf), CONST64(0xc453c563a796f462), CONST64(0x51f552a5f4a701a6), CONST64(0xb477ef01b598c25a), + CONST64(0x3352be1a29ec7b97), CONST64(0xa9b70f7cd5b862da), CONST64(0x76a86f2254c7fc3b), CONST64(0x19c36df6efae2c82), + CONST64(0x6f6b02d4bb69d0b9), CONST64(0x62a7ecbfdd4b7a31), CONST64(0x31dd76d1e0ab3d96), CONST64(0x21d178c7e6a9379e), + CONST64(0x1f4f28b6a967e681), CONST64(0x503c364e1e0a2228), CONST64(0x028fc8cbc9474601), CONST64(0xc316e4c80bf21def), + CONST64(0xc1992c03c2b55bee), CONST64(0x0dccee6b6622aa88), CONST64(0x7b64814932e556b3), CONST64(0x235eb00c2fee719f), + CONST64(0x99a31d46dfbe7cc2), CONST64(0x45fad1387d2b87ac), CONST64(0x7c21a0e29e81bf3e), CONST64(0x906c7ea636125a48), + CONST64(0x6c2daef49883b536), CONST64(0xd85a41f52d1b776c), CONST64(0x70242a62120e3638), CONST64(0x05cae9606523af8c), + CONST64(0xfb04f1f902f506f3), CONST64(0x1283c6ddcf454c09), CONST64(0x15c6e7766321a584), CONST64(0x3e9e50714fced11f), + CONST64(0x72abe2a9db497039), CONST64(0x7de8c409742c9cb0), CONST64(0x9b2cd58d16f93ac3), CONST64(0x636e885437e659bf), + CONST64(0xd993251ec7b654e2), CONST64(0x5df0d825782888a0), CONST64(0xb872658139174b5c), CONST64(0x642ba9ff9b82b032), + CONST64(0xd05c46fe2e1a7268), CONST64(0x2c1d96ac808b9d16), CONST64(0xa33ec0bc1ffe21df), CONST64(0x241b91a7838a9812), + CONST64(0x48363f531b092d24), CONST64(0x068c454046c9ca03), CONST64(0x4c35b2d89487a126), CONST64(0x4ab9f798d24e6b25), + CONST64(0x5b7c9d653ee142a3), CONST64(0x6de4ca1f722e96b8), CONST64(0x7362864231e453b7), CONST64(0x537a9a6e3de047a7), + CONST64(0x0b40ab2b20eb608b), CONST64(0xf447d759ad90ea7a), CONST64(0x49ff5bb8f1a40eaa), CONST64(0xf0445ad2221e6678), + CONST64(0x5c39bcce9285ab2e), CONST64(0x275d3d87a060fd9d), CONST64(0x0000000000000000), CONST64(0x35defb5a6f25b194), + CONST64(0xf302f6f201f403f7), CONST64(0xdb1cedd50ef112e3), CONST64(0xd45fcb75a194fe6a), CONST64(0x583a31451d0b272c), + CONST64(0x6b688f5f34e75cbb), CONST64(0x8f2356109f75bcc9), CONST64(0x2b58b7072cef749b), CONST64(0xbdb88ce15c34e4d0), + CONST64(0x95a697c65331f5c4), CONST64(0xeec2168f61d4a377), CONST64(0xceda0aa36dd0b767), CONST64(0x4433b5d39786a422), + CONST64(0xd7196755827e9be5), CONST64(0x01c964ebeaad238e), CONST64(0xbb34c9a11afd2ed3), CONST64(0x55f6df2e7b298da4), + CONST64(0x9da090cd5030f0c0), CONST64(0xc59aa1884d3bd7ec), CONST64(0x8c65fa30bc9fd946), CONST64(0x932ad28615f83fc7), + CONST64(0x7eae682957c6f93f), CONST64(0x986a79ad35135f4c), CONST64(0x3014123a0a061e18), CONST64(0x281e1b270f051114), + CONST64(0x66a4613452c5f633), CONST64(0x886677bb33115544), CONST64(0x9f2f58069977b6c1), CONST64(0xc7156943847c91ed), + CONST64(0xf7017b798e7a8ff5), CONST64(0xe70d756f887885fd), CONST64(0xadb482f75a36eed8), CONST64(0xe04854c4241c6c70), + CONST64(0xd596af9e4b39dde4), CONST64(0xf2cb9219eb592079), CONST64(0xc05048e828187860), CONST64(0x8ae9bf70fa561345), + CONST64(0xf18d3e39c8b345f6), CONST64(0xe9873724cdb04afa), CONST64(0x3dd8fc516c24b490), CONST64(0x1dc0e07d6020a080), + CONST64(0xf98b3932cbb240f2), CONST64(0xe44bd94fab92e072), CONST64(0x71ed4e89f8a315b6), CONST64(0x4eba7a135dc0e727), + CONST64(0x1a85c1d6cc44490d), CONST64(0x37513391a662f795), CONST64(0x806070b030105040), CONST64(0xc99f2b08c1b45eea), + CONST64(0x543fbbc59184ae2a), CONST64(0x2297d4e7c5435211), CONST64(0xec4dde44a893e576), CONST64(0x5eb674055bc2ed2f), + CONST64(0x6aa1ebb4de4a7f35), CONST64(0x81a9145bdabd73ce), CONST64(0x0c058a808c8f8906), CONST64(0x75eec302772d99b4), + CONST64(0x89af1350d9bc76ca), CONST64(0x946ff32db99cd64a), CONST64(0x77610bc9be6adfb5), CONST64(0x3a9dddfac0405d1d), + CONST64(0x3698577a4ccfd41b), CONST64(0x79eb4982fba210b2), CONST64(0x7427a7e99d80ba3a), CONST64(0x42bff093d14f6e21), + CONST64(0xf8425dd9211f637c), CONST64(0x1e864c5d43cac50f), CONST64(0x39db71dae3aa3892), CONST64(0x2a91d3ecc6425715), +}; + +static const ulong64 T6[256] = { + CONST64(0x6a01bbb9d268bad3), CONST64(0x66b1e59a4d1954fc), CONST64(0x14cde265bc932f71), CONST64(0x1b512587cdb9749c), + CONST64(0x57a4f7a2510253f5), CONST64(0xbe03d0d66bb8d368), CONST64(0xb504d6de6fbdd26b), CONST64(0x85feb35229644dd7), + CONST64(0x4aadfdba5d0d50f0), CONST64(0xe063cf098a26ace9), CONST64(0x9684091c0e838d8a), CONST64(0x4d1aa591c679bfdc), + CONST64(0x374d3da7ddad7090), CONST64(0x5ca3f1aa550752f6), CONST64(0x17e17ba452c89ab3), CONST64(0x8ef9b55a2d614cd4), + CONST64(0x20ac46038f65ea23), CONST64(0x8411c4e673a6d562), CONST64(0x68c255cc66f197a4), CONST64(0xa80ddcc663b2d16e), + CONST64(0xd099aa85ccff3355), CONST64(0x41aafbb2590851f3), CONST64(0x0f9cc7e2712a5bed), CONST64(0xae55f359a204a6f7), + CONST64(0xc120febe5f81de7f), CONST64(0xa2e5ad7a3d7548d8), CONST64(0xcc7fd7299a32a8e5), CONST64(0x0ae871bc5ec799b6), + CONST64(0xe63be0964b90db70), CONST64(0xdb9eac8dc8fa3256), CONST64(0x152295d1e651b7c4), CONST64(0xaace32b3d72bfc19), + CONST64(0x7393704bab48e338), CONST64(0x3bfd638442dc9ebf), CONST64(0x52d041fc7eef91ae), CONST64(0x1ce67dac56cd9bb0), + CONST64(0x78947643af4de23b), CONST64(0x6106bdb1d66dbbd0), CONST64(0xf1da9b32195841c3), CONST64(0xe5177957a5cb6eb2), + CONST64(0xb35cf941ae0ba5f2), CONST64(0x564b80160bc0cb40), CONST64(0xc20c677fb1da6bbd), CONST64(0x7ecc59dc6efb95a2), + CONST64(0x9f40e161be1fa1fe), CONST64(0xc3e310cbeb18f308), CONST64(0x2f3081e1fe4fb1ce), CONST64(0x160e0c10080a0206), + CONST64(0x675e922e17dbcc49), CONST64(0x3f66a26e37f3c451), CONST64(0xcf534ee874691d27), CONST64(0x9c6c78a05044143c), + CONST64(0x0e73b0562be8c358), CONST64(0x9a34573f91f263a5), CONST64(0xed3ce69e4f95da73), CONST64(0x358ed3d269345de7), + CONST64(0x2380dfc2613e5fe1), CONST64(0xd72ef2ae578bdc79), CONST64(0x486e13cfe9947d87), CONST64(0x6c59942613decd4a), + CONST64(0x5e601fdfe19e7f81), CONST64(0x049bc1ea752f5aee), CONST64(0xf3197547adc16cb4), CONST64(0x3e89d5da6d315ce4), + CONST64(0xefff08ebfb0cf704), CONST64(0x47f2d42d98be266a), CONST64(0xb7c738abdb24ff1c), CONST64(0x11b9543b937eed2a), + CONST64(0x36a24a13876fe825), CONST64(0x26f4699c4ed39dba), CONST64(0xee107f5fa1ce6fb1), CONST64(0x8b8d0304028c8e8f), + CONST64(0xe34f56c8647d192b), CONST64(0x9447e769ba1aa0fd), CONST64(0xdeea1ad3e717f00d), CONST64(0xba98113c1e978986), + CONST64(0x692d22783c330f11), CONST64(0x311512381c1b0709), CONST64(0xfd6ac5118629afec), CONST64(0x9bdb208bcb30fb10), + CONST64(0x5838304020280818), CONST64(0x976b7ea85441153f), CONST64(0x7f232e6834390d17), CONST64(0x2c1c18201014040c), + CONST64(0x0b07060804050103), CONST64(0xab2145078de964ac), CONST64(0xca27f8b65b84df7c), CONST64(0x0d5f2997c5b3769a), + CONST64(0x64720beff980798b), CONST64(0xdc29f4a6538edd7a), CONST64(0xb2b38ef5f4c93d47), CONST64(0x8a6274b0584e163a), + CONST64(0xa4bd82e5fcc33f41), CONST64(0xfc85b2a5dceb3759), CONST64(0xf81e734fa9c46db7), CONST64(0x95a890dde0d83848), + CONST64(0x7708b1a1de67b9d6), CONST64(0x2a4437bfd1a27395), CONST64(0x3da54c1b836ae926), CONST64(0xea8bbeb5d4e1355f), + CONST64(0x6db6e392491c55ff), CONST64(0x3c4a3bafd9a87193), CONST64(0x727c07fff18a7b8d), CONST64(0x9d830f140a868c89), + CONST64(0x214331b7d5a77296), CONST64(0xb19f17341a928885), CONST64(0xe4f80ee3ff09f607), CONST64(0x33d6fc4da8822a7e), + CONST64(0xafba84edf8c63e42), CONST64(0x2887d9ca653b5ee2), CONST64(0x4cf5d2259cbb2769), CONST64(0xc0cf890a054346ca), + CONST64(0x74242860303c0c14), CONST64(0xa026430f89ec65af), CONST64(0xdf056d67bdd568b8), CONST64(0x8c3a5b2f99f861a3), + CONST64(0x1d090a180c0f0305), CONST64(0x187dbc4623e2c15e), CONST64(0x7bb8ef82411657f9), CONST64(0x9918cefe7fa9d667), + CONST64(0xf035ec86439ad976), CONST64(0x1295cdfa7d2558e8), CONST64(0xfb32ea8e479fd875), CONST64(0xbd2f491785e366aa), + CONST64(0x921fc8f67bacd764), CONST64(0x83a69ccde8d23a4e), CONST64(0x4b428a0e07cfc845), CONST64(0xb9b488fdf0cc3c44), + CONST64(0x90dc2683cf35fa13), CONST64(0x63c553c462f496a7), CONST64(0xa552f551a601a7f4), CONST64(0x01ef77b45ac298b5), + CONST64(0x1abe5233977bec29), CONST64(0x7c0fb7a9da62b8d5), CONST64(0x226fa8763bfcc754), CONST64(0xf66dc319822caeef), + CONST64(0xd4026b6fb9d069bb), CONST64(0xbfeca762317a4bdd), CONST64(0xd176dd31963dabe0), CONST64(0xc778d1219e37a9e6), + CONST64(0xb6284f1f81e667a9), CONST64(0x4e363c5028220a1e), CONST64(0xcbc88f02014647c9), CONST64(0xc8e416c3ef1df20b), + CONST64(0x032c99c1ee5bb5c2), CONST64(0x6beecc0d88aa2266), CONST64(0x4981647bb356e532), CONST64(0x0cb05e239f71ee2f), + CONST64(0x461da399c27cbedf), CONST64(0x38d1fa45ac872b7d), CONST64(0xe2a0217c3ebf819e), CONST64(0xa67e6c90485a1236), + CONST64(0xf4ae2d6c36b58398), CONST64(0xf5415ad86c771b2d), CONST64(0x622a247038360e12), CONST64(0x60e9ca058caf2365), + CONST64(0xf9f104fbf306f502), CONST64(0xddc68312094c45cf), CONST64(0x76e7c61584a52163), CONST64(0x71509e3e1fd1ce4f), + CONST64(0xa9e2ab72397049db), CONST64(0x09c4e87db09c2c74), CONST64(0x8dd52c9bc33af916), CONST64(0x54886e63bf59e637), + CONST64(0x1e2593d9e254b6c7), CONST64(0x25d8f05da0882878), CONST64(0x816572b85c4b1739), CONST64(0xffa92b6432b0829b), + CONST64(0xfe465cd068721a2e), CONST64(0xac961d2c169d8b80), CONST64(0xbcc03ea3df21fe1f), CONST64(0xa7911b2412988a83), + CONST64(0x533f3648242d091b), CONST64(0x40458c0603cac946), CONST64(0xd8b2354c26a18794), CONST64(0x98f7b94a256b4ed2), + CONST64(0x659d7c5ba342e13e), CONST64(0x1fcae46db8962e72), CONST64(0x42866273b753e431), CONST64(0x6e9a7a53a747e03d), + CONST64(0x2bab400b8b60eb20), CONST64(0x59d747f47aea90ad), CONST64(0xb85bff49aa0ea4f1), CONST64(0xd25a44f078661e22), + CONST64(0xcebc395c2eab8592), CONST64(0x873d5d279dfd60a0), CONST64(0x0000000000000000), CONST64(0x5afbde3594b1256f), + CONST64(0xf2f602f3f703f401), CONST64(0xd5ed1cdbe312f10e), CONST64(0x75cb5fd46afe94a1), CONST64(0x45313a582c270b1d), + CONST64(0x5f8f686bbb5ce734), CONST64(0x1056238fc9bc759f), CONST64(0x07b7582b9b74ef2c), CONST64(0xe18cb8bdd0e4345c), + CONST64(0xc697a695c4f53153), CONST64(0x8f16c2ee77a3d461), CONST64(0xa30adace67b7d06d), CONST64(0xd3b5334422a48697), + CONST64(0x556719d7e59b7e82), CONST64(0xeb64c9018e23adea), CONST64(0xa1c934bbd32efd1a), CONST64(0x2edff655a48d297b), + CONST64(0xcd90a09dc0f03050), CONST64(0x88a19ac5ecd73b4d), CONST64(0x30fa658c46d99fbc), CONST64(0x86d22a93c73ff815), + CONST64(0x2968ae7e3ff9c657), CONST64(0xad796a984c5f1335), CONST64(0x3a121430181e060a), CONST64(0x271b1e281411050f), + CONST64(0x3461a46633f6c552), CONST64(0xbb77668844551133), CONST64(0x06582f9fc1b67799), CONST64(0x436915c7ed917c84), + CONST64(0x797b01f7f58f7a8e), CONST64(0x6f750de7fd857888), CONST64(0xf782b4add8ee365a), CONST64(0xc45448e0706c1c24), + CONST64(0x9eaf96d5e4dd394b), CONST64(0x1992cbf2792059eb), CONST64(0xe84850c060781828), CONST64(0x70bfe98a451356fa), + CONST64(0x393e8df1f645b3c8), CONST64(0x243787e9fa4ab0cd), CONST64(0x51fcd83d90b4246c), CONST64(0x7de0c01d80a02060), + CONST64(0x32398bf9f240b2cb), CONST64(0x4fd94be472e092ab), CONST64(0x894eed71b615a3f8), CONST64(0x137aba4e27e7c05d), + CONST64(0xd6c1851a0d4944cc), CONST64(0x9133513795f762a6), CONST64(0xb070608040501030), CONST64(0x082b9fc9ea5eb4c1), + CONST64(0xc5bb3f542aae8491), CONST64(0xe7d49722115243c5), CONST64(0x44de4dec76e593a8), CONST64(0x0574b65e2fedc25b), + CONST64(0xb4eba16a357f4ade), CONST64(0x5b14a981ce73bdda), CONST64(0x808a050c06898f8c), CONST64(0x02c3ee75b4992d77), + CONST64(0x5013af89ca76bcd9), CONST64(0x2df36f944ad69cb9), CONST64(0xc90b6177b5df6abe), CONST64(0xfadd9d3a1d5d40c0), + CONST64(0x7a5798361bd4cf4c), CONST64(0x8249eb79b210a2fb), CONST64(0xe9a727743aba809d), CONST64(0x93f0bf42216e4fd1), + CONST64(0xd95d42f87c631f21), CONST64(0x5d4c861e0fc5ca43), CONST64(0xda71db399238aae3), CONST64(0xecd3912a155742c6), +}; + +static const ulong64 T7[256] = { + CONST64(0x016ab9bb68d2d3ba), CONST64(0xb1669ae5194dfc54), CONST64(0xcd1465e293bc712f), CONST64(0x511b8725b9cd9c74), + CONST64(0xa457a2f70251f553), CONST64(0x03bed6d0b86b68d3), CONST64(0x04b5ded6bd6f6bd2), CONST64(0xfe8552b36429d74d), + CONST64(0xad4abafd0d5df050), CONST64(0x63e009cf268ae9ac), CONST64(0x84961c09830e8a8d), CONST64(0x1a4d91a579c6dcbf), + CONST64(0x4d37a73daddd9070), CONST64(0xa35caaf10755f652), CONST64(0xe117a47bc852b39a), CONST64(0xf98e5ab5612dd44c), + CONST64(0xac200346658f23ea), CONST64(0x1184e6c4a67362d5), CONST64(0xc268cc55f166a497), CONST64(0x0da8c6dcb2636ed1), + CONST64(0x99d085aaffcc5533), CONST64(0xaa41b2fb0859f351), CONST64(0x9c0fe2c72a71ed5b), CONST64(0x55ae59f304a2f7a6), + CONST64(0x20c1befe815f7fde), CONST64(0xe5a27aad753dd848), CONST64(0x7fcc29d7329ae5a8), CONST64(0xe80abc71c75eb699), + CONST64(0x3be696e0904b70db), CONST64(0x9edb8dacfac85632), CONST64(0x2215d19551e6c4b7), CONST64(0xceaab3322bd719fc), + CONST64(0x93734b7048ab38e3), CONST64(0xfd3b8463dc42bf9e), CONST64(0xd052fc41ef7eae91), CONST64(0xe61cac7dcd56b09b), + CONST64(0x947843764daf3be2), CONST64(0x0661b1bd6dd6d0bb), CONST64(0xdaf1329b5819c341), CONST64(0x17e55779cba5b26e), + CONST64(0x5cb341f90baef2a5), CONST64(0x4b561680c00b40cb), CONST64(0x0cc27f67dab1bd6b), CONST64(0xcc7edc59fb6ea295), + CONST64(0x409f61e11fbefea1), CONST64(0xe3c3cb1018eb08f3), CONST64(0x302fe1814ffeceb1), CONST64(0x0e16100c0a080602), + CONST64(0x5e672e92db1749cc), CONST64(0x663f6ea2f33751c4), CONST64(0x53cfe84e6974271d), CONST64(0x6c9ca07844503c14), + CONST64(0x730e56b0e82b58c3), CONST64(0x349a3f57f291a563), CONST64(0x3ced9ee6954f73da), CONST64(0x8e35d2d33469e75d), + CONST64(0x8023c2df3e61e15f), CONST64(0x2ed7aef28b5779dc), CONST64(0x6e48cf1394e9877d), CONST64(0x596c2694de134acd), + CONST64(0x605edf1f9ee1817f), CONST64(0x9b04eac12f75ee5a), CONST64(0x19f34775c1adb46c), CONST64(0x893edad5316de45c), + CONST64(0xffefeb080cfb04f7), CONST64(0xf2472dd4be986a26), CONST64(0xc7b7ab3824db1cff), CONST64(0xb9113b547e932aed), + CONST64(0xa236134a6f8725e8), CONST64(0xf4269c69d34eba9d), CONST64(0x10ee5f7fcea1b16f), CONST64(0x8d8b04038c028f8e), + CONST64(0x4fe3c8567d642b19), CONST64(0x479469e71abafda0), CONST64(0xeaded31a17e70df0), CONST64(0x98ba3c11971e8689), + CONST64(0x2d697822333c110f), CONST64(0x153138121b1c0907), CONST64(0x6afd11c52986ecaf), CONST64(0xdb9b8b2030cb10fb), + CONST64(0x3858403028201808), CONST64(0x6b97a87e41543f15), CONST64(0x237f682e3934170d), CONST64(0x1c2c201814100c04), + CONST64(0x070b080605040301), CONST64(0x21ab0745e98dac64), CONST64(0x27cab6f8845b7cdf), CONST64(0x5f0d9729b3c59a76), + CONST64(0x7264ef0b80f98b79), CONST64(0x29dca6f48e537add), CONST64(0xb3b2f58ec9f4473d), CONST64(0x628ab0744e583a16), + CONST64(0xbda4e582c3fc413f), CONST64(0x85fca5b2ebdc5937), CONST64(0x1ef84f73c4a9b76d), CONST64(0xa895dd90d8e04838), + CONST64(0x0877a1b167ded6b9), CONST64(0x442abf37a2d19573), CONST64(0xa53d1b4c6a8326e9), CONST64(0x8beab5bee1d45f35), + CONST64(0xb66d92e31c49ff55), CONST64(0x4a3caf3ba8d99371), CONST64(0x7c72ff078af18d7b), CONST64(0x839d140f860a898c), + CONST64(0x4321b731a7d59672), CONST64(0x9fb13417921a8588), CONST64(0xf8e4e30e09ff07f6), CONST64(0xd6334dfc82a87e2a), + CONST64(0xbaafed84c6f8423e), CONST64(0x8728cad93b65e25e), CONST64(0xf54c25d2bb9c6927), CONST64(0xcfc00a894305ca46), + CONST64(0x247460283c30140c), CONST64(0x26a00f43ec89af65), CONST64(0x05df676dd5bdb868), CONST64(0x3a8c2f5bf899a361), + CONST64(0x091d180a0f0c0503), CONST64(0x7d1846bce2235ec1), CONST64(0xb87b82ef1641f957), CONST64(0x1899fecea97f67d6), + CONST64(0x35f086ec9a4376d9), CONST64(0x9512facd257de858), CONST64(0x32fb8eea9f4775d8), CONST64(0x2fbd1749e385aa66), + CONST64(0x1f92f6c8ac7b64d7), CONST64(0xa683cd9cd2e84e3a), CONST64(0x424b0e8acf0745c8), CONST64(0xb4b9fd88ccf0443c), + CONST64(0xdc90832635cf13fa), CONST64(0xc563c453f462a796), CONST64(0x52a551f501a6f4a7), CONST64(0xef01b477c25ab598), + CONST64(0xbe1a33527b9729ec), CONST64(0x0f7ca9b762dad5b8), CONST64(0x6f2276a8fc3b54c7), CONST64(0x6df619c32c82efae), + CONST64(0x02d46f6bd0b9bb69), CONST64(0xecbf62a77a31dd4b), CONST64(0x76d131dd3d96e0ab), CONST64(0x78c721d1379ee6a9), + CONST64(0x28b61f4fe681a967), CONST64(0x364e503c22281e0a), CONST64(0xc8cb028f4601c947), CONST64(0xe4c8c3161def0bf2), + CONST64(0x2c03c1995beec2b5), CONST64(0xee6b0dccaa886622), CONST64(0x81497b6456b332e5), CONST64(0xb00c235e719f2fee), + CONST64(0x1d4699a37cc2dfbe), CONST64(0xd13845fa87ac7d2b), CONST64(0xa0e27c21bf3e9e81), CONST64(0x7ea6906c5a483612), + CONST64(0xaef46c2db5369883), CONST64(0x41f5d85a776c2d1b), CONST64(0x2a6270243638120e), CONST64(0xe96005caaf8c6523), + CONST64(0xf1f9fb0406f302f5), CONST64(0xc6dd12834c09cf45), CONST64(0xe77615c6a5846321), CONST64(0x50713e9ed11f4fce), + CONST64(0xe2a972ab7039db49), CONST64(0xc4097de89cb0742c), CONST64(0xd58d9b2c3ac316f9), CONST64(0x8854636e59bf37e6), + CONST64(0x251ed99354e2c7b6), CONST64(0xd8255df088a07828), CONST64(0x6581b8724b5c3917), CONST64(0xa9ff642bb0329b82), + CONST64(0x46fed05c72682e1a), CONST64(0x96ac2c1d9d16808b), CONST64(0xc0bca33e21df1ffe), CONST64(0x91a7241b9812838a), + CONST64(0x3f5348362d241b09), CONST64(0x4540068cca0346c9), CONST64(0xb2d84c35a1269487), CONST64(0xf7984ab96b25d24e), + CONST64(0x9d655b7c42a33ee1), CONST64(0xca1f6de496b8722e), CONST64(0x8642736253b731e4), CONST64(0x9a6e537a47a73de0), + CONST64(0xab2b0b40608b20eb), CONST64(0xd759f447ea7aad90), CONST64(0x5bb849ff0eaaf1a4), CONST64(0x5ad2f0446678221e), + CONST64(0xbcce5c39ab2e9285), CONST64(0x3d87275dfd9da060), CONST64(0x0000000000000000), CONST64(0xfb5a35deb1946f25), + CONST64(0xf6f2f30203f701f4), CONST64(0xedd5db1c12e30ef1), CONST64(0xcb75d45ffe6aa194), CONST64(0x3145583a272c1d0b), + CONST64(0x8f5f6b685cbb34e7), CONST64(0x56108f23bcc99f75), CONST64(0xb7072b58749b2cef), CONST64(0x8ce1bdb8e4d05c34), + CONST64(0x97c695a6f5c45331), CONST64(0x168feec2a37761d4), CONST64(0x0aa3cedab7676dd0), CONST64(0xb5d34433a4229786), + CONST64(0x6755d7199be5827e), CONST64(0x64eb01c9238eeaad), CONST64(0xc9a1bb342ed31afd), CONST64(0xdf2e55f68da47b29), + CONST64(0x90cd9da0f0c05030), CONST64(0xa188c59ad7ec4d3b), CONST64(0xfa308c65d946bc9f), CONST64(0xd286932a3fc715f8), + CONST64(0x68297eaef93f57c6), CONST64(0x79ad986a5f4c3513), CONST64(0x123a30141e180a06), CONST64(0x1b27281e11140f05), + CONST64(0x613466a4f63352c5), CONST64(0x77bb886655443311), CONST64(0x58069f2fb6c19977), CONST64(0x6943c71591ed847c), + CONST64(0x7b79f7018ff58e7a), CONST64(0x756fe70d85fd8878), CONST64(0x82f7adb4eed85a36), CONST64(0x54c4e0486c70241c), + CONST64(0xaf9ed596dde44b39), CONST64(0x9219f2cb2079eb59), CONST64(0x48e8c05078602818), CONST64(0xbf708ae91345fa56), + CONST64(0x3e39f18d45f6c8b3), CONST64(0x3724e9874afacdb0), CONST64(0xfc513dd8b4906c24), CONST64(0xe07d1dc0a0806020), + CONST64(0x3932f98b40f2cbb2), CONST64(0xd94fe44be072ab92), CONST64(0x4e8971ed15b6f8a3), CONST64(0x7a134ebae7275dc0), + CONST64(0xc1d61a85490dcc44), CONST64(0x33913751f795a662), CONST64(0x70b0806050403010), CONST64(0x2b08c99f5eeac1b4), + CONST64(0xbbc5543fae2a9184), CONST64(0xd4e722975211c543), CONST64(0xde44ec4de576a893), CONST64(0x74055eb6ed2f5bc2), + CONST64(0xebb46aa17f35de4a), CONST64(0x145b81a973cedabd), CONST64(0x8a800c0589068c8f), CONST64(0xc30275ee99b4772d), + CONST64(0x135089af76cad9bc), CONST64(0xf32d946fd64ab99c), CONST64(0x0bc97761dfb5be6a), CONST64(0xddfa3a9d5d1dc040), + CONST64(0x577a3698d41b4ccf), CONST64(0x498279eb10b2fba2), CONST64(0xa7e97427ba3a9d80), CONST64(0xf09342bf6e21d14f), + CONST64(0x5dd9f842637c211f), CONST64(0x4c5d1e86c50f43ca), CONST64(0x71da39db3892e3aa), CONST64(0xd3ec2a915715c642), +}; + +static const ulong64 c[R + 1] = { + CONST64(0xba542f7453d3d24d), + CONST64(0x50ac8dbf70529a4c), + CONST64(0xead597d133515ba6), + CONST64(0xde48a899db32b7fc), + CONST64(0xe39e919be2bb416e), + CONST64(0xa5cb6b95a1f3b102), + CONST64(0xccc41d14c363da5d), + CONST64(0x5fdc7dcd7f5a6c5c), + CONST64(0xf726ffede89d6f8e), +}; + + /** + Initialize the Khazad block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +int khazad_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) +{ + int r; + const ulong64 *S; + ulong64 K2, K1; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); + if (keylen != 16) { + return CRYPT_INVALID_KEYSIZE; + } + if (num_rounds != 8 && num_rounds != 0) { + return CRYPT_INVALID_ROUNDS; + } + + /* use 7th table */ + S = T7; + + /* + * map unsigned char array cipher key to initial key state (mu): + */ + K2 = + ((ulong64)key[ 0] << 56) ^ + ((ulong64)key[ 1] << 48) ^ + ((ulong64)key[ 2] << 40) ^ + ((ulong64)key[ 3] << 32) ^ + ((ulong64)key[ 4] << 24) ^ + ((ulong64)key[ 5] << 16) ^ + ((ulong64)key[ 6] << 8) ^ + ((ulong64)key[ 7] ); + K1 = + ((ulong64)key[ 8] << 56) ^ + ((ulong64)key[ 9] << 48) ^ + ((ulong64)key[10] << 40) ^ + ((ulong64)key[11] << 32) ^ + ((ulong64)key[12] << 24) ^ + ((ulong64)key[13] << 16) ^ + ((ulong64)key[14] << 8) ^ + ((ulong64)key[15] ); + + /* + * compute the round keys: + */ + for (r = 0; r <= R; r++) { + /* + * K[r] = rho(c[r], K1) ^ K2; + */ + skey->khazad.roundKeyEnc[r] = + T0[(int)(K1 >> 56) ] ^ + T1[(int)(K1 >> 48) & 0xff] ^ + T2[(int)(K1 >> 40) & 0xff] ^ + T3[(int)(K1 >> 32) & 0xff] ^ + T4[(int)(K1 >> 24) & 0xff] ^ + T5[(int)(K1 >> 16) & 0xff] ^ + T6[(int)(K1 >> 8) & 0xff] ^ + T7[(int)(K1 ) & 0xff] ^ + c[r] ^ K2; + K2 = K1; K1 = skey->khazad.roundKeyEnc[r]; + } + /* + * compute the inverse key schedule: + * K'^0 = K^R, K'^R = K^0, K'^r = theta(K^{R-r}) + */ + skey->khazad.roundKeyDec[0] = skey->khazad.roundKeyEnc[R]; + for (r = 1; r < R; r++) { + K1 = skey->khazad.roundKeyEnc[R - r]; + skey->khazad.roundKeyDec[r] = + T0[(int)S[(int)(K1 >> 56) ] & 0xff] ^ + T1[(int)S[(int)(K1 >> 48) & 0xff] & 0xff] ^ + T2[(int)S[(int)(K1 >> 40) & 0xff] & 0xff] ^ + T3[(int)S[(int)(K1 >> 32) & 0xff] & 0xff] ^ + T4[(int)S[(int)(K1 >> 24) & 0xff] & 0xff] ^ + T5[(int)S[(int)(K1 >> 16) & 0xff] & 0xff] ^ + T6[(int)S[(int)(K1 >> 8) & 0xff] & 0xff] ^ + T7[(int)S[(int)(K1 ) & 0xff] & 0xff]; + } + skey->khazad.roundKeyDec[R] = skey->khazad.roundKeyEnc[0]; + + return CRYPT_OK; +} + +static void khazad_crypt(const unsigned char *plaintext, unsigned char *ciphertext, + const ulong64 *roundKey) { + int r; + ulong64 state; + /* + * map plaintext block to cipher state (mu) + * and add initial round key (sigma[K^0]): + */ + state = + ((ulong64)plaintext[0] << 56) ^ + ((ulong64)plaintext[1] << 48) ^ + ((ulong64)plaintext[2] << 40) ^ + ((ulong64)plaintext[3] << 32) ^ + ((ulong64)plaintext[4] << 24) ^ + ((ulong64)plaintext[5] << 16) ^ + ((ulong64)plaintext[6] << 8) ^ + ((ulong64)plaintext[7] ) ^ + roundKey[0]; + + /* + * R - 1 full rounds: + */ + for (r = 1; r < R; r++) { + state = + T0[(int)(state >> 56) ] ^ + T1[(int)(state >> 48) & 0xff] ^ + T2[(int)(state >> 40) & 0xff] ^ + T3[(int)(state >> 32) & 0xff] ^ + T4[(int)(state >> 24) & 0xff] ^ + T5[(int)(state >> 16) & 0xff] ^ + T6[(int)(state >> 8) & 0xff] ^ + T7[(int)(state ) & 0xff] ^ + roundKey[r]; + } + + /* + * last round: + */ + state = + (T0[(int)(state >> 56) ] & CONST64(0xff00000000000000)) ^ + (T1[(int)(state >> 48) & 0xff] & CONST64(0x00ff000000000000)) ^ + (T2[(int)(state >> 40) & 0xff] & CONST64(0x0000ff0000000000)) ^ + (T3[(int)(state >> 32) & 0xff] & CONST64(0x000000ff00000000)) ^ + (T4[(int)(state >> 24) & 0xff] & CONST64(0x00000000ff000000)) ^ + (T5[(int)(state >> 16) & 0xff] & CONST64(0x0000000000ff0000)) ^ + (T6[(int)(state >> 8) & 0xff] & CONST64(0x000000000000ff00)) ^ + (T7[(int)(state ) & 0xff] & CONST64(0x00000000000000ff)) ^ + roundKey[R]; + + /* + * map cipher state to ciphertext block (mu^{-1}): + */ + ciphertext[0] = (unsigned char)(state >> 56); + ciphertext[1] = (unsigned char)(state >> 48); + ciphertext[2] = (unsigned char)(state >> 40); + ciphertext[3] = (unsigned char)(state >> 32); + ciphertext[4] = (unsigned char)(state >> 24); + ciphertext[5] = (unsigned char)(state >> 16); + ciphertext[6] = (unsigned char)(state >> 8); + ciphertext[7] = (unsigned char)(state ); +} + +/** + Encrypts a block of text with Khazad + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +void khazad_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) +{ + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + khazad_crypt(pt, ct, skey->khazad.roundKeyEnc); +} + +/** + Decrypts a block of text with Khazad + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +void khazad_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) +{ + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + khazad_crypt(ct, pt, skey->khazad.roundKeyDec); +} + +/** + Performs a self-test of the Khazad block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ +int khazad_test(void) +{ +#ifndef LTC_TEST + return CRYPT_NOP; +#else + static const struct test { + unsigned char pt[8], ct[8], key[16]; + } tests[] = { +{ + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x49, 0xA4, 0xCE, 0x32, 0xAC, 0x19, 0x0E, 0x3F }, + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x64, 0x5D, 0x77, 0x3E, 0x40, 0xAB, 0xDD, 0x53 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 } +}, { + { 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }, + { 0x9E, 0x39, 0x98, 0x64, 0xF7, 0x8E, 0xCA, 0x02 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +}, { + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 }, + { 0xA9, 0xDF, 0x3D, 0x2C, 0x64, 0xD3, 0xEA, 0x28 }, + { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } +} +}; + int x, y; + unsigned char buf[2][8]; + symmetric_key skey; + + for (x = 0; x < (int)(sizeof(tests)/sizeof(tests[0])); x++) { + khazad_setup(tests[x].key, 16, 0, &skey); + khazad_ecb_encrypt(tests[x].pt, buf[0], &skey); + khazad_ecb_decrypt(buf[0], buf[1], &skey); + if (memcmp(buf[0], tests[x].ct, 8) || memcmp(buf[1], tests[x].pt, 8)) { + return CRYPT_FAIL_TESTVECTOR; + } + + for (y = 0; y < 1000; y++) khazad_ecb_encrypt(buf[0], buf[0], &skey); + for (y = 0; y < 1000; y++) khazad_ecb_decrypt(buf[0], buf[0], &skey); + if (memcmp(buf[0], tests[x].ct, 8)) { + return CRYPT_FAIL_TESTVECTOR; + } + + } + return CRYPT_OK; +#endif +} + +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int khazad_keysize(int *keysize) +{ + LTC_ARGCHK(keysize != NULL); + if (*keysize >= 16) { + *keysize = 16; + return CRYPT_OK; + } else { + return CRYPT_INVALID_KEYSIZE; + } +} + +#endif diff --git a/noekeon.c b/src/ciphers/noekeon.c similarity index 69% rename from noekeon.c rename to src/ciphers/noekeon.c index ef4796c..0e31fdb 100644 --- a/noekeon.c +++ b/src/ciphers/noekeon.c @@ -8,12 +8,15 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Implementation of the Noekeon block cipher by Tom St Denis */ -#include "mycrypt.h" +/** + @file noekeon.c + Implementation of the Noekeon block cipher by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef NOEKEON -const struct _cipher_descriptor noekeon_desc = +const struct ltc_cipher_descriptor noekeon_desc = { "noekeon", 16, @@ -34,15 +37,15 @@ static const ulong32 RC[] = { }; #define kTHETA(a, b, c, d) \ - temp = a^c; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \ + temp = a^c; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \ b ^= temp; d ^= temp; \ - temp = b^d; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \ + temp = b^d; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \ a ^= temp; c ^= temp; #define THETA(k, a, b, c, d) \ - temp = a^c; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \ + temp = a^c; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \ b ^= temp ^ k[1]; d ^= temp ^ k[3]; \ - temp = b^d; temp = temp ^ ROL(temp, 8) ^ ROR(temp, 8); \ + temp = b^d; temp = temp ^ ROLc(temp, 8) ^ RORc(temp, 8); \ a ^= temp ^ k[0]; c ^= temp ^ k[2]; #define GAMMA(a, b, c, d) \ @@ -54,17 +57,25 @@ static const ulong32 RC[] = { a ^= c&b; #define PI1(a, b, c, d) \ - a = ROL(a, 1); c = ROL(c, 5); d = ROL(d, 2); + a = ROLc(a, 1); c = ROLc(c, 5); d = ROLc(d, 2); #define PI2(a, b, c, d) \ - a = ROR(a, 1); c = ROR(c, 5); d = ROR(d, 2); + a = RORc(a, 1); c = RORc(c, 5); d = RORc(d, 2); + /** + Initialize the Noekeon block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { ulong32 temp; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (keylen != 16) { return CRYPT_INVALID_KEYSIZE; @@ -89,25 +100,31 @@ int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetri return CRYPT_OK; } -#ifdef CLEAN_STACK -static void _noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with Noekeon + @param pt The input plaintext (16 bytes) + @param ct The output ciphertext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else -void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #endif { ulong32 a,b,c,d,temp; int r; - _ARGCHK(key != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); LOAD32H(a,&pt[0]); LOAD32H(b,&pt[4]); LOAD32H(c,&pt[8]); LOAD32H(d,&pt[12]); #define ROUND(i) \ a ^= RC[i]; \ - THETA(key->noekeon.K, a,b,c,d); \ + THETA(skey->noekeon.K, a,b,c,d); \ PI1(a,b,c,d); \ GAMMA(a,b,c,d); \ PI2(a,b,c,d); @@ -119,39 +136,45 @@ void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_k #undef ROUND a ^= RC[16]; - THETA(key->noekeon.K, a, b, c, d); + THETA(skey->noekeon.K, a, b, c, d); STORE32H(a,&ct[0]); STORE32H(b,&ct[4]); STORE32H(c,&ct[8]); STORE32H(d,&ct[12]); } -#ifdef CLEAN_STACK -void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { - _noekeon_ecb_encrypt(pt, ct, key); + _noekeon_ecb_encrypt(pt, ct, skey); burn_stack(sizeof(ulong32) * 5 + sizeof(int)); } #endif -#ifdef CLEAN_STACK -static void _noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with Noekeon + @param ct The input ciphertext (16 bytes) + @param pt The output plaintext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else -void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #endif { ulong32 a,b,c,d, temp; int r; - _ARGCHK(key != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); LOAD32H(a,&ct[0]); LOAD32H(b,&ct[4]); LOAD32H(c,&ct[8]); LOAD32H(d,&ct[12]); #define ROUND(i) \ - THETA(key->noekeon.dK, a,b,c,d); \ + THETA(skey->noekeon.dK, a,b,c,d); \ a ^= RC[i]; \ PI1(a,b,c,d); \ GAMMA(a,b,c,d); \ @@ -163,20 +186,24 @@ void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_k #undef ROUND - THETA(key->noekeon.dK, a,b,c,d); + THETA(skey->noekeon.dK, a,b,c,d); a ^= RC[0]; STORE32H(a,&pt[0]); STORE32H(b, &pt[4]); STORE32H(c,&pt[8]); STORE32H(d, &pt[12]); } -#ifdef CLEAN_STACK -void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { - _noekeon_ecb_decrypt(ct, pt, key); + _noekeon_ecb_decrypt(ct, pt, skey); burn_stack(sizeof(ulong32) * 5 + sizeof(int)); } #endif +/** + Performs a self-test of the Noekeon block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int noekeon_test(void) { #ifndef LTC_TEST @@ -236,13 +263,18 @@ int noekeon_test(void) #endif } -int noekeon_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int noekeon_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if (*desired_keysize < 16) { + LTC_ARGCHK(keysize != NULL); + if (*keysize < 16) { return CRYPT_INVALID_KEYSIZE; } else { - *desired_keysize = 16; + *keysize = 16; return CRYPT_OK; } } diff --git a/rc2.c b/src/ciphers/rc2.c similarity index 70% rename from rc2.c rename to src/ciphers/rc2.c index f3f8c31..68e53ea 100644 --- a/rc2.c +++ b/src/ciphers/rc2.c @@ -18,12 +18,16 @@ * Thanks to CodeView, SoftIce, and D86 for helping bring this code to * * the public. * \**********************************************************************/ +#include -#include +/** + @file rc2.c + Implementation of RC2 +*/ #ifdef RC2 -const struct _cipher_descriptor rc2_desc = { +const struct ltc_cipher_descriptor rc2_desc = { "rc2", 12, 8, 128, 8, 16, &rc2_setup, @@ -53,21 +57,29 @@ static const unsigned char permute[256] = { 197,243,219, 71,229,165,156,119, 10,166, 32,104,254,127,193,173 }; -int rc2_setup(const unsigned char *key, int keylen, int rounds, symmetric_key *skey) + /** + Initialize the RC2 block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +int rc2_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { unsigned *xkey = skey->rc2.xkey; unsigned char tmp[128]; unsigned T8, TM; int i, bits; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (keylen < 8 || keylen > 128) { return CRYPT_INVALID_KEYSIZE; } - if (rounds != 0 && rounds != 16) { + if (num_rounds != 0 && num_rounds != 16) { return CRYPT_INVALID_ROUNDS; } @@ -96,7 +108,7 @@ int rc2_setup(const unsigned char *key, int keylen, int rounds, symmetric_key *s xkey[i] = (unsigned)tmp[2*i] + ((unsigned)tmp[2*i+1] << 8); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(tmp, sizeof(tmp)); #endif @@ -106,29 +118,35 @@ int rc2_setup(const unsigned char *key, int keylen, int rounds, symmetric_key *s /**********************************************************************\ * Encrypt an 8-byte block of plaintext using the given key. * \**********************************************************************/ -#ifdef CLEAN_STACK -static void _rc2_ecb_encrypt( const unsigned char *plain, - unsigned char *cipher, +/** + Encrypts a block of text with RC2 + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _rc2_ecb_encrypt( const unsigned char *pt, + unsigned char *ct, symmetric_key *skey) #else -void rc2_ecb_encrypt( const unsigned char *plain, - unsigned char *cipher, +void rc2_ecb_encrypt( const unsigned char *pt, + unsigned char *ct, symmetric_key *skey) #endif { unsigned *xkey; unsigned x76, x54, x32, x10, i; - _ARGCHK(plain != NULL); - _ARGCHK(cipher != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); xkey = skey->rc2.xkey; - x76 = ((unsigned)plain[7] << 8) + (unsigned)plain[6]; - x54 = ((unsigned)plain[5] << 8) + (unsigned)plain[4]; - x32 = ((unsigned)plain[3] << 8) + (unsigned)plain[2]; - x10 = ((unsigned)plain[1] << 8) + (unsigned)plain[0]; + x76 = ((unsigned)pt[7] << 8) + (unsigned)pt[6]; + x54 = ((unsigned)pt[5] << 8) + (unsigned)pt[4]; + x32 = ((unsigned)pt[3] << 8) + (unsigned)pt[2]; + x10 = ((unsigned)pt[1] << 8) + (unsigned)pt[0]; for (i = 0; i < 16; i++) { x10 = (x10 + (x32 & ~x76) + (x54 & x76) + xkey[4*i+0]) & 0xFFFF; @@ -151,22 +169,22 @@ void rc2_ecb_encrypt( const unsigned char *plain, } } - cipher[0] = (unsigned char)x10; - cipher[1] = (unsigned char)(x10 >> 8); - cipher[2] = (unsigned char)x32; - cipher[3] = (unsigned char)(x32 >> 8); - cipher[4] = (unsigned char)x54; - cipher[5] = (unsigned char)(x54 >> 8); - cipher[6] = (unsigned char)x76; - cipher[7] = (unsigned char)(x76 >> 8); + ct[0] = (unsigned char)x10; + ct[1] = (unsigned char)(x10 >> 8); + ct[2] = (unsigned char)x32; + ct[3] = (unsigned char)(x32 >> 8); + ct[4] = (unsigned char)x54; + ct[5] = (unsigned char)(x54 >> 8); + ct[6] = (unsigned char)x76; + ct[7] = (unsigned char)(x76 >> 8); } -#ifdef CLEAN_STACK -void rc2_ecb_encrypt( const unsigned char *plain, - unsigned char *cipher, +#ifdef LTC_CLEAN_STACK +void rc2_ecb_encrypt( const unsigned char *pt, + unsigned char *ct, symmetric_key *skey) { - _rc2_ecb_encrypt(plain, cipher, skey); + _rc2_ecb_encrypt(pt, ct, skey); burn_stack(sizeof(unsigned *) + sizeof(unsigned) * 5); } #endif @@ -174,14 +192,19 @@ void rc2_ecb_encrypt( const unsigned char *plain, /**********************************************************************\ * Decrypt an 8-byte block of ciphertext using the given key. * \**********************************************************************/ - -#ifdef CLEAN_STACK -static void _rc2_ecb_decrypt( const unsigned char *cipher, - unsigned char *plain, +/** + Decrypts a block of text with RC2 + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _rc2_ecb_decrypt( const unsigned char *ct, + unsigned char *pt, symmetric_key *skey) #else -void rc2_ecb_decrypt( const unsigned char *cipher, - unsigned char *plain, +void rc2_ecb_decrypt( const unsigned char *ct, + unsigned char *pt, symmetric_key *skey) #endif { @@ -189,16 +212,16 @@ void rc2_ecb_decrypt( const unsigned char *cipher, unsigned *xkey; int i; - _ARGCHK(plain != NULL); - _ARGCHK(cipher != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); xkey = skey->rc2.xkey; - x76 = ((unsigned)cipher[7] << 8) + (unsigned)cipher[6]; - x54 = ((unsigned)cipher[5] << 8) + (unsigned)cipher[4]; - x32 = ((unsigned)cipher[3] << 8) + (unsigned)cipher[2]; - x10 = ((unsigned)cipher[1] << 8) + (unsigned)cipher[0]; + x76 = ((unsigned)ct[7] << 8) + (unsigned)ct[6]; + x54 = ((unsigned)ct[5] << 8) + (unsigned)ct[4]; + x32 = ((unsigned)ct[3] << 8) + (unsigned)ct[2]; + x10 = ((unsigned)ct[1] << 8) + (unsigned)ct[0]; for (i = 15; i >= 0; i--) { if (i == 4 || i == 10) { @@ -221,26 +244,30 @@ void rc2_ecb_decrypt( const unsigned char *cipher, x10 = (x10 - ((x32 & ~x76) + (x54 & x76) + xkey[4*i+0])) & 0xFFFF; } - plain[0] = (unsigned char)x10; - plain[1] = (unsigned char)(x10 >> 8); - plain[2] = (unsigned char)x32; - plain[3] = (unsigned char)(x32 >> 8); - plain[4] = (unsigned char)x54; - plain[5] = (unsigned char)(x54 >> 8); - plain[6] = (unsigned char)x76; - plain[7] = (unsigned char)(x76 >> 8); + pt[0] = (unsigned char)x10; + pt[1] = (unsigned char)(x10 >> 8); + pt[2] = (unsigned char)x32; + pt[3] = (unsigned char)(x32 >> 8); + pt[4] = (unsigned char)x54; + pt[5] = (unsigned char)(x54 >> 8); + pt[6] = (unsigned char)x76; + pt[7] = (unsigned char)(x76 >> 8); } -#ifdef CLEAN_STACK -void rc2_ecb_decrypt( const unsigned char *cipher, - unsigned char *plain, +#ifdef LTC_CLEAN_STACK +void rc2_ecb_decrypt( const unsigned char *ct, + unsigned char *pt, symmetric_key *skey) { - _rc2_ecb_decrypt(cipher, plain, skey); + _rc2_ecb_decrypt(ct, pt, skey); burn_stack(sizeof(unsigned *) + sizeof(unsigned) * 4 + sizeof(int)); } #endif +/** + Performs a self-test of the RC2 block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int rc2_test(void) { #ifndef LTC_TEST @@ -292,9 +319,14 @@ int rc2_test(void) #endif } +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ int rc2_keysize(int *keysize) { - _ARGCHK(keysize != NULL); + LTC_ARGCHK(keysize != NULL); if (*keysize < 8) { return CRYPT_INVALID_KEYSIZE; } else if (*keysize > 128) { diff --git a/rc5.c b/src/ciphers/rc5.c similarity index 72% rename from rc5.c rename to src/ciphers/rc5.c index 124deb9..809be04 100644 --- a/rc5.c +++ b/src/ciphers/rc5.c @@ -9,13 +9,16 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* RC5 code by Tom St Denis */ +/** + @file rc5.c + RC5 code by Tom St Denis +*/ -#include "mycrypt.h" +#include "tomcrypt.h" #ifdef RC5 -const struct _cipher_descriptor rc5_desc = +const struct ltc_cipher_descriptor rc5_desc = { "rc5", 2, @@ -37,7 +40,15 @@ static const ulong32 stab[50] = { 0x62482413UL, 0x007f9dccUL }; -#ifdef CLEAN_STACK + /** + Initialize the RC5 block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +#ifdef LTC_CLEAN_STACK static int _rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) #else int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) @@ -45,8 +56,8 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke { ulong32 L[64], *S, A, B, i, j, v, s, t, l; - _ARGCHK(skey != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); /* test parameters */ if (num_rounds == 0) { @@ -87,7 +98,7 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke s = 3 * MAX(t, j); l = j; for (A = B = i = j = v = 0; v < s; v++) { - A = S[i] = ROL(S[i] + A + B, 3); + A = S[i] = ROLc(S[i] + A + B, 3); B = L[j] = ROL(L[j] + A + B, (A+B)); if (++i == t) { i = 0; } if (++j == l) { j = 0; } @@ -95,7 +106,7 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { int x; @@ -105,26 +116,32 @@ int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke } #endif -#ifdef CLEAN_STACK -static void _rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with RC5 + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else -void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #endif { ulong32 A, B, *K; int r; - _ARGCHK(key != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); LOAD32L(A, &pt[0]); LOAD32L(B, &pt[4]); - A += key->rc5.K[0]; - B += key->rc5.K[1]; - K = key->rc5.K + 2; + A += skey->rc5.K[0]; + B += skey->rc5.K[1]; + K = skey->rc5.K + 2; - if ((key->rc5.rounds & 1) == 0) { - for (r = 0; r < key->rc5.rounds; r += 2) { + if ((skey->rc5.rounds & 1) == 0) { + for (r = 0; r < skey->rc5.rounds; r += 2) { A = ROL(A ^ B, B) + K[0]; B = ROL(B ^ A, A) + K[1]; A = ROL(A ^ B, B) + K[2]; @@ -132,7 +149,7 @@ void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key * K += 4; } } else { - for (r = 0; r < key->rc5.rounds; r++) { + for (r = 0; r < skey->rc5.rounds; r++) { A = ROL(A ^ B, B) + K[0]; B = ROL(B ^ A, A) + K[1]; K += 2; @@ -142,33 +159,39 @@ void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key * STORE32L(B, &ct[4]); } -#ifdef CLEAN_STACK -void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { - _rc5_ecb_encrypt(pt, ct, key); + _rc5_ecb_encrypt(pt, ct, skey); burn_stack(sizeof(ulong32) * 2 + sizeof(int)); } #endif -#ifdef CLEAN_STACK -static void _rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with RC5 + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else -void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #endif { ulong32 A, B, *K; int r; - _ARGCHK(key != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); LOAD32L(A, &ct[0]); LOAD32L(B, &ct[4]); - K = key->rc5.K + (key->rc5.rounds << 1); + K = skey->rc5.K + (skey->rc5.rounds << 1); - if ((key->rc5.rounds & 1) == 0) { + if ((skey->rc5.rounds & 1) == 0) { K -= 2; - for (r = key->rc5.rounds - 1; r >= 0; r -= 2) { + for (r = skey->rc5.rounds - 1; r >= 0; r -= 2) { B = ROR(B - K[3], A) ^ A; A = ROR(A - K[2], B) ^ B; B = ROR(B - K[1], A) ^ A; @@ -176,26 +199,30 @@ void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key * K -= 4; } } else { - for (r = key->rc5.rounds - 1; r >= 0; r--) { + for (r = skey->rc5.rounds - 1; r >= 0; r--) { B = ROR(B - K[1], A) ^ A; A = ROR(A - K[0], B) ^ B; K -= 2; } } - A -= key->rc5.K[0]; - B -= key->rc5.K[1]; + A -= skey->rc5.K[0]; + B -= skey->rc5.K[1]; STORE32L(A, &pt[0]); STORE32L(B, &pt[4]); } -#ifdef CLEAN_STACK -void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { - _rc5_ecb_decrypt(ct, pt, key); + _rc5_ecb_decrypt(ct, pt, skey); burn_stack(sizeof(ulong32) * 2 + sizeof(int)); } #endif +/** + Performs a self-test of the RC5 block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int rc5_test(void) { #ifndef LTC_TEST @@ -252,13 +279,18 @@ int rc5_test(void) #endif } -int rc5_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int rc5_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if (*desired_keysize < 8) { + LTC_ARGCHK(keysize != NULL); + if (*keysize < 8) { return CRYPT_INVALID_KEYSIZE; - } else if (*desired_keysize > 128) { - *desired_keysize = 128; + } else if (*keysize > 128) { + *keysize = 128; } return CRYPT_OK; } diff --git a/rc6.c b/src/ciphers/rc6.c similarity index 76% rename from rc6.c rename to src/ciphers/rc6.c index 62a2cf5..8ec389a 100644 --- a/rc6.c +++ b/src/ciphers/rc6.c @@ -9,12 +9,15 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* RC6 code by Tom St Denis */ -#include "mycrypt.h" +/** + @file rc6.c + RC6 code by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef RC6 -const struct _cipher_descriptor rc6_desc = +const struct ltc_cipher_descriptor rc6_desc = { "rc6", 3, @@ -34,7 +37,15 @@ static const ulong32 stab[44] = { 0x7ed08883UL, 0x1d08023cUL, 0xbb3f7bf5UL, 0x5976f5aeUL, 0xf7ae6f67UL, 0x95e5e920UL, 0x341d62d9UL, 0xd254dc92UL, 0x708c564bUL, 0x0ec3d004UL, 0xacfb49bdUL, 0x4b32c376UL }; -#ifdef CLEAN_STACK + /** + Initialize the RC6 block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +#ifdef LTC_CLEAN_STACK static int _rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) #else int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) @@ -42,8 +53,8 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke { ulong32 L[64], S[50], A, B, i, j, v, s, l; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); /* test parameters */ if (num_rounds != 0 && num_rounds != 20) { @@ -77,7 +88,7 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke s = 3 * MAX(44, j); l = j; for (A = B = i = j = v = 0; v < s; v++) { - A = S[i] = ROL(S[i] + A + B, 3); + A = S[i] = ROLc(S[i] + A + B, 3); B = L[j] = ROL(L[j] + A + B, (A+B)); if (++i == 44) { i = 0; } if (++j == l) { j = 0; } @@ -90,7 +101,7 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { int x; @@ -100,30 +111,36 @@ int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_ke } #endif -#ifdef CLEAN_STACK -static void _rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with RC6 + @param pt The input plaintext (16 bytes) + @param ct The output ciphertext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else -void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #endif { ulong32 a,b,c,d,t,u, *K; int r; - _ARGCHK(key != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); LOAD32L(a,&pt[0]);LOAD32L(b,&pt[4]);LOAD32L(c,&pt[8]);LOAD32L(d,&pt[12]); - b += key->rc6.K[0]; - d += key->rc6.K[1]; + b += skey->rc6.K[0]; + d += skey->rc6.K[1]; #define RND(a,b,c,d) \ - t = (b * (b + b + 1)); t = ROL(t, 5); \ - u = (d * (d + d + 1)); u = ROL(u, 5); \ + t = (b * (b + b + 1)); t = ROLc(t, 5); \ + u = (d * (d + d + 1)); u = ROLc(u, 5); \ a = ROL(a^t,u) + K[0]; \ c = ROL(c^u,t) + K[1]; K += 2; - K = key->rc6.K + 2; + K = skey->rc6.K + 2; for (r = 0; r < 20; r += 4) { RND(a,b,c,d); RND(b,c,d,a); @@ -133,43 +150,49 @@ void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key * #undef RND - a += key->rc6.K[42]; - c += key->rc6.K[43]; + a += skey->rc6.K[42]; + c += skey->rc6.K[43]; STORE32L(a,&ct[0]);STORE32L(b,&ct[4]);STORE32L(c,&ct[8]);STORE32L(d,&ct[12]); } -#ifdef CLEAN_STACK -void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { - _rc6_ecb_encrypt(pt, ct, key); + _rc6_ecb_encrypt(pt, ct, skey); burn_stack(sizeof(ulong32) * 6 + sizeof(int)); } #endif -#ifdef CLEAN_STACK -static void _rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with RC6 + @param ct The input ciphertext (16 bytes) + @param pt The output plaintext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else -void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #endif { ulong32 a,b,c,d,t,u, *K; int r; - _ARGCHK(key != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); LOAD32L(a,&ct[0]);LOAD32L(b,&ct[4]);LOAD32L(c,&ct[8]);LOAD32L(d,&ct[12]); - a -= key->rc6.K[42]; - c -= key->rc6.K[43]; + a -= skey->rc6.K[42]; + c -= skey->rc6.K[43]; #define RND(a,b,c,d) \ - t = (b * (b + b + 1)); t = ROL(t, 5); \ - u = (d * (d + d + 1)); u = ROL(u, 5); \ + t = (b * (b + b + 1)); t = ROLc(t, 5); \ + u = (d * (d + d + 1)); u = ROLc(u, 5); \ c = ROR(c - K[1], t) ^ u; \ a = ROR(a - K[0], u) ^ t; K -= 2; - K = key->rc6.K + 40; + K = skey->rc6.K + 40; for (r = 0; r < 20; r += 4) { RND(d,a,b,c); @@ -180,19 +203,23 @@ void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key * #undef RND - b -= key->rc6.K[0]; - d -= key->rc6.K[1]; + b -= skey->rc6.K[0]; + d -= skey->rc6.K[1]; STORE32L(a,&pt[0]);STORE32L(b,&pt[4]);STORE32L(c,&pt[8]);STORE32L(d,&pt[12]); } -#ifdef CLEAN_STACK -void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { - _rc6_ecb_decrypt(ct, pt, key); + _rc6_ecb_decrypt(ct, pt, skey); burn_stack(sizeof(ulong32) * 6 + sizeof(int)); } #endif +/** + Performs a self-test of the RC6 block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int rc6_test(void) { #ifndef LTC_TEST @@ -282,13 +309,18 @@ int rc6_test(void) #endif } -int rc6_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int rc6_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if (*desired_keysize < 8) { + LTC_ARGCHK(keysize != NULL); + if (*keysize < 8) { return CRYPT_INVALID_KEYSIZE; - } else if (*desired_keysize > 128) { - *desired_keysize = 128; + } else if (*keysize > 128) { + *keysize = 128; } return CRYPT_OK; } diff --git a/safer.c b/src/ciphers/safer/safer.c similarity index 95% rename from safer.c rename to src/ciphers/safer/safer.c index 580872a..491bf2b 100644 --- a/safer.c +++ b/src/ciphers/safer/safer.c @@ -28,11 +28,11 @@ * *******************************************************************************/ -#include +#include #ifdef SAFER -const struct _cipher_descriptor +const struct ltc_cipher_descriptor safer_k64_desc = { "safer-k64", 8, 8, 8, 8, SAFER_K64_DEFAULT_NOF_ROUNDS, @@ -89,7 +89,7 @@ const struct _cipher_descriptor /******************* Types ****************************************************/ extern const unsigned char safer_ebox[], safer_lbox[]; -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static void _Safer_Expand_Userkey(const unsigned char *userkey_1, const unsigned char *userkey_2, unsigned int nof_rounds, @@ -151,13 +151,13 @@ static void Safer_Expand_Userkey(const unsigned char *userkey_1, } } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(ka, sizeof(ka)); zeromem(kb, sizeof(kb)); #endif } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static void Safer_Expand_Userkey(const unsigned char *userkey_1, const unsigned char *userkey_2, unsigned int nof_rounds, @@ -171,8 +171,8 @@ static void Safer_Expand_Userkey(const unsigned char *userkey_1, int safer_k64_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) { - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { return CRYPT_INVALID_ROUNDS; @@ -188,8 +188,8 @@ int safer_k64_setup(const unsigned char *key, int keylen, int numrounds, symmetr int safer_sk64_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) { - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { return CRYPT_INVALID_ROUNDS; @@ -205,8 +205,8 @@ int safer_sk64_setup(const unsigned char *key, int keylen, int numrounds, symmet int safer_k128_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) { - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { return CRYPT_INVALID_ROUNDS; @@ -222,8 +222,8 @@ int safer_k128_setup(const unsigned char *key, int keylen, int numrounds, symmet int safer_sk128_setup(const unsigned char *key, int keylen, int numrounds, symmetric_key *skey) { - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (numrounds != 0 && (numrounds < 6 || numrounds > SAFER_MAX_NOF_ROUNDS)) { return CRYPT_INVALID_ROUNDS; @@ -237,7 +237,7 @@ int safer_sk128_setup(const unsigned char *key, int keylen, int numrounds, symme return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static void _safer_ecb_encrypt(const unsigned char *block_in, unsigned char *block_out, symmetric_key *skey) @@ -250,9 +250,9 @@ void safer_ecb_encrypt(const unsigned char *block_in, unsigned int round; unsigned char *key; - _ARGCHK(block_in != NULL); - _ARGCHK(block_out != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(block_in != NULL); + LTC_ARGCHK(block_out != NULL); + LTC_ARGCHK(skey != NULL); key = skey->safer.key; a = block_in[0]; b = block_in[1]; c = block_in[2]; d = block_in[3]; @@ -279,7 +279,7 @@ void safer_ecb_encrypt(const unsigned char *block_in, block_out[6] = g & 0xFF; block_out[7] = h & 0xFF; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK void safer_ecb_encrypt(const unsigned char *block_in, unsigned char *block_out, symmetric_key *skey) @@ -289,7 +289,7 @@ void safer_ecb_encrypt(const unsigned char *block_in, } #endif -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static void _safer_ecb_decrypt(const unsigned char *block_in, unsigned char *block_out, symmetric_key *skey) @@ -302,9 +302,9 @@ void safer_ecb_decrypt(const unsigned char *block_in, unsigned int round; unsigned char *key; - _ARGCHK(block_in != NULL); - _ARGCHK(block_out != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(block_in != NULL); + LTC_ARGCHK(block_out != NULL); + LTC_ARGCHK(skey != NULL); key = skey->safer.key; a = block_in[0]; b = block_in[1]; c = block_in[2]; d = block_in[3]; @@ -332,7 +332,7 @@ void safer_ecb_decrypt(const unsigned char *block_in, block_out[6] = g & 0xFF; block_out[7] = h & 0xFF; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK void safer_ecb_decrypt(const unsigned char *block_in, unsigned char *block_out, symmetric_key *skey) @@ -344,7 +344,7 @@ void safer_ecb_decrypt(const unsigned char *block_in, int safer_64_keysize(int *keysize) { - _ARGCHK(keysize != NULL); + LTC_ARGCHK(keysize != NULL); if (*keysize < 8) { return CRYPT_INVALID_KEYSIZE; } else { @@ -355,7 +355,7 @@ int safer_64_keysize(int *keysize) int safer_128_keysize(int *keysize) { - _ARGCHK(keysize != NULL); + LTC_ARGCHK(keysize != NULL); if (*keysize < 16) { return CRYPT_INVALID_KEYSIZE; } else { diff --git a/safer_tab.c b/src/ciphers/safer/safer_tab.c similarity index 97% rename from safer_tab.c rename to src/ciphers/safer/safer_tab.c index 06859db..5d1c31e 100644 --- a/safer_tab.c +++ b/src/ciphers/safer/safer_tab.c @@ -9,7 +9,12 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +/** + @file safer_tab.c + Tables for SAFER block ciphers +*/ + +#include "tomcrypt.h" #if defined(SAFERP) || defined(SAFER) diff --git a/saferp.c b/src/ciphers/safer/saferp.c similarity index 92% rename from saferp.c rename to src/ciphers/safer/saferp.c index 8415deb..1d982b3 100644 --- a/saferp.c +++ b/src/ciphers/safer/saferp.c @@ -9,12 +9,15 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* SAFER+ Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file saferp.c + SAFER+ Implementation by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef SAFERP -const struct _cipher_descriptor saferp_desc = +const struct ltc_cipher_descriptor saferp_desc = { "safer+", 4, @@ -129,7 +132,7 @@ extern const unsigned char safer_ebox[], safer_lbox[]; iSHUF(b2, b); iPHT(b); \ iSHUF(b, b2); iPHT(b2); -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE static void _round(unsigned char *b, int i, symmetric_key *skey) { @@ -200,14 +203,22 @@ static const unsigned char safer_bias[33][16] = { { 53, 72, 156, 81, 47, 59, 85, 227, 192, 159, 216, 211, 243, 141, 177, 255}, { 62, 220, 134, 119, 215, 166, 17, 251, 244, 186, 146, 145, 100, 131, 241, 51}}; + /** + Initialize the SAFER+ block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { unsigned x, y, z; unsigned char t[33]; static const int rounds[3] = { 8, 12, 16 }; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); /* check arguments */ if (keylen != 16 && keylen != 24 && keylen != 32) { @@ -305,20 +316,26 @@ int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric } skey->saferp.rounds = 16; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(t, sizeof(t)); #endif return CRYPT_OK; } +/** + Encrypts a block of text with SAFER+ + @param pt The input plaintext (16 bytes) + @param ct The output ciphertext (16 bytes) + @param skey The key as scheduled +*/ void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { unsigned char b[16]; int x; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); /* do eight rounds */ for (x = 0; x < 16; x++) { @@ -362,19 +379,25 @@ void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ke ct[13] = (b[13] + skey->saferp.K[skey->saferp.rounds*2][13]) & 255; ct[14] = (b[14] + skey->saferp.K[skey->saferp.rounds*2][14]) & 255; ct[15] = b[15] ^ skey->saferp.K[skey->saferp.rounds*2][15]; -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(b, sizeof(b)); #endif } +/** + Decrypts a block of text with SAFER+ + @param ct The input ciphertext (16 bytes) + @param pt The output plaintext (16 bytes) + @param skey The key as scheduled +*/ void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { unsigned char b[16]; int x; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); /* do eight rounds */ b[0] = ct[0] ^ skey->saferp.K[skey->saferp.rounds*2][0]; @@ -418,11 +441,15 @@ void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ke for (x = 0; x < 16; x++) { pt[x] = b[x]; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(b, sizeof(b)); #endif } +/** + Performs a self-test of the SAFER+ block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int saferp_test(void) { #ifndef LTC_TEST @@ -489,18 +516,23 @@ int saferp_test(void) #endif } -int saferp_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int saferp_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); + LTC_ARGCHK(keysize != NULL); - if (*desired_keysize < 16) + if (*keysize < 16) return CRYPT_INVALID_KEYSIZE; - if (*desired_keysize < 24) { - *desired_keysize = 16; - } else if (*desired_keysize < 32) { - *desired_keysize = 24; + if (*keysize < 24) { + *keysize = 16; + } else if (*keysize < 32) { + *keysize = 24; } else { - *desired_keysize = 32; + *keysize = 32; } return CRYPT_OK; } diff --git a/skipjack.c b/src/ciphers/skipjack.c similarity index 78% rename from skipjack.c rename to src/ciphers/skipjack.c index a66efa1..acc1d72 100644 --- a/skipjack.c +++ b/src/ciphers/skipjack.c @@ -9,12 +9,15 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Skipjack Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file skipjack.c + Skipjack Implementation by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef SKIPJACK -const struct _cipher_descriptor skipjack_desc = +const struct ltc_cipher_descriptor skipjack_desc = { "skipjack", 17, @@ -51,12 +54,20 @@ static const int keystep[] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 0 }; /* simple x - 1 (mod 10) in one step */ static const int ikeystep[] = { 9, 0, 1, 2, 3, 4, 5, 6, 7, 8 }; + /** + Initialize the Skipjack block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { int x; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); if (keylen != 10) { return CRYPT_INVALID_KEYSIZE; @@ -75,24 +86,24 @@ int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetr } #define RULE_A \ - tmp = g_func(w1, &kp, key->skipjack.key); \ + tmp = g_func(w1, &kp, skey->skipjack.key); \ w1 = tmp ^ w4 ^ x; \ w4 = w3; w3 = w2; \ w2 = tmp; #define RULE_B \ - tmp = g_func(w1, &kp, key->skipjack.key); \ + tmp = g_func(w1, &kp, skey->skipjack.key); \ tmp1 = w4; w4 = w3; \ w3 = w1 ^ w2 ^ x; \ w1 = tmp1; w2 = tmp; #define RULE_A1 \ tmp = w1 ^ w2 ^ x; \ - w1 = ig_func(w2, &kp, key->skipjack.key); \ + w1 = ig_func(w2, &kp, skey->skipjack.key); \ w2 = w3; w3 = w4; w4 = tmp; #define RULE_B1 \ - tmp = ig_func(w2, &kp, key->skipjack.key); \ + tmp = ig_func(w2, &kp, skey->skipjack.key); \ w2 = tmp ^ w3 ^ x; \ w3 = w4; w4 = w1; w1 = tmp; @@ -120,18 +131,24 @@ static unsigned ig_func(unsigned w, int *kp, unsigned char *key) return ((unsigned)g1<<8)|(unsigned)g2; } -#ifdef CLEAN_STACK -static void _skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with Skipjack + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else -void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #endif { unsigned w1,w2,w3,w4,tmp,tmp1; int x, kp; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); /* load block */ w1 = ((unsigned)pt[0]<<8)|pt[1]; @@ -166,26 +183,32 @@ void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ ct[6] = (w4>>8)&255; ct[7] = w4&255; } -#ifdef CLEAN_STACK -void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { - _skipjack_ecb_encrypt(pt, ct, key); + _skipjack_ecb_encrypt(pt, ct, skey); burn_stack(sizeof(unsigned) * 8 + sizeof(int) * 2); } #endif -#ifdef CLEAN_STACK -static void _skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with Skipjack + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else -void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #endif { unsigned w1,w2,w3,w4,tmp; int x, kp; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); /* load block */ w1 = ((unsigned)ct[0]<<8)|ct[1]; @@ -224,14 +247,18 @@ void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ pt[6] = (w4>>8)&255; pt[7] = w4&255; } -#ifdef CLEAN_STACK -void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { - _skipjack_ecb_decrypt(ct, pt, key); + _skipjack_ecb_decrypt(ct, pt, skey); burn_stack(sizeof(unsigned) * 7 + sizeof(int) * 2); } #endif +/** + Performs a self-test of the Skipjack block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int skipjack_test(void) { #ifndef LTC_TEST @@ -276,13 +303,18 @@ int skipjack_test(void) #endif } -int skipjack_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int skipjack_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if (*desired_keysize < 10) { + LTC_ARGCHK(keysize != NULL); + if (*keysize < 10) { return CRYPT_INVALID_KEYSIZE; - } else if (*desired_keysize > 10) { - *desired_keysize = 10; + } else if (*keysize > 10) { + *keysize = 10; } return CRYPT_OK; } diff --git a/twofish.c b/src/ciphers/twofish/twofish.c similarity index 81% rename from twofish.c rename to src/ciphers/twofish/twofish.c index b618b98..cae0969 100644 --- a/twofish.c +++ b/src/ciphers/twofish/twofish.c @@ -9,8 +9,11 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Implementation of Twofish by Tom St Denis */ -#include "mycrypt.h" + /** + @file twofish.c + Implementation of Twofish by Tom St Denis + */ +#include "tomcrypt.h" #ifdef TWOFISH @@ -21,7 +24,7 @@ #endif #endif -const struct _cipher_descriptor twofish_desc = +const struct ltc_cipher_descriptor twofish_desc = { "twofish", 7, @@ -86,7 +89,7 @@ static const unsigned char qbox[2][4][16] = { }; /* computes S_i[x] */ -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static ulong32 _sbox(int i, ulong32 x) #else static ulong32 sbox(int i, ulong32 x) @@ -125,7 +128,7 @@ static ulong32 sbox(int i, ulong32 x) return (ulong32)y; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static ulong32 sbox(int i, ulong32 x) { ulong32 y; @@ -133,7 +136,7 @@ static ulong32 sbox(int i, ulong32 x) burn_stack(sizeof(unsigned char) * 11); return y; } -#endif /* CLEAN_STACK */ +#endif /* LTC_CLEAN_STACK */ #endif /* TWOFISH_TABLES */ @@ -270,10 +273,10 @@ static void h_func(const unsigned char *in, unsigned char *out, unsigned char *M /* for GCC we don't use pointer aliases */ #if defined(__GNUC__) - #define S1 key->twofish.S[0] - #define S2 key->twofish.S[1] - #define S3 key->twofish.S[2] - #define S4 key->twofish.S[3] + #define S1 skey->twofish.S[0] + #define S2 skey->twofish.S[1] + #define S3 skey->twofish.S[2] + #define S4 skey->twofish.S[3] #endif /* the G function */ @@ -282,7 +285,7 @@ static void h_func(const unsigned char *in, unsigned char *out, unsigned char *M #else -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static ulong32 _g_func(ulong32 x, symmetric_key *key) #else static ulong32 g_func(ulong32 x, symmetric_key *key) @@ -313,9 +316,9 @@ static ulong32 g_func(ulong32 x, symmetric_key *key) return res; } -#define g1_func(x, key) g_func(ROL(x, 8), key) +#define g1_func(x, key) g_func(ROLc(x, 8), key) -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static ulong32 g_func(ulong32 x, symmetric_key *key) { ulong32 y; @@ -323,11 +326,19 @@ static ulong32 g_func(ulong32 x, symmetric_key *key) burn_stack(sizeof(unsigned char) * 4 + sizeof(ulong32)); return y; } -#endif /* CLEAN_STACK */ +#endif /* LTC_CLEAN_STACK */ #endif /* TWOFISH_SMALL */ -#ifdef CLEAN_STACK + /** + Initialize the Twofish block cipher + @param key The symmetric key you wish to pass + @param keylen The key length in bytes + @param num_rounds The number of rounds desired (0 for default) + @param skey The key in as scheduled by this function. + @return CRYPT_OK if successful + */ +#ifdef LTC_CLEAN_STACK static int _twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) #else int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) @@ -340,8 +351,8 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri unsigned char tmp[4], tmp2[4], M[8*4]; ulong32 A, B; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); /* invalid arguments? */ if (num_rounds != 16 && num_rounds != 0) { @@ -386,13 +397,13 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri } h_func(tmp, tmp2, M, k, 1); LOAD32L(B, tmp2); - B = ROL(B, 8); + B = ROLc(B, 8); /* K[2i] = A + B */ skey->twofish.K[x+x] = (A + B) & 0xFFFFFFFFUL; /* K[2i+1] = (A + 2B) <<< 9 */ - skey->twofish.K[x+x+1] = ROL(B + B + A, 9); + skey->twofish.K[x+x+1] = ROLc(B + B + A, 9); } #ifndef TWOFISH_SMALL @@ -437,7 +448,7 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey) { int x; @@ -447,10 +458,16 @@ int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetri } #endif -#ifdef CLEAN_STACK -static void _twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with Twofish + @param pt The input plaintext (16 bytes) + @param ct The output ciphertext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #else -void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) #endif { ulong32 a,b,c,d,ta,tb,tc,td,t1,t2, *k; @@ -459,61 +476,67 @@ void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_k ulong32 *S1, *S2, *S3, *S4; #endif - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); #if !defined(TWOFISH_SMALL) && !defined(__GNUC__) - S1 = key->twofish.S[0]; - S2 = key->twofish.S[1]; - S3 = key->twofish.S[2]; - S4 = key->twofish.S[3]; + S1 = skey->twofish.S[0]; + S2 = skey->twofish.S[1]; + S3 = skey->twofish.S[2]; + S4 = skey->twofish.S[3]; #endif LOAD32L(a,&pt[0]); LOAD32L(b,&pt[4]); LOAD32L(c,&pt[8]); LOAD32L(d,&pt[12]); - a ^= key->twofish.K[0]; - b ^= key->twofish.K[1]; - c ^= key->twofish.K[2]; - d ^= key->twofish.K[3]; + a ^= skey->twofish.K[0]; + b ^= skey->twofish.K[1]; + c ^= skey->twofish.K[2]; + d ^= skey->twofish.K[3]; - k = key->twofish.K + 8; + k = skey->twofish.K + 8; for (r = 8; r != 0; --r) { - t2 = g1_func(b, key); - t1 = g_func(a, key) + t2; - c = ROR(c ^ (t1 + k[0]), 1); - d = ROL(d, 1) ^ (t2 + t1 + k[1]); + t2 = g1_func(b, skey); + t1 = g_func(a, skey) + t2; + c = RORc(c ^ (t1 + k[0]), 1); + d = ROLc(d, 1) ^ (t2 + t1 + k[1]); - t2 = g1_func(d, key); - t1 = g_func(c, key) + t2; - a = ROR(a ^ (t1 + k[2]), 1); - b = ROL(b, 1) ^ (t2 + t1 + k[3]); + t2 = g1_func(d, skey); + t1 = g_func(c, skey) + t2; + a = RORc(a ^ (t1 + k[2]), 1); + b = ROLc(b, 1) ^ (t2 + t1 + k[3]); k += 4; } /* output with "undo last swap" */ - ta = c ^ key->twofish.K[4]; - tb = d ^ key->twofish.K[5]; - tc = a ^ key->twofish.K[6]; - td = b ^ key->twofish.K[7]; + ta = c ^ skey->twofish.K[4]; + tb = d ^ skey->twofish.K[5]; + tc = a ^ skey->twofish.K[6]; + td = b ^ skey->twofish.K[7]; /* store output */ STORE32L(ta,&ct[0]); STORE32L(tb,&ct[4]); STORE32L(tc,&ct[8]); STORE32L(td,&ct[12]); } -#ifdef CLEAN_STACK -void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { - _twofish_ecb_encrypt(pt, ct, key); + _twofish_ecb_encrypt(pt, ct, skey); burn_stack(sizeof(ulong32) * 10 + sizeof(int)); } #endif -#ifdef CLEAN_STACK -static void _twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with Twofish + @param ct The input ciphertext (16 bytes) + @param pt The output plaintext (16 bytes) + @param skey The key as scheduled +*/ +#ifdef LTC_CLEAN_STACK +static void _twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #else -void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) #endif { ulong32 a,b,c,d,ta,tb,tc,td,t1,t2, *k; @@ -522,15 +545,15 @@ void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_k ulong32 *S1, *S2, *S3, *S4; #endif - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); #if !defined(TWOFISH_SMALL) && !defined(__GNUC__) - S1 = key->twofish.S[0]; - S2 = key->twofish.S[1]; - S3 = key->twofish.S[2]; - S4 = key->twofish.S[3]; + S1 = skey->twofish.S[0]; + S2 = skey->twofish.S[1]; + S3 = skey->twofish.S[2]; + S4 = skey->twofish.S[3]; #endif /* load input */ @@ -538,44 +561,48 @@ void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_k LOAD32L(tc,&ct[8]); LOAD32L(td,&ct[12]); /* undo undo final swap */ - a = tc ^ key->twofish.K[6]; - b = td ^ key->twofish.K[7]; - c = ta ^ key->twofish.K[4]; - d = tb ^ key->twofish.K[5]; + a = tc ^ skey->twofish.K[6]; + b = td ^ skey->twofish.K[7]; + c = ta ^ skey->twofish.K[4]; + d = tb ^ skey->twofish.K[5]; - k = key->twofish.K + 36; + k = skey->twofish.K + 36; for (r = 8; r != 0; --r) { - t2 = g1_func(d, key); - t1 = g_func(c, key) + t2; - a = ROL(a, 1) ^ (t1 + k[2]); - b = ROR(b ^ (t2 + t1 + k[3]), 1); + t2 = g1_func(d, skey); + t1 = g_func(c, skey) + t2; + a = ROLc(a, 1) ^ (t1 + k[2]); + b = RORc(b ^ (t2 + t1 + k[3]), 1); - t2 = g1_func(b, key); + t2 = g1_func(b, skey); t1 = g_func(a, key) + t2; - c = ROL(c, 1) ^ (t1 + k[0]); - d = ROR(d ^ (t2 + t1 + k[1]), 1); + c = ROLc(c, 1) ^ (t1 + k[0]); + d = RORc(d ^ (t2 + t1 + k[1]), 1); k -= 4; } /* pre-white */ - a ^= key->twofish.K[0]; - b ^= key->twofish.K[1]; - c ^= key->twofish.K[2]; - d ^= key->twofish.K[3]; + a ^= skey->twofish.K[0]; + b ^= skey->twofish.K[1]; + c ^= skey->twofish.K[2]; + d ^= skey->twofish.K[3]; /* store */ STORE32L(a, &pt[0]); STORE32L(b, &pt[4]); STORE32L(c, &pt[8]); STORE32L(d, &pt[12]); } -#ifdef CLEAN_STACK -void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +#ifdef LTC_CLEAN_STACK +void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { - _twofish_ecb_decrypt(ct, pt, key); + _twofish_ecb_decrypt(ct, pt, skey); burn_stack(sizeof(ulong32) * 10 + sizeof(int)); } #endif +/** + Performs a self-test of the Twofish block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int twofish_test(void) { #ifndef LTC_TEST @@ -638,19 +665,24 @@ int twofish_test(void) #endif } -int twofish_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int twofish_keysize(int *keysize) { - _ARGCHK(desired_keysize); - if (*desired_keysize < 16) + LTC_ARGCHK(keysize); + if (*keysize < 16) return CRYPT_INVALID_KEYSIZE; - if (*desired_keysize < 24) { - *desired_keysize = 16; + if (*keysize < 24) { + *keysize = 16; return CRYPT_OK; - } else if (*desired_keysize < 32) { - *desired_keysize = 24; + } else if (*keysize < 32) { + *keysize = 24; return CRYPT_OK; } else { - *desired_keysize = 32; + *keysize = 32; return CRYPT_OK; } } diff --git a/twofish_tab.c b/src/ciphers/twofish/twofish_tab.c similarity index 99% rename from twofish_tab.c rename to src/ciphers/twofish/twofish_tab.c index 5a2bb5b..a7cfd80 100644 --- a/twofish_tab.c +++ b/src/ciphers/twofish/twofish_tab.c @@ -9,6 +9,10 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ + /** + @file twofish_tab.c + Twofish tables, Tom St Denis + */ #ifdef TWOFISH_TABLES /* pre generated 8x8 tables from the four 4x4s */ diff --git a/xtea.c b/src/ciphers/xtea.c similarity index 54% rename from xtea.c rename to src/ciphers/xtea.c index 1434149..42cc81d 100644 --- a/xtea.c +++ b/src/ciphers/xtea.c @@ -9,11 +9,15 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +/** + @file xtea.c + Implementation of XTEA, Tom St Denis +*/ +#include "tomcrypt.h" #ifdef XTEA -const struct _cipher_descriptor xtea_desc = +const struct ltc_cipher_descriptor xtea_desc = { "xtea", 1, @@ -29,8 +33,8 @@ int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_k { unsigned long x, sum, K[4]; - _ARGCHK(key != NULL); - _ARGCHK(skey != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(skey != NULL); /* check arguments */ if (keylen != 16) { @@ -53,69 +57,85 @@ int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_k skey->xtea.B[x] = (sum + K[(sum>>11)&3]) & 0xFFFFFFFFUL; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(&K, sizeof(K)); #endif return CRYPT_OK; } -void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key) +/** + Encrypts a block of text with XTEA + @param pt The input plaintext (8 bytes) + @param ct The output ciphertext (8 bytes) + @param skey The key as scheduled +*/ +void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey) { unsigned long y, z; int r; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32L(y, &pt[0]); LOAD32L(z, &pt[4]); for (r = 0; r < 32; r += 4) { - y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r])) & 0xFFFFFFFFUL; - z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r])) & 0xFFFFFFFFUL; + y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r])) & 0xFFFFFFFFUL; + z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r])) & 0xFFFFFFFFUL; - y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r+1])) & 0xFFFFFFFFUL; - z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r+1])) & 0xFFFFFFFFUL; + y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r+1])) & 0xFFFFFFFFUL; + z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r+1])) & 0xFFFFFFFFUL; - y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r+2])) & 0xFFFFFFFFUL; - z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r+2])) & 0xFFFFFFFFUL; + y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r+2])) & 0xFFFFFFFFUL; + z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r+2])) & 0xFFFFFFFFUL; - y = (y + ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r+3])) & 0xFFFFFFFFUL; - z = (z + ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r+3])) & 0xFFFFFFFFUL; + y = (y + ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r+3])) & 0xFFFFFFFFUL; + z = (z + ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r+3])) & 0xFFFFFFFFUL; } STORE32L(y, &ct[0]); STORE32L(z, &ct[4]); } -void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key) +/** + Decrypts a block of text with XTEA + @param ct The input ciphertext (8 bytes) + @param pt The output plaintext (8 bytes) + @param skey The key as scheduled +*/ +void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey) { unsigned long y, z; int r; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(skey != NULL); LOAD32L(y, &ct[0]); LOAD32L(z, &ct[4]); for (r = 31; r >= 0; r -= 4) { - z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r])) & 0xFFFFFFFFUL; - y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r])) & 0xFFFFFFFFUL; + z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r])) & 0xFFFFFFFFUL; + y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r])) & 0xFFFFFFFFUL; - z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r-1])) & 0xFFFFFFFFUL; - y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r-1])) & 0xFFFFFFFFUL; + z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r-1])) & 0xFFFFFFFFUL; + y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r-1])) & 0xFFFFFFFFUL; - z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r-2])) & 0xFFFFFFFFUL; - y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r-2])) & 0xFFFFFFFFUL; + z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r-2])) & 0xFFFFFFFFUL; + y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r-2])) & 0xFFFFFFFFUL; - z = (z - ((((y<<4)^(y>>5)) + y) ^ key->xtea.B[r-3])) & 0xFFFFFFFFUL; - y = (y - ((((z<<4)^(z>>5)) + z) ^ key->xtea.A[r-3])) & 0xFFFFFFFFUL; + z = (z - ((((y<<4)^(y>>5)) + y) ^ skey->xtea.B[r-3])) & 0xFFFFFFFFUL; + y = (y - ((((z<<4)^(z>>5)) + z) ^ skey->xtea.A[r-3])) & 0xFFFFFFFFUL; } STORE32L(y, &pt[0]); STORE32L(z, &pt[4]); } +/** + Performs a self-test of the XTEA block cipher + @return CRYPT_OK if functional, CRYPT_NOP if self-test has been disabled +*/ int xtea_test(void) { #ifndef LTC_TEST @@ -152,13 +172,18 @@ int xtea_test(void) #endif } -int xtea_keysize(int *desired_keysize) +/** + Gets suitable key size + @param keysize [in/out] The length of the recommended key (in bytes). This function will store the suitable size back in this variable. + @return CRYPT_OK if the input key size is acceptable. +*/ +int xtea_keysize(int *keysize) { - _ARGCHK(desired_keysize != NULL); - if (*desired_keysize < 16) { + LTC_ARGCHK(keysize != NULL); + if (*keysize < 16) { return CRYPT_INVALID_KEYSIZE; } - *desired_keysize = 16; + *keysize = 16; return CRYPT_OK; } diff --git a/src/encauth/eax/eax_addheader.c b/src/encauth/eax/eax_addheader.c new file mode 100644 index 0000000..1ec2300 --- /dev/null +++ b/src/encauth/eax/eax_addheader.c @@ -0,0 +1,34 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +/** + @file eax_addheader.c + EAX implementation, add meta-data, by Tom St Denis +*/ +#include "tomcrypt.h" + +#ifdef EAX_MODE + +/** + add header (metadata) to the stream + @param eax The current EAX state + @param header The header (meta-data) data you wish to add to the state + @param length The length of the header data + @return CRYPT_OK if successful +*/ +int eax_addheader(eax_state *eax, const unsigned char *header, + unsigned long length) +{ + LTC_ARGCHK(eax != NULL); + LTC_ARGCHK(header != NULL); + return omac_process(&eax->headeromac, header, length); +} + +#endif diff --git a/eax_decrypt.c b/src/encauth/eax/eax_decrypt.c similarity index 56% rename from eax_decrypt.c rename to src/encauth/eax/eax_decrypt.c index de7c290..4217254 100644 --- a/eax_decrypt.c +++ b/src/encauth/eax/eax_decrypt.c @@ -9,18 +9,30 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file eax_decrypt.c + EAX implementation, decrypt block, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef EAX_MODE -int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt, unsigned long length) +/** + Decrypt data with the EAX protocol + @param eax The EAX state + @param ct The ciphertext + @param pt [out] The plaintext + @param length The length (octets) of the ciphertext + @return CRYPT_OK if successful +*/ +int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt, + unsigned long length) { int err; - _ARGCHK(eax != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(eax != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); /* omac ciphertext */ if ((err = omac_process(&eax->ctomac, ct, length)) != CRYPT_OK) { diff --git a/eax_decrypt_verify_memory.c b/src/encauth/eax/eax_decrypt_verify_memory.c similarity index 52% rename from eax_decrypt_verify_memory.c rename to src/encauth/eax/eax_decrypt_verify_memory.c index 782d4f6..1929e80 100644 --- a/eax_decrypt_verify_memory.c +++ b/src/encauth/eax/eax_decrypt_verify_memory.c @@ -9,11 +9,31 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file eax_decrypt_verify_memory.c + EAX implementation, decrypt block of memory, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef EAX_MODE +/** + Decrypt a block of memory and verify the provided MAC tag with EAX + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the key (octets) + @param nonce The nonce data (use once) for the session + @param noncelen The length of the nonce data. + @param header The session header data + @param headerlen The length of the header (octets) + @param ct The ciphertext + @param ctlen The length of the ciphertext (octets) + @param pt [out] The plaintext + @param tag The authentication tag provided by the encoder + @param taglen [in/out] The length of the tag (octets) + @param stat [out] The result of the decryption (1==valid tag, 0==invalid) + @return CRYPT_OK if successful regardless of the resulting tag comparison +*/ int eax_decrypt_verify_memory(int cipher, const unsigned char *key, unsigned long keylen, const unsigned char *nonce, unsigned long noncelen, @@ -21,21 +41,25 @@ int eax_decrypt_verify_memory(int cipher, const unsigned char *ct, unsigned long ctlen, unsigned char *pt, unsigned char *tag, unsigned long taglen, - int *res) + int *stat) { int err; eax_state *eax; unsigned char *buf; unsigned long buflen; - _ARGCHK(res != NULL); + LTC_ARGCHK(stat != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(tag != NULL); /* default to zero */ - *res = 0; + *stat = 0; /* allocate ram */ buf = XMALLOC(taglen); - eax = XMALLOC(sizeof(eax_state)); + eax = XMALLOC(sizeof(*eax)); if (eax == NULL || buf == NULL) { if (eax != NULL) { XFREE(eax); @@ -47,28 +71,28 @@ int eax_decrypt_verify_memory(int cipher, } if ((err = eax_init(eax, cipher, key, keylen, nonce, noncelen, header, headerlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = eax_decrypt(eax, ct, pt, ctlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } buflen = taglen; if ((err = eax_done(eax, buf, &buflen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* compare tags */ if (buflen >= taglen && memcmp(buf, tag, taglen) == 0) { - *res = 1; + *stat = 1; } err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(buf, taglen); - zeromem(eax, sizeof(eax_state)); + zeromem(eax, sizeof(*eax)); #endif XFREE(eax); diff --git a/eax_done.c b/src/encauth/eax/eax_done.c similarity index 72% rename from eax_done.c rename to src/encauth/eax/eax_done.c index 037251e..73342b8 100644 --- a/eax_done.c +++ b/src/encauth/eax/eax_done.c @@ -9,20 +9,30 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file eax_done.c + EAX implementation, terminate session, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef EAX_MODE +/** + Terminate an EAX session and get the tag. + @param eax The EAX state + @param tag [out] The destination of the authentication tag + @param taglen [in/out] The max length and resulting length of the authentication tag + @return CRYPT_OK if successful +*/ int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen) { int err; unsigned char *headermac, *ctmac; unsigned long x, len; - _ARGCHK(eax != NULL); - _ARGCHK(tag != NULL); - _ARGCHK(taglen != NULL); + LTC_ARGCHK(eax != NULL); + LTC_ARGCHK(tag != NULL); + LTC_ARGCHK(taglen != NULL); /* allocate ram */ headermac = XMALLOC(MAXBLOCKSIZE); @@ -41,7 +51,7 @@ int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen) /* finish ctomac */ len = MAXBLOCKSIZE; if ((err = omac_done(&eax->ctomac, ctmac, &len)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* finish headeromac */ @@ -49,7 +59,7 @@ int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen) /* note we specifically don't reset len so the two lens are minimal */ if ((err = omac_done(&eax->headeromac, headermac, &len)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* compute N xor H xor C */ @@ -59,8 +69,8 @@ int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen) *taglen = x; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(ctmac, MAXBLOCKSIZE); zeromem(headermac, MAXBLOCKSIZE); zeromem(eax, sizeof(*eax)); diff --git a/eax_encrypt.c b/src/encauth/eax/eax_encrypt.c similarity index 55% rename from eax_encrypt.c rename to src/encauth/eax/eax_encrypt.c index 1b4930e..55b4f76 100644 --- a/eax_encrypt.c +++ b/src/encauth/eax/eax_encrypt.c @@ -9,18 +9,30 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file eax_encrypt.c + EAX implementation, encrypt block by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef EAX_MODE -int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct, unsigned long length) +/** + Encrypt with EAX a block of data. + @param eax The EAX state + @param pt The plaintext to encrypt + @param ct [out] The ciphertext as encrypted + @param length The length of the plaintext (octets) + @return CRYPT_OK if successful +*/ +int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct, + unsigned long length) { int err; - _ARGCHK(eax != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(eax != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); /* encrypt */ if ((err = ctr_encrypt(pt, ct, length, &eax->ctr)) != CRYPT_OK) { diff --git a/src/encauth/eax/eax_encrypt_authenticate_memory.c b/src/encauth/eax/eax_encrypt_authenticate_memory.c new file mode 100644 index 0000000..2a09f53 --- /dev/null +++ b/src/encauth/eax/eax_encrypt_authenticate_memory.c @@ -0,0 +1,78 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ + +/** + @file eax_encrypt_authenticate_memory.c + EAX implementation, encrypt a block of memory, by Tom St Denis +*/ +#include "tomcrypt.h" + +#ifdef EAX_MODE + +/** + EAX encrypt and produce an authentication tag + @param cipher The index of the cipher desired + @param key The secret key to use + @param keylen The length of the secret key (octets) + @param nonce The session nonce [use once] + @param noncelen The length of the nonce + @param header The header for the session + @param headerlen The length of the header (octets) + @param pt The plaintext + @param ptlen The length of the plaintext (octets) + @param ct [out] The ciphertext + @param tag [out] The destination tag + @param taglen [in/out] The max size and resulting size of the authentication tag + @return CRYPT_OK if successful +*/ +int eax_encrypt_authenticate_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, unsigned long noncelen, + const unsigned char *header, unsigned long headerlen, + const unsigned char *pt, unsigned long ptlen, + unsigned char *ct, + unsigned char *tag, unsigned long *taglen) +{ + int err; + eax_state *eax; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(tag != NULL); + LTC_ARGCHK(taglen != NULL); + + eax = XMALLOC(sizeof(*eax)); + + if ((err = eax_init(eax, cipher, key, keylen, nonce, noncelen, header, headerlen)) != CRYPT_OK) { + goto LBL_ERR; + } + + if ((err = eax_encrypt(eax, pt, ct, ptlen)) != CRYPT_OK) { + goto LBL_ERR; + } + + if ((err = eax_done(eax, tag, taglen)) != CRYPT_OK) { + goto LBL_ERR; + } + + err = CRYPT_OK; +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(eax, sizeof(*eax)); +#endif + + XFREE(eax); + + return err; +} + +#endif diff --git a/eax_init.c b/src/encauth/eax/eax_init.c similarity index 66% rename from eax_init.c rename to src/encauth/eax/eax_init.c index 547c8d6..58d8f8d 100644 --- a/eax_init.c +++ b/src/encauth/eax/eax_init.c @@ -9,13 +9,29 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file eax_init.c + EAX implementation, initialized EAX state, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef EAX_MODE -int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long keylen, - const unsigned char *nonce, unsigned long noncelen, +/** + Initialized an EAX state + @param eax [out] The EAX state to initialize + @param cipher The index of the desired cipher + @param key The secret key + @param keylen The length of the secret key (octets) + @param nonce The use-once nonce for the session + @param noncelen The length of the nonce (octets) + @param header The header for the EAX state + @param headerlen The header length (octets) + @return CRYPT_OK if successful +*/ +int eax_init(eax_state *eax, int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, unsigned long noncelen, const unsigned char *header, unsigned long headerlen) { unsigned char *buf; @@ -24,11 +40,11 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long unsigned long len; - _ARGCHK(eax != NULL); - _ARGCHK(key != NULL); - _ARGCHK(nonce != NULL); + LTC_ARGCHK(eax != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(nonce != NULL); if (headerlen > 0) { - _ARGCHK(header != NULL); + LTC_ARGCHK(header != NULL); } if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { @@ -38,7 +54,7 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long /* allocate ram */ buf = XMALLOC(MAXBLOCKSIZE); - omac = XMALLOC(sizeof(omac_state)); + omac = XMALLOC(sizeof(*omac)); if (buf == NULL || omac == NULL) { if (buf != NULL) { @@ -53,21 +69,21 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long /* N = OMAC_0K(nonce) */ zeromem(buf, MAXBLOCKSIZE); if ((err = omac_init(omac, cipher, key, keylen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* omac the [0]_n */ if ((err = omac_process(omac, buf, blklen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* omac the nonce */ if ((err = omac_process(omac, nonce, noncelen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* store result */ len = sizeof(eax->N); if ((err = omac_done(omac, eax->N, &len)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* H = OMAC_1K(header) */ @@ -75,17 +91,17 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long buf[blklen - 1] = 1; if ((err = omac_init(&eax->headeromac, cipher, key, keylen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* omac the [1]_n */ if ((err = omac_process(&eax->headeromac, buf, blklen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* omac the header */ if (headerlen != 0) { if ((err = omac_process(&eax->headeromac, header, headerlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } } @@ -93,28 +109,28 @@ int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long /* setup the CTR mode */ if ((err = ctr_start(cipher, eax->N, key, keylen, 0, &eax->ctr)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* use big-endian counter */ eax->ctr.mode = 1; /* setup the OMAC for the ciphertext */ if ((err = omac_init(&eax->ctomac, cipher, key, keylen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* omac [2]_n */ zeromem(buf, MAXBLOCKSIZE); buf[blklen-1] = 2; if ((err = omac_process(&eax->ctomac, buf, blklen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(buf, MAXBLOCKSIZE); - zeromem(omac, sizeof(omac_state)); + zeromem(omac, sizeof(*omac)); #endif XFREE(omac); diff --git a/eax_test.c b/src/encauth/eax/eax_test.c similarity index 97% rename from eax_test.c rename to src/encauth/eax/eax_test.c index 93774b0..7a1ec24 100644 --- a/eax_test.c +++ b/src/encauth/eax/eax_test.c @@ -9,11 +9,18 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* EAX Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file eax_test.c + EAX implementation, self-test, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef EAX_MODE +/** + Test the EAX implementation + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled +*/ int eax_test(void) { #ifndef LTC_TEST diff --git a/ocb_decrypt.c b/src/encauth/ocb/ocb_decrypt.c similarity index 71% rename from ocb_decrypt.c rename to src/encauth/ocb/ocb_decrypt.c index b7c785b..8fa2c35 100644 --- a/ocb_decrypt.c +++ b/src/encauth/ocb/ocb_decrypt.c @@ -9,25 +9,35 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_decrypt.c + OCB implementation, decrypt data, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE +/** + Decrypt a block with OCB. + @param ocb The OCB state + @param ct The ciphertext (length of the block size of the block cipher) + @param pt [out] The plaintext (length of ct) + @return CRYPT_OK if successful +*/ int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt) { unsigned char Z[MAXBLOCKSIZE], tmp[MAXBLOCKSIZE]; int err, x; - _ARGCHK(ocb != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(ocb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); /* check if valid cipher */ if ((err = cipher_is_valid(ocb->cipher)) != CRYPT_OK) { return err; } - _ARGCHK(cipher_descriptor[ocb->cipher].ecb_decrypt != NULL); + LTC_ARGCHK(cipher_descriptor[ocb->cipher].ecb_decrypt != NULL); /* check length */ if (ocb->block_len != cipher_descriptor[ocb->cipher].block_length) { @@ -52,7 +62,7 @@ int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt) } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(Z, sizeof(Z)); zeromem(tmp, sizeof(tmp)); #endif diff --git a/src/encauth/ocb/ocb_decrypt_verify_memory.c b/src/encauth/ocb/ocb_decrypt_verify_memory.c new file mode 100644 index 0000000..2377bab --- /dev/null +++ b/src/encauth/ocb/ocb_decrypt_verify_memory.c @@ -0,0 +1,82 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ + +/** + @file ocb_decrypt_verify_memory.c + OCB implementation, helper to decrypt block of memory, by Tom St Denis +*/ +#include "tomcrypt.h" + +#ifdef OCB_MODE + +/** + Decrypt and compare the tag with OCB. + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the secret key (octets) + @param nonce The session nonce (length of the block size of the block cipher) + @param ct The ciphertext + @param ctlen The length of the ciphertext (octets) + @param pt [out] The plaintext + @param tag The tag to compare against + @param taglen The length of the tag (octets) + @param stat [out] The result of the tag comparison (1==valid, 0==invalid) + @return CRYPT_OK if successful regardless of the tag comparison +*/ +int ocb_decrypt_verify_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, + const unsigned char *ct, unsigned long ctlen, + unsigned char *pt, + const unsigned char *tag, unsigned long taglen, + int *stat) +{ + int err; + ocb_state *ocb; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(nonce != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(tag != NULL); + LTC_ARGCHK(stat != NULL); + + /* allocate memory */ + ocb = XMALLOC(sizeof(ocb_state)); + if (ocb == NULL) { + return CRYPT_MEM; + } + + if ((err = ocb_init(ocb, cipher, key, keylen, nonce)) != CRYPT_OK) { + goto LBL_ERR; + } + + while (ctlen > (unsigned long)ocb->block_len) { + if ((err = ocb_decrypt(ocb, ct, pt)) != CRYPT_OK) { + goto LBL_ERR; + } + ctlen -= ocb->block_len; + pt += ocb->block_len; + ct += ocb->block_len; + } + + err = ocb_done_decrypt(ocb, ct, ctlen, pt, tag, taglen, stat); +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(ocb, sizeof(ocb_state)); +#endif + + XFREE(ocb); + + return err; +} + +#endif diff --git a/ocb_done_decrypt.c b/src/encauth/ocb/ocb_done_decrypt.c similarity index 53% rename from ocb_done_decrypt.c rename to src/encauth/ocb/ocb_done_decrypt.c index 697beea..51e88a2 100644 --- a/ocb_done_decrypt.c +++ b/src/encauth/ocb/ocb_done_decrypt.c @@ -9,28 +9,42 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_done_decrypt.c + OCB implementation, terminate decryption, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE +/** + Terminate a decrypting OCB state + @param ocb The OCB state + @param ct The ciphertext (if any) + @param ctlen The length of the ciphertext (octets) + @param pt [out] The plaintext + @param tag The authentication tag (to compare against) + @param taglen The length of the authentication tag provided + @param stat [out] The result of the tag comparison + @return CRYPT_OK if the process was successful regardless if the tag is valid +*/ int ocb_done_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned long ctlen, unsigned char *pt, - const unsigned char *tag, unsigned long taglen, int *res) + const unsigned char *tag, unsigned long taglen, int *stat) { int err; unsigned char *tagbuf; unsigned long tagbuflen; - _ARGCHK(ocb != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(tag != NULL); - _ARGCHK(res != NULL); + LTC_ARGCHK(ocb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(tag != NULL); + LTC_ARGCHK(stat != NULL); /* default to failed */ - *res = 0; + *stat = 0; /* allocate memory */ tagbuf = XMALLOC(MAXBLOCKSIZE); @@ -39,17 +53,17 @@ int ocb_done_decrypt(ocb_state *ocb, } tagbuflen = MAXBLOCKSIZE; - if ((err = __ocb_done(ocb, ct, ctlen, pt, tagbuf, &tagbuflen, 1)) != CRYPT_OK) { - goto __ERR; + if ((err = s_ocb_done(ocb, ct, ctlen, pt, tagbuf, &tagbuflen, 1)) != CRYPT_OK) { + goto LBL_ERR; } if (taglen <= tagbuflen && memcmp(tagbuf, tag, taglen) == 0) { - *res = 1; + *stat = 1; } err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(tagbuf, MAXBLOCKSIZE); #endif diff --git a/src/encauth/ocb/ocb_done_encrypt.c b/src/encauth/ocb/ocb_done_encrypt.c new file mode 100644 index 0000000..3697f80 --- /dev/null +++ b/src/encauth/ocb/ocb_done_encrypt.c @@ -0,0 +1,42 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ + +/** + @file ocb_done_encrypt.c + OCB implementation, terminate encryption, by Tom St Denis +*/ +#include "tomcrypt.h" + +#ifdef OCB_MODE + +/** + Terminate an encryption OCB state + @param ocb The OCB state + @param pt Remaining plaintext (if any) + @param ptlen The length of the plaintext (octets) + @param ct [out] The ciphertext (if any) + @param tag [out] The tag for the OCB stream + @param taglen [in/out] The max size and resulting size of the tag + @return CRYPT_OK if successful +*/ +int ocb_done_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen, + unsigned char *ct, unsigned char *tag, unsigned long *taglen) +{ + LTC_ARGCHK(ocb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(tag != NULL); + LTC_ARGCHK(taglen != NULL); + return s_ocb_done(ocb, pt, ptlen, ct, tag, taglen, 0); +} + +#endif + diff --git a/ocb_encrypt.c b/src/encauth/ocb/ocb_encrypt.c similarity index 72% rename from ocb_encrypt.c rename to src/encauth/ocb/ocb_encrypt.c index d951933..81fc776 100644 --- a/ocb_encrypt.c +++ b/src/encauth/ocb/ocb_encrypt.c @@ -9,19 +9,29 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_encrypt.c + OCB implementation, encrypt data, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE +/** + Encrypt a block of data with OCB. + @param ocb The OCB state + @param pt The plaintext (length of the block size of the block cipher) + @param ct [out] The ciphertext (same size as the pt) + @return CRYPT_OK if successful +*/ int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct) { unsigned char Z[MAXBLOCKSIZE], tmp[MAXBLOCKSIZE]; int err, x; - _ARGCHK(ocb != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); + LTC_ARGCHK(ocb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); if ((err = cipher_is_valid(ocb->cipher)) != CRYPT_OK) { return err; } @@ -46,7 +56,7 @@ int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct) ct[x] ^= Z[x]; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(Z, sizeof(Z)); zeromem(tmp, sizeof(tmp)); #endif diff --git a/ocb_encrypt_authenticate_memory.c b/src/encauth/ocb/ocb_encrypt_authenticate_memory.c similarity index 54% rename from ocb_encrypt_authenticate_memory.c rename to src/encauth/ocb/ocb_encrypt_authenticate_memory.c index 73afd3f..52741d4 100644 --- a/ocb_encrypt_authenticate_memory.c +++ b/src/encauth/ocb/ocb_encrypt_authenticate_memory.c @@ -9,11 +9,27 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_encrypt_authenticate_memory.c + OCB implementation, encrypt block of memory, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE +/** + Encrypt and generate an authentication code for a buffer of memory + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the secret key (octets) + @param nonce The session nonce (length of the block ciphers block size) + @param pt The plaintext + @param ptlen The length of the plaintext (octets) + @param ct [out] The ciphertext + @param tag [out] The authentication tag + @param taglen [in/out] The max size and resulting size of the authentication tag + @return CRYPT_OK if successful +*/ int ocb_encrypt_authenticate_memory(int cipher, const unsigned char *key, unsigned long keylen, const unsigned char *nonce, @@ -24,12 +40,12 @@ int ocb_encrypt_authenticate_memory(int cipher, int err; ocb_state *ocb; - _ARGCHK(key != NULL); - _ARGCHK(nonce != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(tag != NULL); - _ARGCHK(taglen != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(nonce != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(tag != NULL); + LTC_ARGCHK(taglen != NULL); /* allocate ram */ ocb = XMALLOC(sizeof(ocb_state)); @@ -38,12 +54,12 @@ int ocb_encrypt_authenticate_memory(int cipher, } if ((err = ocb_init(ocb, cipher, key, keylen, nonce)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } while (ptlen > (unsigned long)ocb->block_len) { if ((err = ocb_encrypt(ocb, pt, ct)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } ptlen -= ocb->block_len; pt += ocb->block_len; @@ -51,8 +67,8 @@ int ocb_encrypt_authenticate_memory(int cipher, } err = ocb_done_encrypt(ocb, pt, ptlen, ct, tag, taglen); -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(ocb, sizeof(ocb_state)); #endif diff --git a/ocb_init.c b/src/encauth/ocb/ocb_init.c similarity index 85% rename from ocb_init.c rename to src/encauth/ocb/ocb_init.c index 6087207..2f7773c 100644 --- a/ocb_init.c +++ b/src/encauth/ocb/ocb_init.c @@ -9,8 +9,11 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_init.c + OCB implementation, initialize state, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE @@ -32,14 +35,23 @@ static const struct { } }; +/** + Initialize an OCB context. + @param ocb [out] The destination of the OCB state + @param cipher The index of the desired cipher + @param key The secret key + @param keylen The length of the secret key (octets) + @param nonce The session nonce (length of the block size of the cipher) + @return CRYPT_OK if successful +*/ int ocb_init(ocb_state *ocb, int cipher, const unsigned char *key, unsigned long keylen, const unsigned char *nonce) { int poly, x, y, m, err; - _ARGCHK(ocb != NULL); - _ARGCHK(key != NULL); - _ARGCHK(nonce != NULL); + LTC_ARGCHK(ocb != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(nonce != NULL); /* valid cipher? */ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { diff --git a/ocb_ntz.c b/src/encauth/ocb/ocb_ntz.c similarity index 64% rename from ocb_ntz.c rename to src/encauth/ocb/ocb_ntz.c index fbf6bb6..78134f7 100644 --- a/ocb_ntz.c +++ b/src/encauth/ocb/ocb_ntz.c @@ -9,11 +9,20 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_ntz.c + OCB implementation, internal function, by Tom St Denis +*/ + +#include "tomcrypt.h" #ifdef OCB_MODE +/** + Returns the number of leading zero bits [from lsb up] + @param x The 32-bit value to observe + @return The number of bits [from the lsb up] that are zero +*/ int ocb_ntz(unsigned long x) { int c; diff --git a/ocb_shift_xor.c b/src/encauth/ocb/ocb_shift_xor.c similarity index 70% rename from ocb_shift_xor.c rename to src/encauth/ocb/ocb_shift_xor.c index ce93138..cec1457 100644 --- a/ocb_shift_xor.c +++ b/src/encauth/ocb/ocb_shift_xor.c @@ -9,11 +9,19 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_shift_xor.c + OCB implementation, internal function, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE +/** + Compute the shift/xor for OCB (internal function) + @param ocb The OCB state + @param Z The destination of the shift +*/ void ocb_shift_xor(ocb_state *ocb, unsigned char *Z) { int x, y; diff --git a/ocb_test.c b/src/encauth/ocb/ocb_test.c similarity index 97% rename from ocb_test.c rename to src/encauth/ocb/ocb_test.c index 0b5dafd..2df19d0 100644 --- a/ocb_test.c +++ b/src/encauth/ocb/ocb_test.c @@ -9,11 +9,18 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file ocb_test.c + OCB implementation, self-test by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE +/** + Test the OCB protocol + @return CRYPT_OK if successful +*/ int ocb_test(void) { #ifndef LTC_TEST diff --git a/s_ocb_done.c b/src/encauth/ocb/s_ocb_done.c similarity index 75% rename from s_ocb_done.c rename to src/encauth/ocb/s_ocb_done.c index d4a7748..ea4cbeb 100644 --- a/s_ocb_done.c +++ b/src/encauth/ocb/s_ocb_done.c @@ -9,8 +9,11 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OCB Implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file s_ocb_done.c + OCB implementation, internal helper, by Tom St Denis +*/ +#include "tomcrypt.h" #ifdef OCB_MODE @@ -21,18 +24,30 @@ * * the names pt/ptlen/ct really just mean in/inlen/out but this is the way I wrote it... */ -int __ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen, - unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode) + +/** + Shared code to finish an OCB stream + @param ocb The OCB state + @param pt The remaining plaintext [or input] + @param ptlen The length of the input (octets) + @param ct [out] The output buffer + @param tag [out] The destination for the authentication tag + @param taglen [in/out] The max size and resulting size of the authentication tag + @param mode The mode we are terminating, 0==encrypt, 1==decrypt + @return CRYPT_OK if successful +*/ +int s_ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen, + unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode) { unsigned char *Z, *Y, *X; int err, x; - _ARGCHK(ocb != NULL); - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(tag != NULL); - _ARGCHK(taglen != NULL); + LTC_ARGCHK(ocb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(tag != NULL); + LTC_ARGCHK(taglen != NULL); if ((err = cipher_is_valid(ocb->cipher)) != CRYPT_OK) { return err; } @@ -106,7 +121,7 @@ int __ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen, } *taglen = x; -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(X, MAXBLOCKSIZE); zeromem(Y, MAXBLOCKSIZE); zeromem(Z, MAXBLOCKSIZE); diff --git a/chc.c b/src/hashes/chc/chc.c similarity index 80% rename from chc.c rename to src/hashes/chc/chc.c index e144b68..d71d18f 100644 --- a/chc.c +++ b/src/hashes/chc/chc.c @@ -9,7 +9,12 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file chc.c + CHC support. (Tom St Denis) +*/ #ifdef CHC_HASH @@ -20,7 +25,7 @@ static int cipher_idx=UNDEFED_HASH, /* which cipher */ cipher_blocksize; /* blocksize of cipher */ -const struct _hash_descriptor chc_desc = { +const struct ltc_hash_descriptor chc_desc = { "chc_hash", 12, 0, 0, { 0 }, 0, &chc_init, &chc_process, @@ -28,7 +33,11 @@ const struct _hash_descriptor chc_desc = { &chc_test }; -/* initialize the CHC state with a given cipher */ +/** + Initialize the CHC state with a given cipher + @param cipher The index of the cipher you wish to bind + @return CRYPT_OK if successful +*/ int chc_register(int cipher) { int err, kl, idx; @@ -69,14 +78,18 @@ int chc_register(int cipher) return CRYPT_OK; } -/* "hash init" is simply encrypt 0 with the 0 key. Simple way to make an IV */ +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int chc_init(hash_state *md) { symmetric_key *key; unsigned char buf[MAXBLOCKSIZE]; int err; - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); /* is the cipher valid? */ if ((err = cipher_is_valid(cipher_idx)) != CRYPT_OK) { @@ -134,21 +147,30 @@ static int chc_compress(hash_state *md, unsigned char *buf) md->chc.state[x] ^= T[0][x] ^ T[1][x]; } XFREE(key); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(T, sizeof(T)); zeromem(&key, sizeof(key)); #endif return CRYPT_OK; } +/* function for processing blocks */ +int _chc_process(hash_state * md, const unsigned char *buf, unsigned long len); HASH_PROCESS(_chc_process, chc_compress, chc, (unsigned long)cipher_blocksize) -int chc_process(hash_state * md, const unsigned char *buf, unsigned long len) +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ +int chc_process(hash_state * md, const unsigned char *in, unsigned long inlen) { int err; - _ARGCHK(md != NULL); - _ARGCHK(buf != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(in != NULL); /* is the cipher valid? */ if ((err = cipher_is_valid(cipher_idx)) != CRYPT_OK) { @@ -158,15 +180,21 @@ int chc_process(hash_state * md, const unsigned char *buf, unsigned long len) return CRYPT_INVALID_CIPHER; } - return _chc_process(md, buf, len); + return _chc_process(md, in, inlen); } -int chc_done(hash_state *md, unsigned char *buf) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (length of the block size of the block cipher) + @return CRYPT_OK if successful +*/ +int chc_done(hash_state *md, unsigned char *out) { int err; - _ARGCHK(md != NULL); - _ARGCHK(buf != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); /* is the cipher valid? */ if ((err = cipher_is_valid(cipher_idx)) != CRYPT_OK) { @@ -208,19 +236,23 @@ int chc_done(hash_state *md, unsigned char *buf) chc_compress(md, md->chc.buf); /* copy output */ - XMEMCPY(buf, md->chc.state, cipher_blocksize); + XMEMCPY(out, md->chc.state, cipher_blocksize); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int chc_test(void) { static const struct { unsigned char *msg, - md[MAXBLOCKSIZE]; + md[MAXBLOCKSIZE]; int len; } tests[] = { { diff --git a/hash_file.c b/src/hashes/helper/hash_file.c similarity index 53% rename from hash_file.c rename to src/hashes/helper/hash_file.c index 0511f2c..671b030 100644 --- a/hash_file.c +++ b/src/hashes/helper/hash_file.c @@ -8,18 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int hash_file(int hash, const char *fname, unsigned char *dst, unsigned long *outlen) +/** + @file hash_file.c + Hash a file, Tom St Denis +*/ + +/** + @param hash The index of the hash desired + @param fname The name of the file you wish to hash + @param out [out] The destination of the digest + @param outlen [in/out] The max size and resulting size of the message digest + @result CRYPT_OK if successful +*/ +int hash_file(int hash, const char *fname, unsigned char *out, unsigned long *outlen) { -#ifdef NO_FILE +#ifdef LTC_NO_FILE return CRYPT_NOP; #else FILE *in; int err; - _ARGCHK(fname != NULL); - _ARGCHK(dst != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(fname != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); if ((err = hash_is_valid(hash)) != CRYPT_OK) { return err; @@ -30,7 +42,7 @@ int hash_file(int hash, const char *fname, unsigned char *dst, unsigned long *ou return CRYPT_FILE_NOTFOUND; } - err = hash_filehandle(hash, in, dst, outlen); + err = hash_filehandle(hash, in, out, outlen); if (fclose(in) != 0) { return CRYPT_ERROR; } diff --git a/hash_filehandle.c b/src/hashes/helper/hash_filehandle.c similarity index 60% rename from hash_filehandle.c rename to src/hashes/helper/hash_filehandle.c index cf179e0..a721c76 100644 --- a/hash_filehandle.c +++ b/src/hashes/helper/hash_filehandle.c @@ -8,11 +8,24 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outlen) +/** + @file hash_filehandle.c + Hash open files, Tom St Denis +*/ + +/** + Hash data from an open file handle. + @param hash The index of the hash you want to use + @param in The FILE* handle of the file you want to hash + @param out [out] The destination of the digest + @param outlen [in/out] The max size and resulting size of the digest + @result CRYPT_OK if successful +*/ +int hash_filehandle(int hash, FILE *in, unsigned char *out, unsigned long *outlen) { -#ifdef NO_FILE +#ifdef LTC_NO_FILE return CRYPT_NOP; #else hash_state md; @@ -20,9 +33,9 @@ int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outle size_t x; int err; - _ARGCHK(dst != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(in != NULL); if ((err = hash_is_valid(hash)) != CRYPT_OK) { return err; @@ -42,9 +55,9 @@ int hash_filehandle(int hash, FILE *in, unsigned char *dst, unsigned long *outle return err; } } while (x == sizeof(buf)); - err = hash_descriptor[hash].done(&md, dst); + err = hash_descriptor[hash].done(&md, out); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, sizeof(buf)); #endif return err; diff --git a/hash_memory.c b/src/hashes/helper/hash_memory.c similarity index 50% rename from hash_memory.c rename to src/hashes/helper/hash_memory.c index 2c87d76..6314fe0 100644 --- a/hash_memory.c +++ b/src/hashes/helper/hash_memory.c @@ -8,16 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int hash_memory(int hash, const unsigned char *data, unsigned long len, unsigned char *dst, unsigned long *outlen) +/** + @file hash_memory.c + Hash memory helper, Tom St Denis +*/ + +/** + Hash a block of memory and store the digest. + @param hash The index of the hash you wish to use + @param in The data you wish to hash + @param inlen The length of the data to hash (octets) + @param out [out] Where to store the digest + @param outlen [in/out] Max size and resulting size of the digest + @return CRYPT_OK if successful +*/ +int hash_memory(int hash, const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen) { hash_state *md; int err; - _ARGCHK(data != NULL); - _ARGCHK(dst != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); if ((err = hash_is_valid(hash)) != CRYPT_OK) { return err; @@ -33,15 +47,15 @@ int hash_memory(int hash, const unsigned char *data, unsigned long len, unsigned } if ((err = hash_descriptor[hash].init(md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } - if ((err = hash_descriptor[hash].process(md, data, len)) != CRYPT_OK) { - goto __ERR; + if ((err = hash_descriptor[hash].process(md, in, inlen)) != CRYPT_OK) { + goto LBL_ERR; } - err = hash_descriptor[hash].done(md, dst); + err = hash_descriptor[hash].done(md, out); *outlen = hash_descriptor[hash].hashsize; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif XFREE(md); diff --git a/src/hashes/helper/hash_memory_multi.c b/src/hashes/helper/hash_memory_multi.c new file mode 100644 index 0000000..411a560 --- /dev/null +++ b/src/hashes/helper/hash_memory_multi.c @@ -0,0 +1,82 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" +#include +/** + @file hash_memory_multi.c + Hash (multiple buffers) memory helper, Tom St Denis +*/ + +/** + Hash multiple (non-adjacent) blocks of memory at once. + @param hash The index of the hash you wish to use + @param out [out] Where to store the digest + @param outlen [in/out] Max size and resulting size of the digest + @param in The data you wish to hash + @param inlen The length of the data to hash (octets) + @param ... tuples of (data,len) pairs to hash, terminated with a (NULL,x) (x=don't care) + @return CRYPT_OK if successful +*/ +int hash_memory_multi(int hash, unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...) +{ + hash_state *md; + int err; + va_list args; + const unsigned char *curptr; + unsigned long curlen; + + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + + if ((err = hash_is_valid(hash)) != CRYPT_OK) { + return err; + } + + if (*outlen < hash_descriptor[hash].hashsize) { + return CRYPT_BUFFER_OVERFLOW; + } + + md = XMALLOC(sizeof(hash_state)); + if (md == NULL) { + return CRYPT_MEM; + } + + if ((err = hash_descriptor[hash].init(md)) != CRYPT_OK) { + goto LBL_ERR; + } + + va_start(args, inlen); + curptr = in; + curlen = inlen; + for (;;) { + /* process buf */ + if ((err = hash_descriptor[hash].process(md, curptr, curlen)) != CRYPT_OK) { + goto LBL_ERR; + } + /* step to next */ + curptr = va_arg(args, const unsigned char*); + if (curptr == NULL) { + break; + } + curlen = va_arg(args, unsigned long); + } + err = hash_descriptor[hash].done(md, out); + *outlen = hash_descriptor[hash].hashsize; +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(md, sizeof(hash_state)); +#endif + XFREE(md); + va_end(args); + return err; +} diff --git a/md2.c b/src/hashes/md2.c similarity index 81% rename from md2.c rename to src/hashes/md2.c index 8e2a987..765f69d 100644 --- a/md2.c +++ b/src/hashes/md2.c @@ -8,12 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* MD2 (RFC 1319) hash function implementation by Tom St Denis */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @param md2.c + MD2 (RFC 1319) hash function implementation by Tom St Denis +*/ #ifdef MD2 -const struct _hash_descriptor md2_desc = +const struct ltc_hash_descriptor md2_desc = { "md2", 7, @@ -90,9 +94,14 @@ static void md2_compress(hash_state *md) } } +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int md2_init(hash_state *md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); /* MD2 uses a zero'ed state... */ zeromem(md->md2.X, sizeof(md->md2.X)); @@ -102,20 +111,27 @@ int md2_init(hash_state *md) return CRYPT_OK; } -int md2_process(hash_state *md, const unsigned char *buf, unsigned long len) +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ +int md2_process(hash_state *md, const unsigned char *in, unsigned long inlen) { unsigned long n; - _ARGCHK(md != NULL); - _ARGCHK(buf != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(in != NULL); if (md-> md2 .curlen > sizeof(md-> md2 .buf)) { return CRYPT_INVALID_ARG; } - while (len > 0) { - n = MIN(len, (16 - md->md2.curlen)); - XMEMCPY(md->md2.buf + md->md2.curlen, buf, (size_t)n); + while (inlen > 0) { + n = MIN(inlen, (16 - md->md2.curlen)); + XMEMCPY(md->md2.buf + md->md2.curlen, in, (size_t)n); md->md2.curlen += n; - buf += n; - len -= n; + in += n; + inlen -= n; /* is 16 bytes full? */ if (md->md2.curlen == 16) { @@ -127,12 +143,18 @@ int md2_process(hash_state *md, const unsigned char *buf, unsigned long len) return CRYPT_OK; } -int md2_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (16 bytes) + @return CRYPT_OK if successful +*/ +int md2_done(hash_state * md, unsigned char *out) { unsigned long i, k; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->md2.curlen >= sizeof(md->md2.buf)) { return CRYPT_INVALID_ARG; @@ -154,14 +176,18 @@ int md2_done(hash_state * md, unsigned char *hash) md2_compress(md); /* output is lower 16 bytes of X */ - XMEMCPY(hash, md->md2.X, 16); + XMEMCPY(out, md->md2.X, 16); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int md2_test(void) { #ifndef LTC_TEST diff --git a/md4.c b/src/hashes/md4.c similarity index 87% rename from md4.c rename to src/hashes/md4.c index 0e0cc6b..138cab1 100644 --- a/md4.c +++ b/src/hashes/md4.c @@ -8,12 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Submitted by Dobes Vandermeer (dobes@smartt.com) */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @param md4.c + Submitted by Dobes Vandermeer (dobes@smartt.com) +*/ #ifdef MD4 -const struct _hash_descriptor md4_desc = +const struct ltc_hash_descriptor md4_desc = { "md4", 6, @@ -49,7 +53,7 @@ const struct _hash_descriptor md4_desc = #define H(x, y, z) ((x) ^ (y) ^ (z)) /* ROTATE_LEFT rotates x left n bits. */ -#define ROTATE_LEFT(x, n) ROL(x, n) +#define ROTATE_LEFT(x, n) ROLc(x, n) /* FF, GG and HH are transformations for rounds 1, 2 and 3 */ /* Rotation is separate from addition to prevent recomputation */ @@ -67,7 +71,7 @@ const struct _hash_descriptor md4_desc = (a) = ROTATE_LEFT ((a), (s)); \ } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _md4_compress(hash_state *md, unsigned char *buf) #else static int md4_compress(hash_state *md, unsigned char *buf) @@ -151,7 +155,7 @@ static int md4_compress(hash_state *md, unsigned char *buf) return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int md4_compress(hash_state *md, unsigned char *buf) { int err; @@ -161,9 +165,14 @@ static int md4_compress(hash_state *md, unsigned char *buf) } #endif +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int md4_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->md4.state[0] = 0x67452301UL; md->md4.state[1] = 0xefcdab89UL; md->md4.state[2] = 0x98badcfeUL; @@ -173,14 +182,27 @@ int md4_init(hash_state * md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(md4_process, md4_compress, md4, 64) -int md4_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (16 bytes) + @return CRYPT_OK if successful +*/ +int md4_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->md4.curlen >= sizeof(md->md4.buf)) { return CRYPT_INVALID_ARG; @@ -215,14 +237,18 @@ int md4_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 4; i++) { - STORE32L(md->md4.state[i], hash+(4*i)); + STORE32L(md->md4.state[i], out+(4*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int md4_test(void) { #ifndef LTC_TEST diff --git a/md5.c b/src/hashes/md5.c similarity index 86% rename from md5.c rename to src/hashes/md5.c index 5339169..e74f157 100644 --- a/md5.c +++ b/src/hashes/md5.c @@ -8,14 +8,17 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* MD5 hash function by Tom St Denis */ -#include "mycrypt.h" +/** + @file md5.c + MD5 hash function by Tom St Denis +*/ #ifdef MD5 -const struct _hash_descriptor md5_desc = +const struct ltc_hash_descriptor md5_desc = { "md5", 3, @@ -39,6 +42,8 @@ const struct _hash_descriptor md5_desc = #define H(x,y,z) (x^y^z) #define I(x,y,z) (y^(x|(~z))) +#ifdef LTC_SMALL_CODE + #define FF(a,b,c,d,M,s,t) \ a = (a + F(b,c,d) + M + t); a = ROL(a, s) + b; @@ -51,8 +56,6 @@ const struct _hash_descriptor md5_desc = #define II(a,b,c,d,M,s,t) \ a = (a + I(b,c,d) + M + t); a = ROL(a, s) + b; -#ifdef SMALL_CODE - static const unsigned char Worder[64] = { 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15, 1,6,11,0,5,10,15,4,9,14,3,8,13,2,7,12, @@ -78,16 +81,31 @@ static const ulong32 Korder[64] = { 0x6fa87e4fUL, 0xfe2ce6e0UL, 0xa3014314UL, 0x4e0811a1UL, 0xf7537e82UL, 0xbd3af235UL, 0x2ad7d2bbUL, 0xeb86d391UL }; +#else + +#define FF(a,b,c,d,M,s,t) \ + a = (a + F(b,c,d) + M + t); a = ROLc(a, s) + b; + +#define GG(a,b,c,d,M,s,t) \ + a = (a + G(b,c,d) + M + t); a = ROLc(a, s) + b; + +#define HH(a,b,c,d,M,s,t) \ + a = (a + H(b,c,d) + M + t); a = ROLc(a, s) + b; + +#define II(a,b,c,d,M,s,t) \ + a = (a + I(b,c,d) + M + t); a = ROLc(a, s) + b; + + #endif -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _md5_compress(hash_state *md, unsigned char *buf) #else static int md5_compress(hash_state *md, unsigned char *buf) #endif { ulong32 i, W[16], a, b, c, d; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE ulong32 t; #endif @@ -102,7 +120,7 @@ static int md5_compress(hash_state *md, unsigned char *buf) c = md->md5.state[2]; d = md->md5.state[3]; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE for (i = 0; i < 16; ++i) { FF(a,b,c,d,W[Worder[i]],Rorder[i],Korder[i]); t = d; d = c; c = b; b = a; a = t; @@ -198,7 +216,7 @@ static int md5_compress(hash_state *md, unsigned char *buf) return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int md5_compress(hash_state *md, unsigned char *buf) { int err; @@ -208,9 +226,14 @@ static int md5_compress(hash_state *md, unsigned char *buf) } #endif +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int md5_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->md5.state[0] = 0x67452301UL; md->md5.state[1] = 0xefcdab89UL; md->md5.state[2] = 0x98badcfeUL; @@ -220,14 +243,27 @@ int md5_init(hash_state * md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(md5_process, md5_compress, md5, 64) -int md5_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (16 bytes) + @return CRYPT_OK if successful +*/ +int md5_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->md5.curlen >= sizeof(md->md5.buf)) { return CRYPT_INVALID_ARG; @@ -263,14 +299,18 @@ int md5_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 4; i++) { - STORE32L(md->md5.state[i], hash+(4*i)); + STORE32L(md->md5.state[i], out+(4*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int md5_test(void) { #ifndef LTC_TEST diff --git a/rmd128.c b/src/hashes/rmd128.c similarity index 89% rename from rmd128.c rename to src/hashes/rmd128.c index f9351de..8a438fe 100644 --- a/rmd128.c +++ b/src/hashes/rmd128.c @@ -8,17 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" + +/** + @param rmd128.c + RMD128 Hash function +*/ /* Implementation of RIPEMD-128 based on the source by Antoon Bosselaers, ESAT-COSIC * * This source has been radically overhauled to be portable and work within * the LibTomCrypt API by Tom St Denis */ -#include "mycrypt.h" #ifdef RIPEMD128 -const struct _hash_descriptor rmd128_desc = +const struct ltc_hash_descriptor rmd128_desc = { "rmd128", 8, @@ -44,37 +49,37 @@ const struct _hash_descriptor rmd128_desc = /* the eight basic operations FF() through III() */ #define FF(a, b, c, d, x, s) \ (a) += F((b), (c), (d)) + (x);\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); #define GG(a, b, c, d, x, s) \ (a) += G((b), (c), (d)) + (x) + 0x5a827999UL;\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); #define HH(a, b, c, d, x, s) \ (a) += H((b), (c), (d)) + (x) + 0x6ed9eba1UL;\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); #define II(a, b, c, d, x, s) \ (a) += I((b), (c), (d)) + (x) + 0x8f1bbcdcUL;\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); #define FFF(a, b, c, d, x, s) \ (a) += F((b), (c), (d)) + (x);\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); #define GGG(a, b, c, d, x, s) \ (a) += G((b), (c), (d)) + (x) + 0x6d703ef3UL;\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); #define HHH(a, b, c, d, x, s) \ (a) += H((b), (c), (d)) + (x) + 0x5c4dd124UL;\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); #define III(a, b, c, d, x, s) \ (a) += I((b), (c), (d)) + (x) + 0x50a28be6UL;\ - (a) = ROL((a), (s)); + (a) = ROLc((a), (s)); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _rmd128_compress(hash_state *md, unsigned char *buf) #else static int rmd128_compress(hash_state *md, unsigned char *buf) @@ -248,7 +253,7 @@ static int rmd128_compress(hash_state *md, unsigned char *buf) return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int rmd128_compress(hash_state *md, unsigned char *buf) { int err; @@ -258,9 +263,14 @@ static int rmd128_compress(hash_state *md, unsigned char *buf) } #endif +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int rmd128_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->rmd128.state[0] = 0x67452301UL; md->rmd128.state[1] = 0xefcdab89UL; md->rmd128.state[2] = 0x98badcfeUL; @@ -270,14 +280,27 @@ int rmd128_init(hash_state * md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(rmd128_process, rmd128_compress, rmd128, 64) -int rmd128_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (16 bytes) + @return CRYPT_OK if successful +*/ +int rmd128_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->rmd128.curlen >= sizeof(md->rmd128.buf)) { return CRYPT_INVALID_ARG; @@ -313,14 +336,18 @@ int rmd128_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 4; i++) { - STORE32L(md->rmd128.state[i], hash+(4*i)); + STORE32L(md->rmd128.state[i], out+(4*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int rmd128_test(void) { #ifndef LTC_TEST diff --git a/rmd160.c b/src/hashes/rmd160.c similarity index 89% rename from rmd160.c rename to src/hashes/rmd160.c index 2079448..0103842 100644 --- a/rmd160.c +++ b/src/hashes/rmd160.c @@ -8,17 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" + +/** + @file rmd160.c + RMD160 hash function +*/ /* Implementation of RIPEMD-160 based on the source by Antoon Bosselaers, ESAT-COSIC * * This source has been radically overhauled to be portable and work within * the LibTomCrypt API by Tom St Denis */ -#include "mycrypt.h" #ifdef RIPEMD160 -const struct _hash_descriptor rmd160_desc = +const struct ltc_hash_descriptor rmd160_desc = { "rmd160", 9, @@ -46,56 +51,56 @@ const struct _hash_descriptor rmd160_desc = /* the ten basic operations FF() through III() */ #define FF(a, b, c, d, e, x, s) \ (a) += F((b), (c), (d)) + (x);\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define GG(a, b, c, d, e, x, s) \ (a) += G((b), (c), (d)) + (x) + 0x5a827999UL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define HH(a, b, c, d, e, x, s) \ (a) += H((b), (c), (d)) + (x) + 0x6ed9eba1UL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define II(a, b, c, d, e, x, s) \ (a) += I((b), (c), (d)) + (x) + 0x8f1bbcdcUL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define JJ(a, b, c, d, e, x, s) \ (a) += J((b), (c), (d)) + (x) + 0xa953fd4eUL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define FFF(a, b, c, d, e, x, s) \ (a) += F((b), (c), (d)) + (x);\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define GGG(a, b, c, d, e, x, s) \ (a) += G((b), (c), (d)) + (x) + 0x7a6d76e9UL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define HHH(a, b, c, d, e, x, s) \ (a) += H((b), (c), (d)) + (x) + 0x6d703ef3UL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define III(a, b, c, d, e, x, s) \ (a) += I((b), (c), (d)) + (x) + 0x5c4dd124UL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); #define JJJ(a, b, c, d, e, x, s) \ (a) += J((b), (c), (d)) + (x) + 0x50a28be6UL;\ - (a) = ROL((a), (s)) + (e);\ - (c) = ROL((c), 10); + (a) = ROLc((a), (s)) + (e);\ + (c) = ROLc((c), 10); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _rmd160_compress(hash_state *md, unsigned char *buf) #else static int rmd160_compress(hash_state *md, unsigned char *buf) @@ -307,7 +312,7 @@ static int rmd160_compress(hash_state *md, unsigned char *buf) return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int rmd160_compress(hash_state *md, unsigned char *buf) { int err; @@ -317,9 +322,14 @@ static int rmd160_compress(hash_state *md, unsigned char *buf) } #endif +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int rmd160_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->rmd160.state[0] = 0x67452301UL; md->rmd160.state[1] = 0xefcdab89UL; md->rmd160.state[2] = 0x98badcfeUL; @@ -330,14 +340,27 @@ int rmd160_init(hash_state * md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(rmd160_process, rmd160_compress, rmd160, 64) -int rmd160_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (20 bytes) + @return CRYPT_OK if successful +*/ +int rmd160_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->rmd160.curlen >= sizeof(md->rmd160.buf)) { return CRYPT_INVALID_ARG; @@ -373,14 +396,18 @@ int rmd160_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 5; i++) { - STORE32L(md->rmd160.state[i], hash+(4*i)); + STORE32L(md->rmd160.state[i], out+(4*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int rmd160_test(void) { #ifndef LTC_TEST diff --git a/sha1.c b/src/hashes/sha1.c similarity index 79% rename from sha1.c rename to src/hashes/sha1.c index d6e57c3..27bdb99 100644 --- a/sha1.c +++ b/src/hashes/sha1.c @@ -8,13 +8,17 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" + +/** + @file sha1.c + SHA1 code by Tom St Denis +*/ -/* SHA1 code by Tom St Denis */ -#include "mycrypt.h" #ifdef SHA1 -const struct _hash_descriptor sha1_desc = +const struct ltc_hash_descriptor sha1_desc = { "sha1", 2, @@ -37,14 +41,14 @@ const struct _hash_descriptor sha1_desc = #define F2(x,y,z) ((x & y) | (z & (x | y))) #define F3(x,y,z) (x ^ y ^ z) -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _sha1_compress(hash_state *md, unsigned char *buf) #else static int sha1_compress(hash_state *md, unsigned char *buf) #endif { ulong32 a,b,c,d,e,W[80],i; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE ulong32 t; #endif @@ -67,12 +71,12 @@ static int sha1_compress(hash_state *md, unsigned char *buf) /* compress */ /* round one */ - #define FF0(a,b,c,d,e,i) e = (ROL(a, 5) + F0(b,c,d) + e + W[i] + 0x5a827999UL); b = ROL(b, 30); - #define FF1(a,b,c,d,e,i) e = (ROL(a, 5) + F1(b,c,d) + e + W[i] + 0x6ed9eba1UL); b = ROL(b, 30); - #define FF2(a,b,c,d,e,i) e = (ROL(a, 5) + F2(b,c,d) + e + W[i] + 0x8f1bbcdcUL); b = ROL(b, 30); - #define FF3(a,b,c,d,e,i) e = (ROL(a, 5) + F3(b,c,d) + e + W[i] + 0xca62c1d6UL); b = ROL(b, 30); + #define FF0(a,b,c,d,e,i) e = (ROLc(a, 5) + F0(b,c,d) + e + W[i] + 0x5a827999UL); b = ROLc(b, 30); + #define FF1(a,b,c,d,e,i) e = (ROLc(a, 5) + F1(b,c,d) + e + W[i] + 0x6ed9eba1UL); b = ROLc(b, 30); + #define FF2(a,b,c,d,e,i) e = (ROLc(a, 5) + F2(b,c,d) + e + W[i] + 0x8f1bbcdcUL); b = ROLc(b, 30); + #define FF3(a,b,c,d,e,i) e = (ROLc(a, 5) + F3(b,c,d) + e + W[i] + 0xca62c1d6UL); b = ROLc(b, 30); -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE for (i = 0; i < 20; ) { FF0(a,b,c,d,e,i++); t = e; e = d; d = c; c = b; b = a; a = t; @@ -143,7 +147,7 @@ static int sha1_compress(hash_state *md, unsigned char *buf) return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int sha1_compress(hash_state *md, unsigned char *buf) { int err; @@ -153,9 +157,14 @@ static int sha1_compress(hash_state *md, unsigned char *buf) } #endif +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int sha1_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->sha1.state[0] = 0x67452301UL; md->sha1.state[1] = 0xefcdab89UL; md->sha1.state[2] = 0x98badcfeUL; @@ -166,14 +175,27 @@ int sha1_init(hash_state * md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(sha1_process, sha1_compress, sha1, 64) -int sha1_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (20 bytes) + @return CRYPT_OK if successful +*/ +int sha1_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->sha1.curlen >= sizeof(md->sha1.buf)) { return CRYPT_INVALID_ARG; @@ -208,14 +230,18 @@ int sha1_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 5; i++) { - STORE32H(md->sha1.state[i], hash+(4*i)); + STORE32H(md->sha1.state[i], out+(4*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int sha1_test(void) { #ifndef LTC_TEST diff --git a/sha224.c b/src/hashes/sha2/sha224.c similarity index 74% rename from sha224.c rename to src/hashes/sha2/sha224.c index 2b25ff0..625da34 100644 --- a/sha224.c +++ b/src/hashes/sha2/sha224.c @@ -8,9 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +/** + @param sha224.c + SHA-224 new NIST standard based off of SHA-256 truncated to 224 bits (Tom St Denis) +*/ -/* SHA-224 new NIST standard based off of SHA-256 truncated to 224 bits */ -const struct _hash_descriptor sha224_desc = +const struct ltc_hash_descriptor sha224_desc = { "sha224", 10, @@ -28,9 +31,14 @@ const struct _hash_descriptor sha224_desc = }; /* init the sha256 er... sha224 state ;-) */ +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int sha224_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->sha256.curlen = 0; md->sha256.length = 0; @@ -45,19 +53,32 @@ int sha224_init(hash_state * md) return CRYPT_OK; } -int sha224_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (28 bytes) + @return CRYPT_OK if successful +*/ +int sha224_done(hash_state * md, unsigned char *out) { unsigned char buf[32]; int err; + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); + err = sha256_done(md, buf); - XMEMCPY(hash, buf, 28); -#ifdef CLEAN_STACK + XMEMCPY(out, buf, 28); +#ifdef LTC_CLEAN_STACK zeromem(buf, sizeof(buf)); #endif return err; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int sha224_test(void) { #ifndef LTC_TEST diff --git a/sha256.c b/src/hashes/sha2/sha256.c similarity index 90% rename from sha256.c rename to src/hashes/sha2/sha256.c index b918e3f..318ac57 100644 --- a/sha256.c +++ b/src/hashes/sha2/sha256.c @@ -8,15 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" - -/* SHA256 by Tom St Denis */ - -#include "mycrypt.h" +/** + @file sha256.c + SHA256 by Tom St Denis +*/ #ifdef SHA256 -const struct _hash_descriptor sha256_desc = +const struct ltc_hash_descriptor sha256_desc = { "sha256", 0, @@ -35,7 +36,7 @@ const struct _hash_descriptor sha256_desc = &sha256_test }; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE /* the K array */ static const unsigned long K[64] = { 0x428a2f98UL, 0x71374491UL, 0xb5c0fbcfUL, 0xe9b5dba5UL, 0x3956c25bUL, @@ -57,7 +58,7 @@ static const unsigned long K[64] = { /* Various logical functions */ #define Ch(x,y,z) (z ^ (x & (y ^ z))) #define Maj(x,y,z) (((x | y) & z) | (x & y)) -#define S(x, n) ROR((x),(n)) +#define S(x, n) RORc((x),(n)) #define R(x, n) (((x)&0xFFFFFFFFUL)>>(n)) #define Sigma0(x) (S(x, 2) ^ S(x, 13) ^ S(x, 22)) #define Sigma1(x) (S(x, 6) ^ S(x, 11) ^ S(x, 25)) @@ -65,14 +66,14 @@ static const unsigned long K[64] = { #define Gamma1(x) (S(x, 17) ^ S(x, 19) ^ R(x, 10)) /* compress 512-bits */ -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _sha256_compress(hash_state * md, unsigned char *buf) #else static int sha256_compress(hash_state * md, unsigned char *buf) #endif { ulong32 S[8], W[64], t0, t1; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE ulong32 t; #endif int i; @@ -93,7 +94,7 @@ static int sha256_compress(hash_state * md, unsigned char *buf) } /* Compress */ -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE #define RND(a,b,c,d,e,f,g,h,i) \ t0 = h + Sigma1(e) + Ch(e, f, g) + K[i] + W[i]; \ t1 = Sigma0(a) + Maj(a, b, c); \ @@ -188,7 +189,7 @@ static int sha256_compress(hash_state * md, unsigned char *buf) return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int sha256_compress(hash_state * md, unsigned char *buf) { int err; @@ -198,10 +199,14 @@ static int sha256_compress(hash_state * md, unsigned char *buf) } #endif -/* init the sha256 state */ +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int sha256_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->sha256.curlen = 0; md->sha256.length = 0; @@ -216,14 +221,27 @@ int sha256_init(hash_state * md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(sha256_process, sha256_compress, sha256, 64) -int sha256_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (32 bytes) + @return CRYPT_OK if successful +*/ +int sha256_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->sha256.curlen >= sizeof(md->sha256.buf)) { return CRYPT_INVALID_ARG; @@ -259,14 +277,18 @@ int sha256_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 8; i++) { - STORE32H(md->sha256.state[i], hash+(4*i)); + STORE32H(md->sha256.state[i], out+(4*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int sha256_test(void) { #ifndef LTC_TEST diff --git a/sha384.c b/src/hashes/sha2/sha384.c similarity index 79% rename from sha384.c rename to src/hashes/sha2/sha384.c index 190e8ca..debc768 100644 --- a/sha384.c +++ b/src/hashes/sha2/sha384.c @@ -8,10 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +/** + @param sha384.c + SHA384 hash included in sha512.c, Tom St Denis +*/ -/* included in sha512.c */ - -const struct _hash_descriptor sha384_desc = +const struct ltc_hash_descriptor sha384_desc = { "sha384", 4, @@ -30,9 +32,14 @@ const struct _hash_descriptor sha384_desc = &sha384_test }; +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int sha384_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->sha512.curlen = 0; md->sha512.length = 0; @@ -47,25 +54,35 @@ int sha384_init(hash_state * md) return CRYPT_OK; } -int sha384_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (48 bytes) + @return CRYPT_OK if successful +*/ +int sha384_done(hash_state * md, unsigned char *out) { unsigned char buf[64]; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->sha512.curlen >= sizeof(md->sha512.buf)) { return CRYPT_INVALID_ARG; } sha512_done(md, buf); - XMEMCPY(hash, buf, 48); -#ifdef CLEAN_STACK + XMEMCPY(out, buf, 48); +#ifdef LTC_CLEAN_STACK zeromem(buf, sizeof(buf)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int sha384_test(void) { #ifndef LTC_TEST diff --git a/sha512.c b/src/hashes/sha2/sha512.c similarity index 89% rename from sha512.c rename to src/hashes/sha2/sha512.c index baf27cf..1cc14db 100644 --- a/sha512.c +++ b/src/hashes/sha2/sha512.c @@ -8,14 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* SHA512 by Tom St Denis */ - -#include "mycrypt.h" +/** + @param sha512.c + SHA512 by Tom St Denis +*/ #ifdef SHA512 -const struct _hash_descriptor sha512_desc = +const struct ltc_hash_descriptor sha512_desc = { "sha512", 5, @@ -81,7 +83,7 @@ CONST64(0x5fcb6fab3ad6faec), CONST64(0x6c44198c4a475817) /* Various logical functions */ #define Ch(x,y,z) (z ^ (x & (y ^ z))) #define Maj(x,y,z) (((x | y) & z) | (x & y)) -#define S(x, n) ROR64((x),(n)) +#define S(x, n) ROR64c(x, n) #define R(x, n) (((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)n)) #define Sigma0(x) (S(x, 28) ^ S(x, 34) ^ S(x, 39)) #define Sigma1(x) (S(x, 14) ^ S(x, 18) ^ S(x, 41)) @@ -89,7 +91,7 @@ CONST64(0x5fcb6fab3ad6faec), CONST64(0x6c44198c4a475817) #define Gamma1(x) (S(x, 19) ^ S(x, 61) ^ R(x, 6)) /* compress 1024-bits */ -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _sha512_compress(hash_state * md, unsigned char *buf) #else static int sha512_compress(hash_state * md, unsigned char *buf) @@ -114,7 +116,7 @@ static int sha512_compress(hash_state * md, unsigned char *buf) } /* Compress */ -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE for (i = 0; i < 80; i++) { t0 = S[7] + Sigma1(S[4]) + Ch(S[4], S[5], S[6]) + K[i] + W[i]; t1 = Sigma0(S[0]) + Maj(S[0], S[1], S[2]); @@ -156,7 +158,7 @@ static int sha512_compress(hash_state * md, unsigned char *buf) } /* compress 1024-bits */ -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int sha512_compress(hash_state * md, unsigned char *buf) { int err; @@ -166,10 +168,14 @@ static int sha512_compress(hash_state * md, unsigned char *buf) } #endif -/* init the sha512 state */ +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int sha512_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->sha512.curlen = 0; md->sha512.length = 0; md->sha512.state[0] = CONST64(0x6a09e667f3bcc908); @@ -183,14 +189,27 @@ int sha512_init(hash_state * md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(sha512_process, sha512_compress, sha512, 128) -int sha512_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (64 bytes) + @return CRYPT_OK if successful +*/ +int sha512_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->sha512.curlen >= sizeof(md->sha512.buf)) { return CRYPT_INVALID_ARG; @@ -228,14 +247,18 @@ int sha512_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 8; i++) { - STORE64H(md->sha512.state[i], hash+(8*i)); + STORE64H(md->sha512.state[i], out+(8*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int sha512_test(void) { #ifndef LTC_TEST diff --git a/tiger.c b/src/hashes/tiger.c similarity index 97% rename from tiger.c rename to src/hashes/tiger.c index 3235953..12ef7ab 100644 --- a/tiger.c +++ b/src/hashes/tiger.c @@ -9,11 +9,16 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file tiger.c + Tiger hash function, Tom St Denis +*/ #ifdef TIGER -const struct _hash_descriptor tiger_desc = +const struct ltc_hash_descriptor tiger_desc = { "tiger", 1, @@ -605,7 +610,7 @@ static void key_schedule(ulong64 *x) x[7] -= x[6] ^ CONST64(0x0123456789ABCDEF); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _tiger_compress(hash_state *md, unsigned char *buf) #else static int tiger_compress(hash_state *md, unsigned char *buf) @@ -636,7 +641,7 @@ static int tiger_compress(hash_state *md, unsigned char *buf) return CRYPT_OK; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int tiger_compress(hash_state *md, unsigned char *buf) { int err; @@ -646,9 +651,14 @@ static int tiger_compress(hash_state *md, unsigned char *buf) } #endif +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int tiger_init(hash_state *md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); md->tiger.state[0] = CONST64(0x0123456789ABCDEF); md->tiger.state[1] = CONST64(0xFEDCBA9876543210); md->tiger.state[2] = CONST64(0xF096A5B4C3B2E187); @@ -657,12 +667,25 @@ int tiger_init(hash_state *md) return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(tiger_process, tiger_compress, tiger, 64) -int tiger_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (24 bytes) + @return CRYPT_OK if successful +*/ +int tiger_done(hash_state * md, unsigned char *out) { - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->tiger.curlen >= sizeof(md->tiger.buf)) { return CRYPT_INVALID_ARG; @@ -695,16 +718,20 @@ int tiger_done(hash_state * md, unsigned char *hash) tiger_compress(md, md->tiger.buf); /* copy output */ - STORE64L(md->tiger.state[0], &hash[0]); - STORE64L(md->tiger.state[1], &hash[8]); - STORE64L(md->tiger.state[2], &hash[16]); -#ifdef CLEAN_STACK + STORE64L(md->tiger.state[0], &out[0]); + STORE64L(md->tiger.state[1], &out[8]); + STORE64L(md->tiger.state[2], &out[16]); +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(hash_state)); #endif return CRYPT_OK; } +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int tiger_test(void) { #ifndef LTC_TEST diff --git a/whirl.c b/src/hashes/whirl/whirl.c similarity index 89% rename from whirl.c rename to src/hashes/whirl/whirl.c index 8135b93..4902fd6 100644 --- a/whirl.c +++ b/src/hashes/whirl/whirl.c @@ -9,13 +9,16 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* WHIRLPOOL (using their new sbox) hash function by Tom St Denis */ +/** + @file whirl.c + WHIRLPOOL (using their new sbox) hash function by Tom St Denis +*/ -#include "mycrypt.h" +#include "tomcrypt.h" #ifdef WHIRLPOOL -const struct _hash_descriptor whirlpool_desc = +const struct ltc_hash_descriptor whirlpool_desc = { "whirlpool", 11, @@ -49,7 +52,7 @@ const struct _hash_descriptor whirlpool_desc = SB6(GB(a, i-6, 1)) ^ \ SB7(GB(a, i-7, 0)) -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int _whirlpool_compress(hash_state *md, unsigned char *buf) #else static int whirlpool_compress(hash_state *md, unsigned char *buf) @@ -105,7 +108,7 @@ static int whirlpool_compress(hash_state *md, unsigned char *buf) } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK static int whirlpool_compress(hash_state *md, unsigned char *buf) { int err; @@ -116,21 +119,39 @@ static int whirlpool_compress(hash_state *md, unsigned char *buf) #endif +/** + Initialize the hash state + @param md The hash state you wish to initialize + @return CRYPT_OK if successful +*/ int whirlpool_init(hash_state * md) { - _ARGCHK(md != NULL); + LTC_ARGCHK(md != NULL); zeromem(&md->whirlpool, sizeof(md->whirlpool)); return CRYPT_OK; } +/** + Process a block of memory though the hash + @param md The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful +*/ HASH_PROCESS(whirlpool_process, whirlpool_compress, whirlpool, 64) -int whirlpool_done(hash_state * md, unsigned char *hash) +/** + Terminate the hash to get the digest + @param md The hash state + @param out [out] The destination of the hash (64 bytes) + @return CRYPT_OK if successful +*/ +int whirlpool_done(hash_state * md, unsigned char *out) { int i; - _ARGCHK(md != NULL); - _ARGCHK(hash != NULL); + LTC_ARGCHK(md != NULL); + LTC_ARGCHK(out != NULL); if (md->whirlpool.curlen >= sizeof(md->whirlpool.buf)) { return CRYPT_INVALID_ARG; @@ -165,15 +186,18 @@ int whirlpool_done(hash_state * md, unsigned char *hash) /* copy output */ for (i = 0; i < 8; i++) { - STORE64H(md->whirlpool.state[i], hash+(8*i)); + STORE64H(md->whirlpool.state[i], out+(8*i)); } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(*md)); #endif return CRYPT_OK; } - +/** + Self-test the hash + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled +*/ int whirlpool_test(void) { #ifndef LTC_TEST diff --git a/whirltab.c b/src/hashes/whirl/whirltab.c similarity index 99% rename from whirltab.c rename to src/hashes/whirl/whirltab.c index 031c643..fb99bea 100644 --- a/whirltab.c +++ b/src/hashes/whirl/whirltab.c @@ -1,3 +1,7 @@ +/** + @file whirltab.c + WHIRLPOOL tables, Tom St Denis +*/ static const ulong64 sbox0[] = { CONST64(0x18186018c07830d8), CONST64(0x23238c2305af4626), CONST64(0xc6c63fc67ef991b8), CONST64(0xe8e887e8136fcdfb), CONST64(0x878726874ca113cb), CONST64(0xb8b8dab8a9626d11), CONST64(0x0101040108050209), CONST64(0x4f4f214f426e9e0d), @@ -65,16 +69,16 @@ CONST64(0xcccc17cc2edb85e2), CONST64(0x424215422a578468), CONST64(0x98985a98b4c2 CONST64(0x2828a0285d885075), CONST64(0x5c5c6d5cda31b886), CONST64(0xf8f8c7f8933fed6b), CONST64(0x8686228644a411c2) }; -#ifdef SMALL_CODE +#ifdef LTC_SMALL_CODE #define SB0(x) sbox0[x] -#define SB1(x) ROR64(sbox0[x], 8) -#define SB2(x) ROR64(sbox0[x], 16) -#define SB3(x) ROR64(sbox0[x], 24) -#define SB4(x) ROR64(sbox0[x], 32) -#define SB5(x) ROR64(sbox0[x], 40) -#define SB6(x) ROR64(sbox0[x], 48) -#define SB7(x) ROR64(sbox0[x], 56) +#define SB1(x) ROR64c(sbox0[x], 8) +#define SB2(x) ROR64c(sbox0[x], 16) +#define SB3(x) ROR64c(sbox0[x], 24) +#define SB4(x) ROR64c(sbox0[x], 32) +#define SB5(x) ROR64c(sbox0[x], 40) +#define SB6(x) ROR64c(sbox0[x], 48) +#define SB7(x) ROR64c(sbox0[x], 56) #else diff --git a/ltc_tommath.h b/src/headers/ltc_tommath.h similarity index 99% rename from ltc_tommath.h rename to src/headers/ltc_tommath.h index 896d389..dc1c75a 100644 --- a/ltc_tommath.h +++ b/src/headers/ltc_tommath.h @@ -44,7 +44,7 @@ extern "C" { /* detect 64-bit mode if possible */ #if defined(__x86_64__) - #if !(defined(MP_64BIT) && defined(MP_16BIT) && defined(MP_8BIT)) + #if !(defined(MP_64BIT) || defined(MP_31BIT) || defined(MP_16BIT) || defined(MP_8BIT)) #define MP_64BIT #endif #endif @@ -442,7 +442,7 @@ int mp_exptmod(mp_int *a, mp_int *b, mp_int *c, mp_int *d); #endif /* table of first PRIME_SIZE primes */ -extern const mp_digit __prime_tab[]; +extern const mp_digit ltm_prime_tab[]; /* result=1 if a is divisible by one of the first PRIME_SIZE primes */ int mp_prime_is_divisible(mp_int *a, int *result); diff --git a/mycrypt.h b/src/headers/tomcrypt.h similarity index 80% rename from mycrypt.h rename to src/headers/tomcrypt.h index 1d6a938..bd80896 100644 --- a/mycrypt.h +++ b/src/headers/tomcrypt.h @@ -1,5 +1,5 @@ -#ifndef CRYPT_H_ -#define CRYPT_H_ +#ifndef TOMCRYPT_H_ +#define TOMCRYPT_H_ #include #include #include @@ -8,19 +8,19 @@ #include #include -/* if there is a custom definition header file use it */ -#include +/* use configuration data */ +#include #ifdef __cplusplus extern "C" { #endif /* version */ -#define CRYPT 0x0099 -#define SCRYPT "0.99" +#define CRYPT 0x0100 +#define SCRYPT "1.00" /* max size of either a cipher/hash block or symmetric key [largest of the two] */ -#define MAXBLOCKSIZE 64 +#define MAXBLOCKSIZE 128 /* descriptor table size */ #define TAB_SIZE 32 @@ -62,19 +62,19 @@ enum { CRYPT_INVALID_PRIME_SIZE/* Invalid size of prime requested */ }; -#include -#include -#include -#include -#include -#include -#include -#include -#include +#include +#include +#include +#include +#include +#include +#include +#include +#include #ifdef __cplusplus } #endif -#endif /* CRYPT_H_ */ +#endif /* TOMCRYPT_H_ */ diff --git a/mycrypt_argchk.h b/src/headers/tomcrypt_argchk.h similarity index 56% rename from mycrypt_argchk.h rename to src/headers/tomcrypt_argchk.h index 69f27d6..5c8759d 100644 --- a/mycrypt_argchk.h +++ b/src/headers/tomcrypt_argchk.h @@ -1,4 +1,4 @@ -/* Defines the _ARGCHK macro used within the library */ +/* Defines the LTC_ARGCHK macro used within the library */ /* ARGTYPE is defined in mycrypt_cfg.h */ #if ARGTYPE == 0 @@ -6,16 +6,16 @@ /* this is the default LibTomCrypt macro */ void crypt_argchk(char *v, char *s, int d); -#define _ARGCHK(x) if (!(x)) { crypt_argchk(#x, __FILE__, __LINE__); } +#define LTC_ARGCHK(x) if (!(x)) { crypt_argchk(#x, __FILE__, __LINE__); } #elif ARGTYPE == 1 /* fatal type of error */ -#define _ARGCHK(x) assert((x)) +#define LTC_ARGCHK(x) assert((x)) #elif ARGTYPE == 2 -#define _ARGCHK(x) +#define LTC_ARGCHK(x) #endif diff --git a/mycrypt_cfg.h b/src/headers/tomcrypt_cfg.h similarity index 97% rename from mycrypt_cfg.h rename to src/headers/tomcrypt_cfg.h index b440e0b..8e8f17e 100644 --- a/mycrypt_cfg.h +++ b/src/headers/tomcrypt_cfg.h @@ -4,8 +4,8 @@ * out the line that #define's the word for the thing you want to remove. phew! */ -#ifndef MYCRYPT_CFG_H -#define MYCRYPT_CFG_H +#ifndef TOMCRYPT_CFG_H +#define TOMCRYPT_CFG_H /* you can change how memory allocation works ... */ void *XMALLOC(size_t n); @@ -82,5 +82,5 @@ int XMEMCMP(const void *s1, const void *s2, size_t n); #define PACKET_SUB_ENC_KEY 3 #endif -#endif /* MYCRYPT_CFG_H */ +#endif diff --git a/src/headers/tomcrypt_cipher.h b/src/headers/tomcrypt_cipher.h new file mode 100644 index 0000000..6d9b555 --- /dev/null +++ b/src/headers/tomcrypt_cipher.h @@ -0,0 +1,497 @@ +/* ---- SYMMETRIC KEY STUFF ----- + * + * We put each of the ciphers scheduled keys in their own structs then we put all of + * the key formats in one union. This makes the function prototypes easier to use. + */ +#ifdef BLOWFISH +struct blowfish_key { + ulong32 S[4][256]; + ulong32 K[18]; +}; +#endif + +#ifdef RC5 +struct rc5_key { + int rounds; + ulong32 K[50]; +}; +#endif + +#ifdef RC6 +struct rc6_key { + ulong32 K[44]; +}; +#endif + +#ifdef SAFERP +struct saferp_key { + unsigned char K[33][16]; + long rounds; +}; +#endif + +#ifdef RIJNDAEL +struct rijndael_key { + ulong32 eK[64], dK[64]; + int Nr; +}; +#endif + +#ifdef XTEA +struct xtea_key { + unsigned long A[32], B[32]; +}; +#endif + +#ifdef TWOFISH +#ifndef TWOFISH_SMALL + struct twofish_key { + ulong32 S[4][256], K[40]; + }; +#else + struct twofish_key { + ulong32 K[40]; + unsigned char S[32], start; + }; +#endif +#endif + +#ifdef SAFER +#define SAFER_K64_DEFAULT_NOF_ROUNDS 6 +#define SAFER_K128_DEFAULT_NOF_ROUNDS 10 +#define SAFER_SK64_DEFAULT_NOF_ROUNDS 8 +#define SAFER_SK128_DEFAULT_NOF_ROUNDS 10 +#define SAFER_MAX_NOF_ROUNDS 13 +#define SAFER_BLOCK_LEN 8 +#define SAFER_KEY_LEN (1 + SAFER_BLOCK_LEN * (1 + 2 * SAFER_MAX_NOF_ROUNDS)) +typedef unsigned char safer_block_t[SAFER_BLOCK_LEN]; +typedef unsigned char safer_key_t[SAFER_KEY_LEN]; +struct safer_key { safer_key_t key; }; +#endif + +#ifdef RC2 +struct rc2_key { unsigned xkey[64]; }; +#endif + +#ifdef DES +struct des_key { + ulong32 ek[32], dk[32]; +}; + +struct des3_key { + ulong32 ek[3][32], dk[3][32]; +}; +#endif + +#ifdef CAST5 +struct cast5_key { + ulong32 K[32], keylen; +}; +#endif + +#ifdef NOEKEON +struct noekeon_key { + ulong32 K[4], dK[4]; +}; +#endif + +#ifdef SKIPJACK +struct skipjack_key { + unsigned char key[10]; +}; +#endif + +#ifdef KHAZAD +struct khazad_key { + ulong64 roundKeyEnc[8 + 1]; + ulong64 roundKeyDec[8 + 1]; +}; +#endif + +#ifdef ANUBIS +struct anubis_key { + int keyBits; + int R; + ulong32 roundKeyEnc[18 + 1][4]; + ulong32 roundKeyDec[18 + 1][4]; +}; +#endif + +typedef union Symmetric_key { +#ifdef DES + struct des_key des; + struct des3_key des3; +#endif +#ifdef RC2 + struct rc2_key rc2; +#endif +#ifdef SAFER + struct safer_key safer; +#endif +#ifdef TWOFISH + struct twofish_key twofish; +#endif +#ifdef BLOWFISH + struct blowfish_key blowfish; +#endif +#ifdef RC5 + struct rc5_key rc5; +#endif +#ifdef RC6 + struct rc6_key rc6; +#endif +#ifdef SAFERP + struct saferp_key saferp; +#endif +#ifdef RIJNDAEL + struct rijndael_key rijndael; +#endif +#ifdef XTEA + struct xtea_key xtea; +#endif +#ifdef CAST5 + struct cast5_key cast5; +#endif +#ifdef NOEKEON + struct noekeon_key noekeon; +#endif +#ifdef SKIPJACK + struct skipjack_key skipjack; +#endif +#ifdef KHAZAD + struct khazad_key khazad; +#endif +#ifdef ANUBIS + struct anubis_key anubis; +#endif +} symmetric_key; + +/* A block cipher ECB structure */ +typedef struct { + /** The index of the cipher chosen */ + int cipher, + /** The block size of the given cipher */ + blocklen; + /** The scheduled key */ + symmetric_key key; +} symmetric_ECB; + +/* A block cipher CFB structure */ +typedef struct { + /** The index of the cipher chosen */ + int cipher, + /** The block size of the given cipher */ + blocklen, + /** The padding offset */ + padlen; + /** The current IV */ + unsigned char IV[MAXBLOCKSIZE], + /** The pad used to encrypt/decrypt */ + pad[MAXBLOCKSIZE]; + /** The scheduled key */ + symmetric_key key; +} symmetric_CFB; + +/* A block cipher OFB structure */ +typedef struct { + /** The index of the cipher chosen */ + int cipher, + /** The block size of the given cipher */ + blocklen, + /** The padding offset */ + padlen; + /** The current IV */ + unsigned char IV[MAXBLOCKSIZE]; + /** The scheduled key */ + symmetric_key key; +} symmetric_OFB; + +/* A block cipher CBC structure */ +typedef struct { + /** The index of the cipher chosen */ + int cipher, + /** The block size of the given cipher */ + blocklen; + /** The current IV */ + unsigned char IV[MAXBLOCKSIZE]; + /** The scheduled key */ + symmetric_key key; +} symmetric_CBC; + +/* A block cipher CTR structure */ +typedef struct { + /** The index of the cipher chosen */ + int cipher, + /** The block size of the given cipher */ + blocklen, + /** The padding offset */ + padlen, + /** The mode (endianess) of the CTR, 0==little, 1==big */ + mode; + /** The counter */ + unsigned char ctr[MAXBLOCKSIZE], + /** The pad used to encrypt/decrypt */ + pad[MAXBLOCKSIZE]; + /** The scheduled key */ + symmetric_key key; +} symmetric_CTR; + +/* cipher descriptor table, last entry has "name == NULL" to mark the end of table */ +extern struct ltc_cipher_descriptor { + /** name of cipher */ + char *name; + /** internal ID */ + unsigned char ID; + /** min keysize (octets) */ + int min_key_length, + /** max keysize (octets) */ + max_key_length, + /** block size (octets) */ + block_length, + /** default number of rounds */ + default_rounds; + /** Setup the cipher + @param key The input symmetric key + @param keylen The length of the input key (octets) + @param num_rounds The requested number of rounds (0==default) + @param skey [out] The destination of the scheduled key + @return CRYPT_OK if successful + */ + int (*setup)(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); + /** Encrypt a block + @param pt The plaintext + @param ct [out] The ciphertext + @param skey The scheduled key + */ + void (*ecb_encrypt)(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); + /** Decrypt a block + @param ct The ciphertext + @param pt [out] The plaintext + @param skey The scheduled key + */ + void (*ecb_decrypt)(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); + /** Test the block cipher + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled + */ + int (*test)(void); + /** Determine a key size + @param keysize [in/out] The size of the key desired and the suggested size + @return CRYPT_OK if successful + */ + int (*keysize)(int *keysize); +} cipher_descriptor[]; + +#ifdef BLOWFISH +int blowfish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void blowfish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void blowfish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int blowfish_test(void); +int blowfish_keysize(int *keysize); +extern const struct ltc_cipher_descriptor blowfish_desc; +#endif + +#ifdef RC5 +int rc5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void rc5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void rc5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int rc5_test(void); +int rc5_keysize(int *keysize); +extern const struct ltc_cipher_descriptor rc5_desc; +#endif + +#ifdef RC6 +int rc6_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void rc6_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void rc6_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int rc6_test(void); +int rc6_keysize(int *keysize); +extern const struct ltc_cipher_descriptor rc6_desc; +#endif + +#ifdef RC2 +int rc2_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void rc2_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void rc2_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int rc2_test(void); +int rc2_keysize(int *keysize); +extern const struct ltc_cipher_descriptor rc2_desc; +#endif + +#ifdef SAFERP +int saferp_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void saferp_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void saferp_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int saferp_test(void); +int saferp_keysize(int *keysize); +extern const struct ltc_cipher_descriptor saferp_desc; +#endif + +#ifdef SAFER +int safer_k64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +int safer_sk64_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +int safer_k128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +int safer_sk128_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void safer_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *key); +void safer_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *key); +int safer_k64_test(void); +int safer_sk64_test(void); +int safer_sk128_test(void); +int safer_64_keysize(int *keysize); +int safer_128_keysize(int *keysize); +extern const struct ltc_cipher_descriptor safer_k64_desc, safer_k128_desc, safer_sk64_desc, safer_sk128_desc; +#endif + +#ifdef RIJNDAEL + +/* make aes an alias */ +#define aes_setup rijndael_setup +#define aes_ecb_encrypt rijndael_ecb_encrypt +#define aes_ecb_decrypt rijndael_ecb_decrypt +#define aes_test rijndael_test +#define aes_keysize rijndael_keysize + +#define aes_enc_setup rijndael_enc_setup +#define aes_enc_ecb_encrypt rijndael_enc_ecb_encrypt +#define aes_enc_keysize rijndael_enc_keysize + +int rijndael_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void rijndael_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void rijndael_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int rijndael_test(void); +int rijndael_keysize(int *keysize); +int rijndael_enc_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void rijndael_enc_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +int rijndael_enc_keysize(int *keysize); +extern const struct ltc_cipher_descriptor rijndael_desc, aes_desc; +extern const struct ltc_cipher_descriptor rijndael_enc_desc, aes_enc_desc; +#endif + +#ifdef XTEA +int xtea_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void xtea_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void xtea_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int xtea_test(void); +int xtea_keysize(int *keysize); +extern const struct ltc_cipher_descriptor xtea_desc; +#endif + +#ifdef TWOFISH +int twofish_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void twofish_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void twofish_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int twofish_test(void); +int twofish_keysize(int *keysize); +extern const struct ltc_cipher_descriptor twofish_desc; +#endif + +#ifdef DES +int des_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void des_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void des_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int des_test(void); +int des_keysize(int *keysize); +int des3_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void des3_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void des3_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int des3_test(void); +int des3_keysize(int *keysize); +extern const struct ltc_cipher_descriptor des_desc, des3_desc; +#endif + +#ifdef CAST5 +int cast5_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void cast5_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void cast5_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int cast5_test(void); +int cast5_keysize(int *keysize); +extern const struct ltc_cipher_descriptor cast5_desc; +#endif + +#ifdef NOEKEON +int noekeon_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void noekeon_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void noekeon_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int noekeon_test(void); +int noekeon_keysize(int *keysize); +extern const struct ltc_cipher_descriptor noekeon_desc; +#endif + +#ifdef SKIPJACK +int skipjack_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void skipjack_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void skipjack_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int skipjack_test(void); +int skipjack_keysize(int *keysize); +extern const struct ltc_cipher_descriptor skipjack_desc; +#endif + +#ifdef KHAZAD +int khazad_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void khazad_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void khazad_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int khazad_test(void); +int khazad_keysize(int *keysize); +extern const struct ltc_cipher_descriptor khazad_desc; +#endif + +#ifdef ANUBIS +int anubis_setup(const unsigned char *key, int keylen, int num_rounds, symmetric_key *skey); +void anubis_ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_key *skey); +void anubis_ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_key *skey); +int anubis_test(void); +int anubis_keysize(int *keysize); +extern const struct ltc_cipher_descriptor anubis_desc; +#endif + +#ifdef ECB +int ecb_start(int cipher, const unsigned char *key, + int keylen, int num_rounds, symmetric_ECB *ecb); +int ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ECB *ecb); +int ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ECB *ecb); +#endif + +#ifdef CFB +int cfb_start(int cipher, const unsigned char *IV, const unsigned char *key, + int keylen, int num_rounds, symmetric_CFB *cfb); +int cfb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CFB *cfb); +int cfb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CFB *cfb); +int cfb_getiv(unsigned char *IV, unsigned long *len, symmetric_CFB *cfb); +int cfb_setiv(const unsigned char *IV, unsigned long len, symmetric_CFB *cfb); +#endif + +#ifdef OFB +int ofb_start(int cipher, const unsigned char *IV, const unsigned char *key, + int keylen, int num_rounds, symmetric_OFB *ofb); +int ofb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_OFB *ofb); +int ofb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_OFB *ofb); +int ofb_getiv(unsigned char *IV, unsigned long *len, symmetric_OFB *ofb); +int ofb_setiv(const unsigned char *IV, unsigned long len, symmetric_OFB *ofb); +#endif + +#ifdef CBC +int cbc_start(int cipher, const unsigned char *IV, const unsigned char *key, + int keylen, int num_rounds, symmetric_CBC *cbc); +int cbc_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_CBC *cbc); +int cbc_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_CBC *cbc); +int cbc_getiv(unsigned char *IV, unsigned long *len, symmetric_CBC *cbc); +int cbc_setiv(const unsigned char *IV, unsigned long len, symmetric_CBC *cbc); +#endif + +#ifdef CTR +int ctr_start(int cipher, const unsigned char *IV, const unsigned char *key, + int keylen, int num_rounds, symmetric_CTR *ctr); +int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CTR *ctr); +int ctr_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CTR *ctr); +int ctr_getiv(unsigned char *IV, unsigned long *len, symmetric_CTR *ctr); +int ctr_setiv(const unsigned char *IV, unsigned long len, symmetric_CTR *ctr); +#endif + +int find_cipher(const char *name); +int find_cipher_any(const char *name, int blocklen, int keylen); +int find_cipher_id(unsigned char ID); + +int register_cipher(const struct ltc_cipher_descriptor *cipher); +int unregister_cipher(const struct ltc_cipher_descriptor *cipher); + +int cipher_is_valid(int idx); + diff --git a/mycrypt_custom.h b/src/headers/tomcrypt_custom.h similarity index 72% rename from mycrypt_custom.h rename to src/headers/tomcrypt_custom.h index 03058bb..20415b6 100644 --- a/mycrypt_custom.h +++ b/src/headers/tomcrypt_custom.h @@ -1,9 +1,8 @@ /* This header is meant to be included before mycrypt.h in projects where * you don't want to throw all the defines in a makefile. */ - -#ifndef MYCRYPT_CUSTOM_H_ -#define MYCRYPT_CUSTOM_H_ +#ifndef TOMCRYPT_CUSTOM_H_ +#define TOMCRYPT_CUSTOM_H_ /* macros for various libc functions you can change for embedded targets */ #define XMALLOC malloc @@ -18,18 +17,21 @@ #define XCLOCKS_PER_SEC CLOCKS_PER_SEC /* Use small code where possible */ -// #define SMALL_CODE +// #define LTC_SMALL_CODE /* Enable self-test test vector checking */ #define LTC_TEST /* clean the stack of functions which put private information on stack */ -// #define CLEAN_STACK +// #define LTC_CLEAN_STACK /* disable all file related functions */ -// #define NO_FILE +// #define LTC_NO_FILE -/* various ciphers */ +/* disable all forms of ASM */ +// #define LTC_NO_ASM + +/* ---> Symmetric Block Ciphers <--- */ #define BLOWFISH #define RC2 #define RC5 @@ -52,15 +54,19 @@ * but has been disabled by default to avoid any such problems */ //#define SAFER +#define KHAZAD +#define ANUBIS +#define ANUBIS_TWEAK -/* block cipher modes of operation */ + +/* ---> Block Cipher Modes of Operation <--- */ #define CFB #define OFB #define ECB #define CBC #define CTR -/* hash functions */ +/* ---> One-Way Hash Functions <--- */ #define CHC_HASH #define WHIRLPOOL #define SHA512 @@ -75,18 +81,23 @@ #define RIPEMD128 #define RIPEMD160 -/* MAC functions */ +/* ---> MAC functions <--- */ #define HMAC #define OMAC #define PMAC -/* Encrypt + Authenticate Modes */ +/* ---> Encrypt + Authenticate Modes <--- */ #define EAX_MODE +#if defined(EAX_MODE) && !(defined(CTR) && defined(OMAC)) + #error EAX_MODE requires CTR and OMAC mode +#endif + #define OCB_MODE /* Various tidbits of modern neatoness */ #define BASE64 +/* --> Pseudo Random Number Generators <--- */ /* Yarrow */ #define YARROW // which descriptor of AES to use? @@ -97,7 +108,10 @@ #error YARROW requires CTR chaining mode to be defined! #endif +/* a PRNG that simply reads from an available system source */ #define SPRNG + +/* The RC4 stream cipher */ #define RC4 /* Fortuna PRNG */ @@ -110,13 +124,13 @@ /* Greg's SOBER128 PRNG ;-0 */ #define SOBER128 +/* the *nix style /dev/random device */ #define DEVRANDOM +/* try /dev/urandom before trying /dev/random */ #define TRY_URANDOM_FIRST -/* Public Key Neatoness */ +/* ---> Public Key Crypto <--- */ #define MRSA -/* enable RSA side channel timing prevention */ -#define RSA_TIMING /* Digital Signature Algorithm */ #define MDSA @@ -155,5 +169,15 @@ #define PKCS_1 #define PKCS_5 +/* Include ASN.1 DER (required by DSA/RSA) */ +#define LTC_DER +#if defined(LTC_DER) && !defined(MPI) + #error ASN.1 DER requires MPI functionality +#endif + +#if (defined(MDSA) || defined(MRSA)) && !defined(LTC_DER) + #error RSA/DSA requires ASN.1 DER functionality, make sure LTC_DER is enabled +#endif + #endif diff --git a/src/headers/tomcrypt_hash.h b/src/headers/tomcrypt_hash.h new file mode 100644 index 0000000..388d234 --- /dev/null +++ b/src/headers/tomcrypt_hash.h @@ -0,0 +1,518 @@ +/* ---- HASH FUNCTIONS ---- */ +#ifdef SHA512 +struct sha512_state { + ulong64 length, state[8]; + unsigned long curlen; + unsigned char buf[128]; +}; +#endif + +#ifdef SHA256 +struct sha256_state { + ulong64 length; + ulong32 state[8], curlen; + unsigned char buf[64]; +}; +#endif + +#ifdef SHA1 +struct sha1_state { + ulong64 length; + ulong32 state[5], curlen; + unsigned char buf[64]; +}; +#endif + +#ifdef MD5 +struct md5_state { + ulong64 length; + ulong32 state[4], curlen; + unsigned char buf[64]; +}; +#endif + +#ifdef MD4 +struct md4_state { + ulong64 length; + ulong32 state[4], curlen; + unsigned char buf[64]; +}; +#endif + +#ifdef TIGER +struct tiger_state { + ulong64 state[3], length; + unsigned long curlen; + unsigned char buf[64]; +}; +#endif + +#ifdef MD2 +struct md2_state { + unsigned char chksum[16], X[48], buf[16]; + unsigned long curlen; +}; +#endif + +#ifdef RIPEMD128 +struct rmd128_state { + ulong64 length; + unsigned char buf[64]; + ulong32 curlen, state[4]; +}; +#endif + +#ifdef RIPEMD160 +struct rmd160_state { + ulong64 length; + unsigned char buf[64]; + ulong32 curlen, state[5]; +}; +#endif + +#ifdef WHIRLPOOL +struct whirlpool_state { + ulong64 length, state[8]; + unsigned char buf[64]; + ulong32 curlen; +}; +#endif + +#ifdef CHC_HASH +struct chc_state { + ulong64 length; + unsigned char state[MAXBLOCKSIZE], buf[MAXBLOCKSIZE]; + ulong32 curlen; +}; +#endif + +typedef union Hash_state { +#ifdef CHC_HASH + struct chc_state chc; +#endif +#ifdef WHIRLPOOL + struct whirlpool_state whirlpool; +#endif +#ifdef SHA512 + struct sha512_state sha512; +#endif +#ifdef SHA256 + struct sha256_state sha256; +#endif +#ifdef SHA1 + struct sha1_state sha1; +#endif +#ifdef MD5 + struct md5_state md5; +#endif +#ifdef MD4 + struct md4_state md4; +#endif +#ifdef MD2 + struct md2_state md2; +#endif +#ifdef TIGER + struct tiger_state tiger; +#endif +#ifdef RIPEMD128 + struct rmd128_state rmd128; +#endif +#ifdef RIPEMD160 + struct rmd160_state rmd160; +#endif +} hash_state; + +extern struct ltc_hash_descriptor { + /** name of hash */ + char *name; + /** internal ID */ + unsigned char ID; + /** Size of digest in octets */ + unsigned long hashsize; + /** Input block size in octets */ + unsigned long blocksize; + /** ASN.1 DER identifier */ + unsigned char DER[64]; + /** Length of DER encoding */ + unsigned long DERlen; + /** Init a hash state + @param hash The hash to initialize + @return CRYPT_OK if successful + */ + int (*init)(hash_state *hash); + /** Process a block of data + @param hash The hash state + @param in The data to hash + @param inlen The length of the data (octets) + @return CRYPT_OK if successful + */ + int (*process)(hash_state *hash, const unsigned char *in, unsigned long inlen); + /** Produce the digest and store it + @param hash The hash state + @param out [out] The destination of the digest + @return CRYPT_OK if successful + */ + int (*done)(hash_state *hash, unsigned char *out); + /** Self-test + @return CRYPT_OK if successful, CRYPT_NOP if self-tests have been disabled + */ + int (*test)(void); +} hash_descriptor[]; + +#ifdef CHC_HASH +int chc_register(int cipher); +int chc_init(hash_state * md); +int chc_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int chc_done(hash_state * md, unsigned char *hash); +int chc_test(void); +extern const struct ltc_hash_descriptor chc_desc; +#endif + +#ifdef WHIRLPOOL +int whirlpool_init(hash_state * md); +int whirlpool_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int whirlpool_done(hash_state * md, unsigned char *hash); +int whirlpool_test(void); +extern const struct ltc_hash_descriptor whirlpool_desc; +#endif + +#ifdef SHA512 +int sha512_init(hash_state * md); +int sha512_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int sha512_done(hash_state * md, unsigned char *hash); +int sha512_test(void); +extern const struct ltc_hash_descriptor sha512_desc; +#endif + +#ifdef SHA384 +#ifndef SHA512 + #error SHA512 is required for SHA384 +#endif +int sha384_init(hash_state * md); +#define sha384_process sha512_process +int sha384_done(hash_state * md, unsigned char *hash); +int sha384_test(void); +extern const struct ltc_hash_descriptor sha384_desc; +#endif + +#ifdef SHA256 +int sha256_init(hash_state * md); +int sha256_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int sha256_done(hash_state * md, unsigned char *hash); +int sha256_test(void); +extern const struct ltc_hash_descriptor sha256_desc; + +#ifdef SHA224 +#ifndef SHA256 + #error SHA256 is required for SHA224 +#endif +int sha224_init(hash_state * md); +#define sha224_process sha256_process +int sha224_done(hash_state * md, unsigned char *hash); +int sha224_test(void); +extern const struct ltc_hash_descriptor sha224_desc; +#endif +#endif + +#ifdef SHA1 +int sha1_init(hash_state * md); +int sha1_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int sha1_done(hash_state * md, unsigned char *hash); +int sha1_test(void); +extern const struct ltc_hash_descriptor sha1_desc; +#endif + +#ifdef MD5 +int md5_init(hash_state * md); +int md5_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int md5_done(hash_state * md, unsigned char *hash); +int md5_test(void); +extern const struct ltc_hash_descriptor md5_desc; +#endif + +#ifdef MD4 +int md4_init(hash_state * md); +int md4_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int md4_done(hash_state * md, unsigned char *hash); +int md4_test(void); +extern const struct ltc_hash_descriptor md4_desc; +#endif + +#ifdef MD2 +int md2_init(hash_state * md); +int md2_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int md2_done(hash_state * md, unsigned char *hash); +int md2_test(void); +extern const struct ltc_hash_descriptor md2_desc; +#endif + +#ifdef TIGER +int tiger_init(hash_state * md); +int tiger_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int tiger_done(hash_state * md, unsigned char *hash); +int tiger_test(void); +extern const struct ltc_hash_descriptor tiger_desc; +#endif + +#ifdef RIPEMD128 +int rmd128_init(hash_state * md); +int rmd128_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int rmd128_done(hash_state * md, unsigned char *hash); +int rmd128_test(void); +extern const struct ltc_hash_descriptor rmd128_desc; +#endif + +#ifdef RIPEMD160 +int rmd160_init(hash_state * md); +int rmd160_process(hash_state * md, const unsigned char *in, unsigned long inlen); +int rmd160_done(hash_state * md, unsigned char *hash); +int rmd160_test(void); +extern const struct ltc_hash_descriptor rmd160_desc; +#endif + +int find_hash(const char *name); +int find_hash_id(unsigned char ID); +int find_hash_any(const char *name, int digestlen); +int register_hash(const struct ltc_hash_descriptor *hash); +int unregister_hash(const struct ltc_hash_descriptor *hash); +int hash_is_valid(int idx); + +int hash_memory(int hash, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen); +int hash_memory_multi(int hash, unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...); +int hash_filehandle(int hash, FILE *in, unsigned char *out, unsigned long *outlen); +int hash_file(int hash, const char *fname, unsigned char *out, unsigned long *outlen); + +/* a simple macro for making hash "process" functions */ +#define HASH_PROCESS(func_name, compress_name, state_var, block_size) \ +int func_name (hash_state * md, const unsigned char *in, unsigned long inlen) \ +{ \ + unsigned long n; \ + int err; \ + LTC_ARGCHK(md != NULL); \ + LTC_ARGCHK(in != NULL); \ + if (md-> state_var .curlen > sizeof(md-> state_var .buf)) { \ + return CRYPT_INVALID_ARG; \ + } \ + while (inlen > 0) { \ + if (md-> state_var .curlen == 0 && inlen >= block_size) { \ + if ((err = compress_name (md, (unsigned char *)in)) != CRYPT_OK) { \ + return err; \ + } \ + md-> state_var .length += block_size * 8; \ + in += block_size; \ + inlen -= block_size; \ + } else { \ + n = MIN(inlen, (block_size - md-> state_var .curlen)); \ + memcpy(md-> state_var .buf + md-> state_var.curlen, in, (size_t)n); \ + md-> state_var .curlen += n; \ + in += n; \ + inlen -= n; \ + if (md-> state_var .curlen == block_size) { \ + if ((err = compress_name (md, md-> state_var .buf)) != CRYPT_OK) {\ + return err; \ + } \ + md-> state_var .length += 8*block_size; \ + md-> state_var .curlen = 0; \ + } \ + } \ + } \ + return CRYPT_OK; \ +} + +#ifdef HMAC +typedef struct Hmac_state { + hash_state md; + int hash; + hash_state hashstate; + unsigned char *key; +} hmac_state; + +int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned long keylen); +int hmac_process(hmac_state *hmac, const unsigned char *in, unsigned long inlen); +int hmac_done(hmac_state *hmac, unsigned char *out, unsigned long *outlen); +int hmac_test(void); +int hmac_memory(int hash, + const unsigned char *key, unsigned long keylen, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen); +int hmac_memory_multi(int hash, + const unsigned char *key, unsigned long keylen, + unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...); +int hmac_file(int hash, const char *fname, const unsigned char *key, + unsigned long keylen, + unsigned char *dst, unsigned long *dstlen); +#endif + +#ifdef OMAC + +typedef struct { + int cipher_idx, + buflen, + blklen; + unsigned char block[MAXBLOCKSIZE], + prev[MAXBLOCKSIZE], + Lu[2][MAXBLOCKSIZE]; + symmetric_key key; +} omac_state; + +int omac_init(omac_state *omac, int cipher, const unsigned char *key, unsigned long keylen); +int omac_process(omac_state *omac, const unsigned char *in, unsigned long inlen); +int omac_done(omac_state *omac, unsigned char *out, unsigned long *outlen); +int omac_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen); +int omac_memory_multi(int cipher, + const unsigned char *key, unsigned long keylen, + unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...); +int omac_file(int cipher, + const unsigned char *key, unsigned long keylen, + const char *filename, + unsigned char *out, unsigned long *outlen); +int omac_test(void); +#endif /* OMAC */ + +#ifdef PMAC + +typedef struct { + unsigned char Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */ + Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */ + Lr[MAXBLOCKSIZE], /* L * x^-1 */ + block[MAXBLOCKSIZE], /* currently accumulated block */ + checksum[MAXBLOCKSIZE]; /* current checksum */ + + symmetric_key key; /* scheduled key for cipher */ + unsigned long block_index; /* index # for current block */ + int cipher_idx, /* cipher idx */ + block_len, /* length of block */ + buflen; /* number of bytes in the buffer */ +} pmac_state; + +int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned long keylen); +int pmac_process(pmac_state *pmac, const unsigned char *in, unsigned long inlen); +int pmac_done(pmac_state *pmac, unsigned char *out, unsigned long *outlen); + +int pmac_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *msg, unsigned long msglen, + unsigned char *out, unsigned long *outlen); + +int pmac_memory_multi(int cipher, + const unsigned char *key, unsigned long keylen, + unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...); + +int pmac_file(int cipher, + const unsigned char *key, unsigned long keylen, + const char *filename, + unsigned char *out, unsigned long *outlen); + +int pmac_test(void); + +/* internal functions */ +int pmac_ntz(unsigned long x); +void pmac_shift_xor(pmac_state *pmac); + +#endif /* PMAC */ + +#ifdef EAX_MODE + +#if !(defined(OMAC) && defined(CTR)) + #error EAX_MODE requires OMAC and CTR +#endif + +typedef struct { + unsigned char N[MAXBLOCKSIZE]; + symmetric_CTR ctr; + omac_state headeromac, ctomac; +} eax_state; + +int eax_init(eax_state *eax, int cipher, const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, unsigned long noncelen, + const unsigned char *header, unsigned long headerlen); + +int eax_encrypt(eax_state *eax, const unsigned char *pt, unsigned char *ct, unsigned long length); +int eax_decrypt(eax_state *eax, const unsigned char *ct, unsigned char *pt, unsigned long length); +int eax_addheader(eax_state *eax, const unsigned char *header, unsigned long length); +int eax_done(eax_state *eax, unsigned char *tag, unsigned long *taglen); + +int eax_encrypt_authenticate_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, unsigned long noncelen, + const unsigned char *header, unsigned long headerlen, + const unsigned char *pt, unsigned long ptlen, + unsigned char *ct, + unsigned char *tag, unsigned long *taglen); + +int eax_decrypt_verify_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, unsigned long noncelen, + const unsigned char *header, unsigned long headerlen, + const unsigned char *ct, unsigned long ctlen, + unsigned char *pt, + unsigned char *tag, unsigned long taglen, + int *stat); + + int eax_test(void); +#endif /* EAX MODE */ + +#ifdef OCB_MODE +typedef struct { + unsigned char L[MAXBLOCKSIZE], /* L value */ + Ls[32][MAXBLOCKSIZE], /* L shifted by i bits to the left */ + Li[MAXBLOCKSIZE], /* value of Li [current value, we calc from previous recall] */ + Lr[MAXBLOCKSIZE], /* L * x^-1 */ + R[MAXBLOCKSIZE], /* R value */ + checksum[MAXBLOCKSIZE]; /* current checksum */ + + symmetric_key key; /* scheduled key for cipher */ + unsigned long block_index; /* index # for current block */ + int cipher, /* cipher idx */ + block_len; /* length of block */ +} ocb_state; + +int ocb_init(ocb_state *ocb, int cipher, + const unsigned char *key, unsigned long keylen, const unsigned char *nonce); + +int ocb_encrypt(ocb_state *ocb, const unsigned char *pt, unsigned char *ct); +int ocb_decrypt(ocb_state *ocb, const unsigned char *ct, unsigned char *pt); + +int ocb_done_encrypt(ocb_state *ocb, + const unsigned char *pt, unsigned long ptlen, + unsigned char *ct, + unsigned char *tag, unsigned long *taglen); + +int ocb_done_decrypt(ocb_state *ocb, + const unsigned char *ct, unsigned long ctlen, + unsigned char *pt, + const unsigned char *tag, unsigned long taglen, int *stat); + +int ocb_encrypt_authenticate_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, + const unsigned char *pt, unsigned long ptlen, + unsigned char *ct, + unsigned char *tag, unsigned long *taglen); + +int ocb_decrypt_verify_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *nonce, + const unsigned char *ct, unsigned long ctlen, + unsigned char *pt, + const unsigned char *tag, unsigned long taglen, + int *stat); + +int ocb_test(void); + +/* internal functions */ +void ocb_shift_xor(ocb_state *ocb, unsigned char *Z); +int ocb_ntz(unsigned long x); +int s_ocb_done(ocb_state *ocb, const unsigned char *pt, unsigned long ptlen, + unsigned char *ct, unsigned char *tag, unsigned long *taglen, int mode); + +#endif /* OCB_MODE */ diff --git a/mycrypt_macros.h b/src/headers/tomcrypt_macros.h similarity index 85% rename from mycrypt_macros.h rename to src/headers/tomcrypt_macros.h index 6e2eaa2..971cb9c 100644 --- a/mycrypt_macros.h +++ b/src/headers/tomcrypt_macros.h @@ -190,19 +190,23 @@ #define BSWAP(x) ( ((x>>24)&0x000000FFUL) | ((x<<24)&0xFF000000UL) | \ ((x>>8)&0x0000FF00UL) | ((x<<8)&0x00FF0000UL) ) -#ifdef _MSC_VER + +/* 32-bit Rotates */ +#if defined(_MSC_VER) /* instrinsic rotate */ #include #pragma intrinsic(_lrotr,_lrotl) #define ROR(x,n) _lrotr(x,n) #define ROL(x,n) _lrotl(x,n) +#define RORc(x,n) _lrotr(x,n) +#define ROLc(x,n) _lrotl(x,n) -#elif defined(__GNUC__) && (defined(__i386__) || defined(__x86_64__)) && !defined(INTEL_CC) +#elif defined(__GNUC__) && (defined(__i386__) || defined(__x86_64__)) && !defined(INTEL_CC) && !defined(LTC_NO_ASM) static inline unsigned ROL(unsigned word, int i) { - __asm__("roll %%cl,%0" + asm ("roll %%cl,%0" :"=r" (word) :"0" (word),"c" (i)); return word; @@ -210,25 +214,54 @@ static inline unsigned ROL(unsigned word, int i) static inline unsigned ROR(unsigned word, int i) { - __asm__("rorl %%cl,%0" + asm ("rorl %%cl,%0" :"=r" (word) :"0" (word),"c" (i)); return word; } +#ifndef LTC_NO_ROLC + +static inline unsigned ROLc(unsigned word, const int i) +{ + asm ("roll %2,%0" + :"=r" (word) + :"0" (word),"I" (i)); + return word; +} + +static inline unsigned RORc(unsigned word, const int i) +{ + asm ("rorl %2,%0" + :"=r" (word) + :"0" (word),"I" (i)); + return word; +} + +#else + +#define ROLc ROL +#define RORc ROR + +#endif + #else /* rotates the hard way */ #define ROL(x, y) ( (((unsigned long)(x)<<(unsigned long)((y)&31)) | (((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL) #define ROR(x, y) ( ((((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)((y)&31)) | ((unsigned long)(x)<<(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL) +#define ROLc(x, y) ( (((unsigned long)(x)<<(unsigned long)((y)&31)) | (((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL) +#define RORc(x, y) ( ((((unsigned long)(x)&0xFFFFFFFFUL)>>(unsigned long)((y)&31)) | ((unsigned long)(x)<<(unsigned long)(32-((y)&31)))) & 0xFFFFFFFFUL) #endif -#if defined(__GNUCC__) && defined(__x86_64__) + +/* 64-bit Rotates */ +#if defined(__GNUC__) && defined(__x86_64__) && !defined(LTC_NO_ASM) static inline unsigned long ROL64(unsigned long word, int i) { - __asm__("rolq %%cl,%0" + asm("rolq %%cl,%0" :"=r" (word) :"0" (word),"c" (i)); return word; @@ -236,13 +269,38 @@ static inline unsigned long ROL64(unsigned long word, int i) static inline unsigned long ROR64(unsigned long word, int i) { - __asm__("rorq %%cl,%0" + asm("rorq %%cl,%0" :"=r" (word) :"0" (word),"c" (i)); return word; } -#else +#ifndef LTC_NO_ROLC + +static inline unsigned long ROL64c(unsigned long word, const int i) +{ + asm("rolq %2,%0" + :"=r" (word) + :"0" (word),"J" (i)); + return word; +} + +static inline unsigned long ROR64c(unsigned long word, const int i) +{ + asm("rorq %2,%0" + :"=r" (word) + :"0" (word),"J" (i)); + return word; +} + +#else /* LTC_NO_ROLC */ + +#define ROL64c ROL +#define ROR64c ROR + +#endif + +#else /* Not x86_64 */ #define ROL64(x, y) \ ( (((x)<<((ulong64)(y)&63)) | \ @@ -252,6 +310,14 @@ static inline unsigned long ROR64(unsigned long word, int i) ( ((((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)(y)&CONST64(63))) | \ ((x)<<((ulong64)(64-((y)&CONST64(63)))))) & CONST64(0xFFFFFFFFFFFFFFFF)) +#define ROL64c(x, y) \ + ( (((x)<<((ulong64)(y)&63)) | \ + (((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)64-((y)&63)))) & CONST64(0xFFFFFFFFFFFFFFFF)) + +#define ROR64c(x, y) \ + ( ((((x)&CONST64(0xFFFFFFFFFFFFFFFF))>>((ulong64)(y)&CONST64(63))) | \ + ((x)<<((ulong64)(64-((y)&CONST64(63)))))) & CONST64(0xFFFFFFFFFFFFFFFF)) + #endif #undef MAX diff --git a/src/headers/tomcrypt_misc.h b/src/headers/tomcrypt_misc.h new file mode 100644 index 0000000..bed5015 --- /dev/null +++ b/src/headers/tomcrypt_misc.h @@ -0,0 +1,17 @@ +/* ---- BASE64 Routines ---- */ +#ifdef BASE64 +int base64_encode(const unsigned char *in, unsigned long len, + unsigned char *out, unsigned long *outlen); + +int base64_decode(const unsigned char *in, unsigned long len, + unsigned char *out, unsigned long *outlen); +#endif + +/* ---- MEM routines ---- */ +void zeromem(void *dst, size_t len); +void burn_stack(unsigned long len); + +const char *error_to_string(int err); +int mpi_to_ltc_error(int err); + +extern const char *crypt_build_settings; diff --git a/mycrypt_pk.h b/src/headers/tomcrypt_pk.h similarity index 53% rename from mycrypt_pk.h rename to src/headers/tomcrypt_pk.h index 6345116..b1254db 100644 --- a/mycrypt_pk.h +++ b/src/headers/tomcrypt_pk.h @@ -71,8 +71,8 @@ /* ---- PACKET ---- */ #ifdef PACKET - void packet_store_header(unsigned char *dst, int section, int subsection); - int packet_valid_header(unsigned char *src, int section, int subsection); +void packet_store_header(unsigned char *dst, int section, int subsection); +int packet_valid_header(unsigned char *src, int section, int subsection); #endif @@ -92,70 +92,53 @@ typedef struct Rsa_key { mp_int e, d, N, p, q, qP, dP, dQ; } rsa_key; - int rsa_make_key(prng_state *prng, int wprng, int size, long e, rsa_key *key); +int rsa_make_key(prng_state *prng, int wprng, int size, long e, rsa_key *key); - int rsa_exptmod(const unsigned char *in, unsigned long inlen, +int rsa_exptmod(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen, int which, - prng_state *prng, int prng_idx, rsa_key *key); -#ifdef RSA_TIMING - - int tim_exptmod(prng_state *prng, int prng_idx, - mp_int *c, mp_int *e, mp_int *d, mp_int *n, mp_int *m); - -#else - -#define tim_exptmod(prng, prng_idx, c, e, d, n, m) mpi_to_ltc_error(mp_exptmod(c, d, n, m)) - -#endif - - void rsa_free(rsa_key *key); +void rsa_free(rsa_key *key); /* These use PKCS #1 v2.0 padding */ -int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen, - unsigned char *outkey, unsigned long *outlen, +int rsa_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, const unsigned char *lparam, unsigned long lparamlen, prng_state *prng, int prng_idx, int hash_idx, rsa_key *key); -int rsa_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, - const unsigned char *lparam, unsigned long lparamlen, - prng_state *prng, int prng_idx, - int hash_idx, int *res, +int rsa_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + const unsigned char *lparam, unsigned long lparamlen, + int hash_idx, int *stat, rsa_key *key); -int rsa_sign_hash(const unsigned char *msghash, unsigned long msghashlen, - unsigned char *sig, unsigned long *siglen, +int rsa_sign_hash(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, prng_state *prng, int prng_idx, int hash_idx, unsigned long saltlen, rsa_key *key); int rsa_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *msghash, unsigned long msghashlen, - prng_state *prng, int prng_idx, + const unsigned char *hash, unsigned long hashlen, int hash_idx, unsigned long saltlen, int *stat, rsa_key *key); /* these use PKCS #1 v1.5 padding */ -int rsa_v15_encrypt_key(const unsigned char *inkey, unsigned long inlen, - unsigned char *outkey, unsigned long *outlen, +int rsa_v15_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, prng_state *prng, int prng_idx, rsa_key *key); - + int rsa_v15_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long keylen, - prng_state *prng, int prng_idx, - int *res, rsa_key *key); + unsigned char *out, unsigned long outlen, + int *stat, rsa_key *key); -int rsa_v15_sign_hash(const unsigned char *msghash, unsigned long msghashlen, - unsigned char *sig, unsigned long *siglen, - prng_state *prng, int prng_idx, +int rsa_v15_sign_hash(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *siglen, int hash_idx, rsa_key *key); int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *msghash, unsigned long msghashlen, - prng_state *prng, int prng_idx, + const unsigned char *hash, unsigned long hashlen, int hash_idx, int *stat, rsa_key *key); @@ -174,35 +157,35 @@ typedef struct Dh_key { mp_int x, y; } dh_key; - int dh_test(void); - void dh_sizes(int *low, int *high); - int dh_get_size(dh_key *key); +int dh_test(void); +void dh_sizes(int *low, int *high); +int dh_get_size(dh_key *key); - int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key); - void dh_free(dh_key *key); +int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key); +void dh_free(dh_key *key); - int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key); - int dh_import(const unsigned char *in, unsigned long inlen, dh_key *key); +int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key); +int dh_import(const unsigned char *in, unsigned long inlen, dh_key *key); - int dh_shared_secret(dh_key *private_key, dh_key *public_key, - unsigned char *out, unsigned long *outlen); +int dh_shared_secret(dh_key *private_key, dh_key *public_key, + unsigned char *out, unsigned long *outlen); - int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen, - unsigned char *out, unsigned long *len, - prng_state *prng, int wprng, int hash, - dh_key *key); +int dh_encrypt_key(const unsigned char *in, unsigned long keylen, + unsigned char *out, unsigned long *outlen, + prng_state *prng, int wprng, int hash, + dh_key *key); - int dh_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, - dh_key *key); +int dh_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + dh_key *key); - int dh_sign_hash(const unsigned char *in, unsigned long inlen, - unsigned char *out, unsigned long *outlen, - prng_state *prng, int wprng, dh_key *key); +int dh_sign_hash(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + prng_state *prng, int wprng, dh_key *key); - int dh_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *hash, unsigned long hashlen, - int *stat, dh_key *key); +int dh_verify_hash(const unsigned char *sig, unsigned long siglen, + const unsigned char *hash, unsigned long hashlen, + int *stat, dh_key *key); #endif @@ -219,35 +202,36 @@ typedef struct { mp_int k; } ecc_key; - int ecc_test(void); - void ecc_sizes(int *low, int *high); - int ecc_get_size(ecc_key *key); +int ecc_test(void); +void ecc_sizes(int *low, int *high); +int ecc_get_size(ecc_key *key); - int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key); - void ecc_free(ecc_key *key); +int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key); +void ecc_free(ecc_key *key); - int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key); - int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key); +int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key); +int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key); - int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key, - unsigned char *out, unsigned long *outlen); +int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key, + unsigned char *out, unsigned long *outlen); - int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, - unsigned char *out, unsigned long *len, - prng_state *prng, int wprng, int hash, - ecc_key *key); +int ecc_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + prng_state *prng, int wprng, int hash, + ecc_key *key); - int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, - ecc_key *key); +int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + ecc_key *key); - int ecc_sign_hash(const unsigned char *in, unsigned long inlen, - unsigned char *out, unsigned long *outlen, - prng_state *prng, int wprng, ecc_key *key); +int ecc_sign_hash(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + prng_state *prng, int wprng, ecc_key *key); + +int ecc_verify_hash(const unsigned char *sig, unsigned long siglen, + const unsigned char *hash, unsigned long hashlen, + int *stat, ecc_key *key); - int ecc_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *hash, unsigned long hashlen, - int *stat, ecc_key *key); #endif #ifdef MDSA @@ -257,29 +241,30 @@ typedef struct { mp_int g, q, p, x, y; } dsa_key; - int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, dsa_key *key); - void dsa_free(dsa_key *key); +int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, dsa_key *key); +void dsa_free(dsa_key *key); - int dsa_sign_hash(const unsigned char *in, unsigned long inlen, +int dsa_sign_hash(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen, prng_state *prng, int wprng, dsa_key *key); - int dsa_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *hash, unsigned long inlen, - int *stat, dsa_key *key); +int dsa_verify_hash(const unsigned char *sig, unsigned long siglen, + const unsigned char *hash, unsigned long hashlen, + int *stat, dsa_key *key); - int dsa_import(const unsigned char *in, unsigned long inlen, dsa_key *key); +int dsa_import(const unsigned char *in, unsigned long inlen, dsa_key *key); - int dsa_export(unsigned char *out, unsigned long *outlen, int type, dsa_key *key); +int dsa_export(unsigned char *out, unsigned long *outlen, int type, dsa_key *key); - int dsa_verify_key(dsa_key *key, int *stat); +int dsa_verify_key(dsa_key *key, int *stat); #endif +#ifdef LTC_DER /* DER handling */ int der_encode_integer(mp_int *num, unsigned char *out, unsigned long *outlen); int der_decode_integer(const unsigned char *in, unsigned long *inlen, mp_int *num); int der_length_integer(mp_int *num, unsigned long *len); int der_put_multi_integer(unsigned char *dst, unsigned long *outlen, mp_int *num, ...); int der_get_multi_integer(const unsigned char *src, unsigned long *inlen, mp_int *num, ...); - +#endif diff --git a/mycrypt_pkcs.h b/src/headers/tomcrypt_pkcs.h similarity index 100% rename from mycrypt_pkcs.h rename to src/headers/tomcrypt_pkcs.h diff --git a/src/headers/tomcrypt_prng.h b/src/headers/tomcrypt_prng.h new file mode 100644 index 0000000..2ae5749 --- /dev/null +++ b/src/headers/tomcrypt_prng.h @@ -0,0 +1,190 @@ +/* ---- PRNG Stuff ---- */ +#ifdef YARROW +struct yarrow_prng { + int cipher, hash; + unsigned char pool[MAXBLOCKSIZE]; + symmetric_CTR ctr; +}; +#endif + +#ifdef RC4 +struct rc4_prng { + int x, y; + unsigned char buf[256]; +}; +#endif + +#ifdef FORTUNA +struct fortuna_prng { + hash_state pool[FORTUNA_POOLS]; /* the pools */ + + symmetric_key skey; + + unsigned char K[32], /* the current key */ + IV[16]; /* IV for CTR mode */ + + unsigned long pool_idx, /* current pool we will add to */ + pool0_len, /* length of 0'th pool */ + wd; + + ulong64 reset_cnt; /* number of times we have reset */ +}; +#endif + +#ifdef SOBER128 +struct sober128_prng { + ulong32 R[17], /* Working storage for the shift register */ + initR[17], /* saved register contents */ + konst, /* key dependent constant */ + sbuf; /* partial word encryption buffer */ + + int nbuf, /* number of part-word stream bits buffered */ + flag, /* first add_entropy call or not? */ + set; /* did we call add_entropy to set key? */ + +}; +#endif + +typedef union Prng_state { +#ifdef YARROW + struct yarrow_prng yarrow; +#endif +#ifdef RC4 + struct rc4_prng rc4; +#endif +#ifdef FORTUNA + struct fortuna_prng fortuna; +#endif +#ifdef SOBER128 + struct sober128_prng sober128; +#endif +} prng_state; + +extern struct ltc_prng_descriptor { + /** Name of the PRNG */ + char *name; + /** size in bytes of exported state */ + int export_size; + /** Start a PRNG state + @param prng [out] The state to initialize + @return CRYPT_OK if successful + */ + int (*start)(prng_state *prng); + /** Add entropy to the PRNG + @param in The entropy + @param inlen Length of the entropy (octets)\ + @param prng The PRNG state + @return CRYPT_OK if successful + */ + int (*add_entropy)(const unsigned char *in, unsigned long inlen, prng_state *prng); + /** Ready a PRNG state to read from + @param prng The PRNG state to ready + @return CRYPT_OK if successful + */ + int (*ready)(prng_state *prng); + /** Read from the PRNG + @param out [out] Where to store the data + @param outlen Length of data desired (octets) + @param prng The PRNG state to read from + @return Number of octets read + */ + unsigned long (*read)(unsigned char *out, unsigned long outlen, prng_state *prng); + /** Terminate a PRNG state + @param prng The PRNG state to terminate + @return CRYPT_OK if successful + */ + int (*done)(prng_state *prng); + /** Export a PRNG state + @param out [out] The destination for the state + @param outlen [in/out] The max size and resulting size of the PRNG state + @param prng The PRNG to export + @return CRYPT_OK if successful + */ + int (*pexport)(unsigned char *out, unsigned long *outlen, prng_state *prng); + /** Import a PRNG state + @param in The data to import + @param inlen The length of the data to import (octets) + @param prng The PRNG to initialize/import + @return CRYPT_OK if successful + */ + int (*pimport)(const unsigned char *in, unsigned long inlen, prng_state *prng); + /** Self-test the PRNG + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled + */ + int (*test)(void); +} prng_descriptor[]; + +#ifdef YARROW +int yarrow_start(prng_state *prng); +int yarrow_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng); +int yarrow_ready(prng_state *prng); +unsigned long yarrow_read(unsigned char *out, unsigned long outlen, prng_state *prng); +int yarrow_done(prng_state *prng); +int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng); +int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng); +int yarrow_test(void); +extern const struct ltc_prng_descriptor yarrow_desc; +#endif + +#ifdef FORTUNA +int fortuna_start(prng_state *prng); +int fortuna_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng); +int fortuna_ready(prng_state *prng); +unsigned long fortuna_read(unsigned char *out, unsigned long outlen, prng_state *prng); +int fortuna_done(prng_state *prng); +int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng); +int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prng); +int fortuna_test(void); +extern const struct ltc_prng_descriptor fortuna_desc; +#endif + +#ifdef RC4 +int rc4_start(prng_state *prng); +int rc4_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng); +int rc4_ready(prng_state *prng); +unsigned long rc4_read(unsigned char *out, unsigned long outlen, prng_state *prng); +int rc4_done(prng_state *prng); +int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng); +int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng); +int rc4_test(void); +extern const struct ltc_prng_descriptor rc4_desc; +#endif + +#ifdef SPRNG +int sprng_start(prng_state *prng); +int sprng_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng); +int sprng_ready(prng_state *prng); +unsigned long sprng_read(unsigned char *out, unsigned long outlen, prng_state *prng); +int sprng_done(prng_state *prng); +int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng); +int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng); +int sprng_test(void); +extern const struct ltc_prng_descriptor sprng_desc; +#endif + +#ifdef SOBER128 +int sober128_start(prng_state *prng); +int sober128_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng); +int sober128_ready(prng_state *prng); +unsigned long sober128_read(unsigned char *out, unsigned long outlen, prng_state *prng); +int sober128_done(prng_state *prng); +int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng); +int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *prng); +int sober128_test(void); +extern const struct ltc_prng_descriptor sober128_desc; +#endif + +int find_prng(const char *name); +int register_prng(const struct ltc_prng_descriptor *prng); +int unregister_prng(const struct ltc_prng_descriptor *prng); +int prng_is_valid(int idx); + +/* Slow RNG you **might** be able to use to seed a PRNG with. Be careful as this + * might not work on all platforms as planned + */ +unsigned long rng_get_bytes(unsigned char *out, + unsigned long outlen, + void (*callback)(void)); + +int rng_make_prng(int bits, int wprng, prng_state *prng, void (*callback)(void)); + diff --git a/tommath_class.h b/src/headers/tommath_class.h similarity index 99% rename from tommath_class.h rename to src/headers/tommath_class.h index c94e8e0..3dc21a1 100644 --- a/tommath_class.h +++ b/src/headers/tommath_class.h @@ -146,7 +146,6 @@ #endif #if defined(BN_FAST_MP_MONTGOMERY_REDUCE_C) - #define BN_MP_MONTGOMERY_REDUCE_C #define BN_MP_GROW_C #define BN_MP_RSHD_C #define BN_MP_CLAMP_C @@ -160,7 +159,6 @@ #endif #if defined(BN_FAST_S_MP_MUL_HIGH_DIGS_C) - #define BN_FAST_S_MP_MUL_DIGS_C #define BN_MP_GROW_C #define BN_MP_CLAMP_C #endif @@ -244,6 +242,7 @@ #define BN_MP_INIT_MULTI_C #define BN_MP_SET_C #define BN_MP_COUNT_BITS_C + #define BN_MP_ABS_C #define BN_MP_MUL_2D_C #define BN_MP_CMP_C #define BN_MP_SUB_C @@ -481,7 +480,6 @@ #endif #if defined(BN_MP_KARATSUBA_SQR_C) - #define BN_MP_KARATSUBA_MUL_C #define BN_MP_INIT_SIZE_C #define BN_MP_CLAMP_C #define BN_MP_SQR_C @@ -534,10 +532,8 @@ #endif #if defined(BN_MP_MONTGOMERY_REDUCE_C) - #define BN_MP_MUL_C #define BN_FAST_MP_MONTGOMERY_REDUCE_C #define BN_MP_GROW_C - #define BN_MP_MONTGOMERY_SETUP_C #define BN_MP_CLAMP_C #define BN_MP_RSHD_C #define BN_MP_CMP_MAG_C @@ -663,9 +659,9 @@ #endif #if defined(BN_MP_RADIX_SIZE_C) + #define BN_MP_ISZERO_C #define BN_MP_COUNT_BITS_C #define BN_MP_INIT_COPY_C - #define BN_MP_ISZERO_C #define BN_MP_DIV_D_C #define BN_MP_CLEAR_C #endif @@ -704,6 +700,7 @@ #define BN_MP_INIT_COPY_C #define BN_MP_RSHD_C #define BN_MP_MUL_C + #define BN_FAST_S_MP_MUL_HIGH_DIGS_C #define BN_S_MP_MUL_HIGH_DIGS_C #define BN_MP_MOD_2D_C #define BN_S_MP_MUL_DIGS_C diff --git a/tommath_superclass.h b/src/headers/tommath_superclass.h similarity index 95% rename from tommath_superclass.h rename to src/headers/tommath_superclass.h index 043b224..7b6c05a 100644 --- a/tommath_superclass.h +++ b/src/headers/tommath_superclass.h @@ -32,7 +32,7 @@ #define BN_PRIME_TAB_C /* other modifiers */ -// #define BN_MP_DIV_SMALL /* Slower division, not critical (currently buggy?) */ + #define BN_MP_DIV_SMALL /* Slower division, not critical */ /* here we are on the last pass so we turn things off. The functions classes are still there * but we remove them specifically from the build. This also invokes tweaks in functions diff --git a/hmac_done.c b/src/mac/hmac/hmac_done.c similarity index 63% rename from hmac_done.c rename to src/mac/hmac/hmac_done.c index b31460b..9bc9f69 100644 --- a/hmac_done.c +++ b/src/mac/hmac/hmac_done.c @@ -8,39 +8,32 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Submited by Dobes Vandermeer (dobes@smartt.com) */ +#include "tomcrypt.h" -#include "mycrypt.h" - -/* - (1) append zeros to the end of K to create a B byte string - (e.g., if K is of length 20 bytes and B=64, then K will be - appended with 44 zero bytes 0x00) - (2) XOR (bitwise exclusive-OR) the B byte string computed in step - (1) with ipad (ipad = the byte 0x36 repeated B times) - (3) append the stream of data 'text' to the B byte string resulting - from step (2) - (4) apply H to the stream generated in step (3) - (5) XOR (bitwise exclusive-OR) the B byte string computed in - step (1) with opad (opad = the byte 0x5C repeated B times.) - (6) append the H result from step (4) to the B byte string - resulting from step (5) - (7) apply H to the stream generated in step (6) and output - the result +/** + @file hmac_done.c + HMAC support, terminate stream, Tom St Denis/Dobes Vandermeer */ #ifdef HMAC #define HMAC_BLOCKSIZE hash_descriptor[hash].blocksize -int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen) +/** + Terminate an HMAC session + @param hmac The HMAC state + @param out [out] The destination of the HMAC authentication tag + @param outlen [in/out] The max size and resulting size of the HMAC authentication tag + @return CRYPT_OK if successful +*/ +int hmac_done(hmac_state *hmac, unsigned char *out, unsigned long *outlen) { unsigned char *buf, *isha; unsigned long hashsize, i; int hash, err; - _ARGCHK(hmac != NULL); - _ARGCHK(hashOut != NULL); + LTC_ARGCHK(hmac != NULL); + LTC_ARGCHK(out != NULL); /* test hash */ hash = hmac->hash; @@ -66,7 +59,7 @@ int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen) /* Get the hash of the first HMAC vector plus the data */ if ((err = hash_descriptor[hash].done(&hmac->md, isha)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* Create the second HMAC vector vector for step (3) */ @@ -76,28 +69,28 @@ int hmac_done(hmac_state *hmac, unsigned char *hashOut, unsigned long *outlen) /* Now calculate the "outer" hash for step (5), (6), and (7) */ if ((err = hash_descriptor[hash].init(&hmac->md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash].process(&hmac->md, buf, HMAC_BLOCKSIZE)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash].process(&hmac->md, isha, hashsize)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash].done(&hmac->md, buf)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* copy to output */ for (i = 0; i < hashsize && i < *outlen; i++) { - hashOut[i] = buf[i]; + out[i] = buf[i]; } *outlen = i; err = CRYPT_OK; -__ERR: +LBL_ERR: XFREE(hmac->key); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(isha, hashsize); zeromem(buf, hashsize); zeromem(hmac, sizeof(*hmac)); diff --git a/hmac_file.c b/src/mac/hmac/hmac_file.c similarity index 62% rename from hmac_file.c rename to src/mac/hmac/hmac_file.c index e88b62f..c726e50 100644 --- a/hmac_file.c +++ b/src/mac/hmac/hmac_file.c @@ -8,18 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Submited by Dobes Vandermeer (dobes@smartt.com) */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file hmac_file.c + HMAC support, process a file, Tom St Denis/Dobes Vandermeer +*/ #ifdef HMAC -/* hmac_file added by Tom St Denis */ +/** + HMAC a file + @param hash The index of the hash you wish to use + @param fname The name of the file you wish to HMAC + @param key The secret key + @param keylen The length of the secret key + @param out [out] The HMAC authentication tag + @param outlen [in/out] The max size and resulting size of the authentication tag + @return CRYPT_OK if successful, CRYPT_NOP if file support has been disabled +*/ int hmac_file(int hash, const char *fname, const unsigned char *key, unsigned long keylen, - unsigned char *dst, unsigned long *dstlen) + unsigned char *out, unsigned long *outlen) { -#ifdef NO_FILE +#ifdef LTC_NO_FILE return CRYPT_NOP; #else hmac_state hmac; @@ -28,10 +40,10 @@ int hmac_file(int hash, const char *fname, size_t x; int err; - _ARGCHK(fname != NULL); - _ARGCHK(key != NULL); - _ARGCHK(dst != NULL); - _ARGCHK(dstlen != NULL); + LTC_ARGCHK(fname != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); if((err = hash_is_valid(hash)) != CRYPT_OK) { return err; @@ -61,11 +73,11 @@ int hmac_file(int hash, const char *fname, } /* get final hmac */ - if ((err = hmac_done(&hmac, dst, dstlen)) != CRYPT_OK) { + if ((err = hmac_done(&hmac, out, outlen)) != CRYPT_OK) { return err; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK /* clear memory */ zeromem(buf, sizeof(buf)); #endif diff --git a/hmac_init.c b/src/mac/hmac/hmac_init.c similarity index 69% rename from hmac_init.c rename to src/mac/hmac/hmac_init.c index 0d894f1..3f7d8c2 100644 --- a/hmac_init.c +++ b/src/mac/hmac/hmac_init.c @@ -8,31 +8,25 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Submited by Dobes Vandermeer (dobes@smartt.com) */ +#include "tomcrypt.h" -#include "mycrypt.h" - -/* - (1) append zeros to the end of K to create a B byte string - (e.g., if K is of length 20 bytes and B=64, then K will be - appended with 44 zero bytes 0x00) - (2) XOR (bitwise exclusive-OR) the B byte string computed in step - (1) with ipad (ipad = the byte 0x36 repeated B times) - (3) append the stream of data 'text' to the B byte string resulting - from step (2) - (4) apply H to the stream generated in step (3) - (5) XOR (bitwise exclusive-OR) the B byte string computed in - step (1) with opad (opad = the byte 0x5C repeated B times.) - (6) append the H result from step (4) to the B byte string - resulting from step (5) - (7) apply H to the stream generated in step (6) and output - the result +/** + @file hmac_init.c + HMAC support, initialize state, Tom St Denis/Dobes Vandermeer */ #ifdef HMAC #define HMAC_BLOCKSIZE hash_descriptor[hash].blocksize +/** + Initialize an HMAC context. + @param hmac The HMAC state + @param hash The index of the hash you want to use + @param key The secret key + @param keylen The length of the secret key (octets) + @return CRYPT_OK if successful +*/ int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned long keylen) { unsigned char *buf; @@ -40,8 +34,8 @@ int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned lon unsigned long i, z; int err; - _ARGCHK(hmac != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(hmac != NULL); + LTC_ARGCHK(key != NULL); /* valid hash? */ if ((err = hash_is_valid(hash)) != CRYPT_OK) { @@ -72,7 +66,7 @@ int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned lon if(keylen > HMAC_BLOCKSIZE) { z = HMAC_BLOCKSIZE; if ((err = hash_memory(hash, key, keylen, hmac->key, &z)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if(hashsize < HMAC_BLOCKSIZE) { zeromem((hmac->key) + hashsize, (size_t)(HMAC_BLOCKSIZE - hashsize)); @@ -92,18 +86,18 @@ int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned lon /* Pre-pend that to the hash data */ if ((err = hash_descriptor[hash].init(&hmac->md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash].process(&hmac->md, buf, HMAC_BLOCKSIZE)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } goto done; -__ERR: +LBL_ERR: /* free the key since we failed */ XFREE(hmac->key); done: -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, HMAC_BLOCKSIZE); #endif diff --git a/src/mac/hmac/hmac_memory.c b/src/mac/hmac/hmac_memory.c new file mode 100644 index 0000000..804e06d --- /dev/null +++ b/src/mac/hmac/hmac_memory.c @@ -0,0 +1,73 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file hmac_memory.c + HMAC support, process a block of memory, Tom St Denis/Dobes Vandermeer +*/ + +#ifdef HMAC + +/** + HMAC a block of memory to produce the authentication tag + @param hash The index of the hash to use + @param key The secret key + @param keylen The length of the secret key (octets) + @param in The data to HMAC + @param inlen The length of the data to HMAC (octets) + @param out [out] Destination of the authentication tag + @param outlen [in/out] Max size and resulting size of authentication tag + @return CRYPT_OK if successful +*/ +int hmac_memory(int hash, + const unsigned char *key, unsigned long keylen, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen) +{ + hmac_state *hmac; + int err; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + + /* allocate ram for hmac state */ + hmac = XMALLOC(sizeof(hmac_state)); + if (hmac == NULL) { + return CRYPT_MEM; + } + + if ((err = hmac_init(hmac, hash, key, keylen)) != CRYPT_OK) { + goto LBL_ERR; + } + + if ((err = hmac_process(hmac, in, inlen)) != CRYPT_OK) { + goto LBL_ERR; + } + + if ((err = hmac_done(hmac, out, outlen)) != CRYPT_OK) { + goto LBL_ERR; + } + + err = CRYPT_OK; +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(hmac, sizeof(hmac_state)); +#endif + + XFREE(hmac); + return err; +} + +#endif + diff --git a/src/mac/hmac/hmac_memory_multi.c b/src/mac/hmac/hmac_memory_multi.c new file mode 100644 index 0000000..f45776a --- /dev/null +++ b/src/mac/hmac/hmac_memory_multi.c @@ -0,0 +1,88 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" +#include + +/** + @file hmac_memory_multi.c + HMAC support, process multiple blocks of memory, Tom St Denis/Dobes Vandermeer +*/ + +#ifdef HMAC + +/** + HMAC multiple blocks of memory to produce the authentication tag + @param hash The index of the hash to use + @param key The secret key + @param keylen The length of the secret key (octets) + @param out [out] Destination of the authentication tag + @param outlen [in/out] Max size and resulting size of authentication tag + @param in The data to HMAC + @param inlen The length of the data to HMAC (octets) + @param ... tuples of (data,len) pairs to HMAC, terminated with a (NULL,x) (x=don't care) + @return CRYPT_OK if successful +*/ +int hmac_memory_multi(int hash, + const unsigned char *key, unsigned long keylen, + unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...) + +{ + hmac_state *hmac; + int err; + va_list args; + const unsigned char *curptr; + unsigned long curlen; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + + /* allocate ram for hmac state */ + hmac = XMALLOC(sizeof(hmac_state)); + if (hmac == NULL) { + return CRYPT_MEM; + } + + if ((err = hmac_init(hmac, hash, key, keylen)) != CRYPT_OK) { + goto LBL_ERR; + } + + va_start(args, inlen); + curptr = in; + curlen = inlen; + for (;;) { + /* process buf */ + if ((err = hmac_process(hmac, curptr, curlen)) != CRYPT_OK) { + goto LBL_ERR; + } + /* step to next */ + curptr = va_arg(args, const unsigned char*); + if (curptr == NULL) { + break; + } + curlen = va_arg(args, unsigned long); + } + if ((err = hmac_done(hmac, out, outlen)) != CRYPT_OK) { + goto LBL_ERR; + } +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(hmac, sizeof(hmac_state)); +#endif + XFREE(hmac); + va_end(args); + return err; +} + +#endif + diff --git a/src/mac/hmac/hmac_process.c b/src/mac/hmac/hmac_process.c new file mode 100644 index 0000000..265293f --- /dev/null +++ b/src/mac/hmac/hmac_process.c @@ -0,0 +1,39 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file hmac_process.c + HMAC support, process data, Tom St Denis/Dobes Vandermeer +*/ + +#ifdef HMAC + +/** + Process data through HMAC + @param hmac The hmac state + @param in The data to send through HMAC + @param inlen The length of the data to HMAC (octets) + @return CRYPT_OK if successful +*/ +int hmac_process(hmac_state *hmac, const unsigned char *in, unsigned long inlen) +{ + int err; + LTC_ARGCHK(hmac != NULL); + LTC_ARGCHK(in != NULL); + if ((err = hash_is_valid(hmac->hash)) != CRYPT_OK) { + return err; + } + return hash_descriptor[hmac->hash].process(&hmac->md, in, inlen); +} + +#endif + diff --git a/hmac_test.c b/src/mac/hmac/hmac_test.c similarity index 93% rename from hmac_test.c rename to src/mac/hmac/hmac_test.c index 2b97777..6ff749f 100644 --- a/hmac_test.c +++ b/src/mac/hmac/hmac_test.c @@ -8,25 +8,11 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* Submited by Dobes Vandermeer (dobes@smartt.com) */ +#include "tomcrypt.h" -#include "mycrypt.h" - -/* - (1) append zeros to the end of K to create a B byte string - (e.g., if K is of length 20 bytes and B=64, then K will be - appended with 44 zero bytes 0x00) - (2) XOR (bitwise exclusive-OR) the B byte string computed in step - (1) with ipad (ipad = the byte 0x36 repeated B times) - (3) append the stream of data 'text' to the B byte string resulting - from step (2) - (4) apply H to the stream generated in step (3) - (5) XOR (bitwise exclusive-OR) the B byte string computed in - step (1) with opad (opad = the byte 0x5C repeated B times.) - (6) append the H result from step (4) to the B byte string - resulting from step (5) - (7) apply H to the stream generated in step (6) and output - the result +/** + @file hmac_test.c + HMAC support, self-test, Tom St Denis/Dobes Vandermeer */ #ifdef HMAC @@ -34,7 +20,6 @@ #define HMAC_BLOCKSIZE hash_descriptor[hash].blocksize /* - TEST CASES SOURCE: Network Working Group P. Cheng @@ -42,11 +27,13 @@ Request for Comments: 2202 IBM Category: Informational R. Glenn NIST September 1997 - Test Cases for HMAC-MD5 and HMAC-SHA-1 */ - +/** + HMAC self-test + @return CRYPT_OK if successful, CRYPT_NOP if tests have been disabled. +*/ int hmac_test(void) { #ifndef LTC_TEST diff --git a/src/mac/omac/omac_done.c b/src/mac/omac/omac_done.c new file mode 100644 index 0000000..e2c9b7c --- /dev/null +++ b/src/mac/omac/omac_done.c @@ -0,0 +1,79 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file omac_done.c + OMAC1 support, terminate a stream, Tom St Denis +*/ + +#ifdef OMAC + +/** + Terminate an OMAC stream + @param omac The OMAC state + @param out [out] Destination for the authentication tag + @param outlen [in/out] The max size and resulting size of the authentication tag + @return CRYPT_OK if successful +*/ +int omac_done(omac_state *omac, unsigned char *out, unsigned long *outlen) +{ + int err, mode; + unsigned x; + + LTC_ARGCHK(omac != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + if ((err = cipher_is_valid(omac->cipher_idx)) != CRYPT_OK) { + return err; + } + + if ((omac->buflen > (int)sizeof(omac->block)) || (omac->buflen < 0) || + (omac->blklen > (int)sizeof(omac->block)) || (omac->buflen > omac->blklen)) { + return CRYPT_INVALID_ARG; + } + + /* figure out mode */ + if (omac->buflen != omac->blklen) { + /* add the 0x80 byte */ + omac->block[omac->buflen++] = 0x80; + + /* pad with 0x00 */ + while (omac->buflen < omac->blklen) { + omac->block[omac->buflen++] = 0x00; + } + mode = 1; + } else { + mode = 0; + } + + /* now xor prev + Lu[mode] */ + for (x = 0; x < (unsigned)omac->blklen; x++) { + omac->block[x] ^= omac->prev[x] ^ omac->Lu[mode][x]; + } + + /* encrypt it */ + cipher_descriptor[omac->cipher_idx].ecb_encrypt(omac->block, omac->block, &omac->key); + + /* output it */ + for (x = 0; x < (unsigned)omac->blklen && x < *outlen; x++) { + out[x] = omac->block[x]; + } + *outlen = x; + +#ifdef LTC_CLEAN_STACK + zeromem(omac, sizeof(*omac)); +#endif + return CRYPT_OK; +} + +#endif + diff --git a/omac_file.c b/src/mac/omac/omac_file.c similarity index 62% rename from omac_file.c rename to src/mac/omac/omac_file.c index 09d2d4b..25e8c50 100644 --- a/omac_file.c +++ b/src/mac/omac/omac_file.c @@ -8,17 +8,31 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file omac_file.c + OMAC1 support, process a file, Tom St Denis +*/ #ifdef OMAC +/** + OMAC a file + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the secret key (octets) + @param filename The name of the file you wish to OMAC + @param out [out] Where the authentication tag is to be stored + @param outlen [in/out] The max size and resulting size of the authentication tag + @return CRYPT_OK if successful, CRYPT_NOP if file support has been disabled +*/ int omac_file(int cipher, const unsigned char *key, unsigned long keylen, const char *filename, unsigned char *out, unsigned long *outlen) { -#ifdef NO_FILE +#ifdef LTC_NO_FILE return CRYPT_NOP; #else int err, x; @@ -26,10 +40,10 @@ int omac_file(int cipher, FILE *in; unsigned char buf[512]; - _ARGCHK(key != NULL); - _ARGCHK(filename != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(filename != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); in = fopen(filename, "rb"); if (in == NULL) { @@ -54,7 +68,7 @@ int omac_file(int cipher, return err; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, sizeof(buf)); #endif diff --git a/omac_init.c b/src/mac/omac/omac_init.c similarity index 82% rename from omac_init.c rename to src/mac/omac/omac_init.c index cc933d0..98ca640 100644 --- a/omac_init.c +++ b/src/mac/omac/omac_init.c @@ -8,17 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file omac_init.c + OMAC1 support, initialize state, by Tom St Denis +*/ + #ifdef OMAC +/** + Initialize an OMAC state + @param omac The OMAC state to initialize + @param cipher The index of the desired cipher + @param key The secret key + @param keylen The length of the secret key (octets) + @return CRYPT_OK if successful +*/ int omac_init(omac_state *omac, int cipher, const unsigned char *key, unsigned long keylen) { int err, x, y, mask, msb, len; - _ARGCHK(omac != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(omac != NULL); + LTC_ARGCHK(key != NULL); /* schedule the key */ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { diff --git a/omac_memory.c b/src/mac/omac/omac_memory.c similarity index 50% rename from omac_memory.c rename to src/mac/omac/omac_memory.c index ca194c9..f9a025d 100644 --- a/omac_memory.c +++ b/src/mac/omac/omac_memory.c @@ -8,23 +8,38 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file omac_memory.c + OMAC1 support, process a block of memory, Tom St Denis +*/ #ifdef OMAC +/** + OMAC a block of memory + @param cipher The index of the desired cipher + @param key The secret key + @param keylen The length of the secret key (octets) + @param in The data to send through OMAC + @param inlen The length of the data to send through OMAC (octets) + @param out [out] The destination of the authentication tag + @param outlen [in/out] The max size and resulting size of the authentication tag (octets) + @return CRYPT_OK if successful +*/ int omac_memory(int cipher, const unsigned char *key, unsigned long keylen, - const unsigned char *msg, unsigned long msglen, + const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen) { int err; omac_state *omac; - _ARGCHK(key != NULL); - _ARGCHK(msg != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* allocate ram for omac state */ omac = XMALLOC(sizeof(omac_state)); @@ -34,18 +49,18 @@ int omac_memory(int cipher, /* omac process the message */ if ((err = omac_init(omac, cipher, key, keylen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } - if ((err = omac_process(omac, msg, msglen)) != CRYPT_OK) { - goto __ERR; + if ((err = omac_process(omac, in, inlen)) != CRYPT_OK) { + goto LBL_ERR; } if ((err = omac_done(omac, out, outlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(omac, sizeof(omac_state)); #endif diff --git a/src/mac/omac/omac_memory_multi.c b/src/mac/omac/omac_memory_multi.c new file mode 100644 index 0000000..9bd31e8 --- /dev/null +++ b/src/mac/omac/omac_memory_multi.c @@ -0,0 +1,86 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" +#include + +/** + @file omac_memory_multi.c + OMAC1 support, process multiple blocks of memory, Tom St Denis +*/ + +#ifdef OMAC + +/** + OMAC multiple blocks of memory + @param cipher The index of the desired cipher + @param key The secret key + @param keylen The length of the secret key (octets) + @param out [out] The destination of the authentication tag + @param outlen [in/out] The max size and resulting size of the authentication tag (octets) + @param in The data to send through OMAC + @param inlen The length of the data to send through OMAC (octets) + @param ... tuples of (data,len) pairs to OMAC, terminated with a (NULL,x) (x=don't care) + @return CRYPT_OK if successful +*/ +int omac_memory_multi(int cipher, + const unsigned char *key, unsigned long keylen, + unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...) +{ + int err; + omac_state *omac; + va_list args; + const unsigned char *curptr; + unsigned long curlen; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + + /* allocate ram for omac state */ + omac = XMALLOC(sizeof(omac_state)); + if (omac == NULL) { + return CRYPT_MEM; + } + + /* omac process the message */ + if ((err = omac_init(omac, cipher, key, keylen)) != CRYPT_OK) { + goto LBL_ERR; + } + va_start(args, inlen); + curptr = in; + curlen = inlen; + for (;;) { + /* process buf */ + if ((err = omac_process(omac, curptr, curlen)) != CRYPT_OK) { + goto LBL_ERR; + } + /* step to next */ + curptr = va_arg(args, const unsigned char*); + if (curptr == NULL) { + break; + } + curlen = va_arg(args, unsigned long); + } + if ((err = omac_done(omac, out, outlen)) != CRYPT_OK) { + goto LBL_ERR; + } +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(omac, sizeof(omac_state)); +#endif + XFREE(omac); + va_end(args); + return err; +} + +#endif diff --git a/src/mac/omac/omac_process.c b/src/mac/omac/omac_process.c new file mode 100644 index 0000000..e5f3147 --- /dev/null +++ b/src/mac/omac/omac_process.c @@ -0,0 +1,65 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file omac_process.c + OMAC1 support, process data, Tom St Denis +*/ + + +#ifdef OMAC + +/** + Process data through OMAC + @param omac The OMAC state + @param in The input data to send through OMAC + @param inlen The length of the input (octets) + @return CRYPT_OK if successful +*/ +int omac_process(omac_state *omac, const unsigned char *in, unsigned long inlen) +{ + int err, n, x; + + LTC_ARGCHK(omac != NULL); + LTC_ARGCHK(in != NULL); + if ((err = cipher_is_valid(omac->cipher_idx)) != CRYPT_OK) { + return err; + } + + if ((omac->buflen > (int)sizeof(omac->block)) || (omac->buflen < 0) || + (omac->blklen > (int)sizeof(omac->block)) || (omac->buflen > omac->blklen)) { + return CRYPT_INVALID_ARG; + } + + while (inlen != 0) { + /* ok if the block is full we xor in prev, encrypt and replace prev */ + if (omac->buflen == omac->blklen) { + for (x = 0; x < omac->blklen; x++) { + omac->block[x] ^= omac->prev[x]; + } + cipher_descriptor[omac->cipher_idx].ecb_encrypt(omac->block, omac->prev, &omac->key); + omac->buflen = 0; + } + + /* add bytes */ + n = MIN(inlen, (unsigned long)(omac->blklen - omac->buflen)); + XMEMCPY(omac->block + omac->buflen, in, n); + omac->buflen += n; + inlen -= n; + in += n; + } + + return CRYPT_OK; +} + +#endif + diff --git a/omac_test.c b/src/mac/omac/omac_test.c similarity index 94% rename from omac_test.c rename to src/mac/omac/omac_test.c index e346073..f6cabdf 100644 --- a/omac_test.c +++ b/src/mac/omac/omac_test.c @@ -8,11 +8,19 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* OMAC1 Support by Tom St Denis (for 64 and 128 bit block ciphers only) */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file omac_test.c + OMAC1 support, self-test, by Tom St Denis +*/ #ifdef OMAC +/** + Test the OMAC setup + @return CRYPT_OK if successful, CRYPT_NOP if tests have been disabled +*/ int omac_test(void) { #if !defined(LTC_TEST) diff --git a/pmac_done.c b/src/mac/pmac/pmac_done.c similarity index 88% rename from pmac_done.c rename to src/mac/pmac/pmac_done.c index 8051da7..384a5b8 100644 --- a/pmac_done.c +++ b/src/mac/pmac/pmac_done.c @@ -8,9 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file pmac_done.c + PMAC implementation, terminate a session, by Tom St Denis +*/ #ifdef PMAC @@ -18,8 +21,8 @@ int pmac_done(pmac_state *state, unsigned char *out, unsigned long *outlen) { int err, x; - _ARGCHK(state != NULL); - _ARGCHK(out != NULL); + LTC_ARGCHK(state != NULL); + LTC_ARGCHK(out != NULL); if ((err = cipher_is_valid(state->cipher_idx)) != CRYPT_OK) { return err; } @@ -54,7 +57,7 @@ int pmac_done(pmac_state *state, unsigned char *out, unsigned long *outlen) } *outlen = x; -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(state, sizeof(*state)); #endif return CRYPT_OK; diff --git a/pmac_file.c b/src/mac/pmac/pmac_file.c similarity index 61% rename from pmac_file.c rename to src/mac/pmac/pmac_file.c index c664a09..f2ea7f4 100644 --- a/pmac_file.c +++ b/src/mac/pmac/pmac_file.c @@ -8,18 +8,31 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file pmac_file.c + PMAC implementation, process a file, by Tom St Denis +*/ #ifdef PMAC +/** + PMAC a file + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the secret key (octets) + @param filename The name of the file to send through PMAC + @param out [out] Destination for the authentication tag + @param outlen [in/out] Max size and resulting size of the authentication tag + @return CRYPT_OK if successful, CRYPT_NOP if file support has been disabled +*/ int pmac_file(int cipher, const unsigned char *key, unsigned long keylen, const char *filename, unsigned char *out, unsigned long *outlen) { -#ifdef NO_FILE +#ifdef LTC_NO_FILE return CRYPT_NOP; #else int err, x; @@ -28,10 +41,10 @@ int pmac_file(int cipher, unsigned char buf[512]; - _ARGCHK(key != NULL); - _ARGCHK(filename != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(filename != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); in = fopen(filename, "rb"); if (in == NULL) { @@ -56,7 +69,7 @@ int pmac_file(int cipher, return err; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, sizeof(buf)); #endif diff --git a/pmac_init.c b/src/mac/pmac/pmac_init.c similarity index 87% rename from pmac_init.c rename to src/mac/pmac/pmac_init.c index 2f96927..0f9e838 100644 --- a/pmac_init.c +++ b/src/mac/pmac/pmac_init.c @@ -8,9 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file pmac_init.c + PMAC implementation, initialize state, by Tom St Denis +*/ #ifdef PMAC @@ -32,13 +35,21 @@ static const struct { } }; +/** + Initialize a PMAC state + @param pmac The PMAC state to initialize + @param cipher The index of the desired cipher + @param key The secret key + @param keylen The length of the secret key (octets) + @return CRYPT_OK if successful +*/ int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned long keylen) { int poly, x, y, m, err; unsigned char *L; - _ARGCHK(pmac != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(pmac != NULL); + LTC_ARGCHK(key != NULL); /* valid cipher? */ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { @@ -110,7 +121,7 @@ int pmac_init(pmac_state *pmac, int cipher, const unsigned char *key, unsigned l zeromem(pmac->Li, sizeof(pmac->Li)); zeromem(pmac->checksum, sizeof(pmac->checksum)); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(L, pmac->block_len); #endif diff --git a/src/mac/pmac/pmac_memory.c b/src/mac/pmac/pmac_memory.c new file mode 100644 index 0000000..6a97003 --- /dev/null +++ b/src/mac/pmac/pmac_memory.c @@ -0,0 +1,70 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file pmac_memory.c + PMAC implementation, process a block of memory, by Tom St Denis +*/ + +#ifdef PMAC + +/** + PMAC a block of memory + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the secret key (octets) + @param in The data you wish to send through PMAC + @param inlen The length of data you wish to send through PMAC (octets) + @param out [out] Destination for the authentication tag + @param outlen [in/out] The max size and resulting size of the authentication tag + @return CRYPT_OK if successful +*/ +int pmac_memory(int cipher, + const unsigned char *key, unsigned long keylen, + const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen) +{ + int err; + pmac_state *pmac; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + + /* allocate ram for pmac state */ + pmac = XMALLOC(sizeof(pmac_state)); + if (pmac == NULL) { + return CRYPT_MEM; + } + + if ((err = pmac_init(pmac, cipher, key, keylen)) != CRYPT_OK) { + goto LBL_ERR; + } + if ((err = pmac_process(pmac, in, inlen)) != CRYPT_OK) { + goto LBL_ERR; + } + if ((err = pmac_done(pmac, out, outlen)) != CRYPT_OK) { + goto LBL_ERR; + } + + err = CRYPT_OK; +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(pmac, sizeof(pmac_state)); +#endif + + XFREE(pmac); + return err; +} + +#endif diff --git a/src/mac/pmac/pmac_memory_multi.c b/src/mac/pmac/pmac_memory_multi.c new file mode 100644 index 0000000..c1481fc --- /dev/null +++ b/src/mac/pmac/pmac_memory_multi.c @@ -0,0 +1,85 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" +#include + +/** + @file pmac_memory_multi.c + PMAC implementation, process multiple blocks of memory, by Tom St Denis +*/ + +#ifdef PMAC + +/** + PMAC multiple blocks of memory + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the secret key (octets) + @param out [out] Destination for the authentication tag + @param outlen [in/out] The max size and resulting size of the authentication tag + @param in The data you wish to send through PMAC + @param inlen The length of data you wish to send through PMAC (octets) + @param ... tuples of (data,len) pairs to PMAC, terminated with a (NULL,x) (x=don't care) + @return CRYPT_OK if successful +*/ +int pmac_memory_multi(int cipher, + const unsigned char *key, unsigned long keylen, + unsigned char *out, unsigned long *outlen, + const unsigned char *in, unsigned long inlen, ...) +{ + int err; + pmac_state *pmac; + va_list args; + const unsigned char *curptr; + unsigned long curlen; + + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + + /* allocate ram for pmac state */ + pmac = XMALLOC(sizeof(pmac_state)); + if (pmac == NULL) { + return CRYPT_MEM; + } + + if ((err = pmac_init(pmac, cipher, key, keylen)) != CRYPT_OK) { + goto LBL_ERR; + } + va_start(args, inlen); + curptr = in; + curlen = inlen; + for (;;) { + /* process buf */ + if ((err = pmac_process(pmac, curptr, curlen)) != CRYPT_OK) { + goto LBL_ERR; + } + /* step to next */ + curptr = va_arg(args, const unsigned char*); + if (curptr == NULL) { + break; + } + curlen = va_arg(args, unsigned long); + } + if ((err = pmac_done(pmac, out, outlen)) != CRYPT_OK) { + goto LBL_ERR; + } +LBL_ERR: +#ifdef LTC_CLEAN_STACK + zeromem(pmac, sizeof(pmac_state)); +#endif + XFREE(pmac); + va_end(args); + return err; +} + +#endif diff --git a/pmac_ntz.c b/src/mac/pmac/pmac_ntz.c similarity index 78% rename from pmac_ntz.c rename to src/mac/pmac/pmac_ntz.c index 98ec430..45970b3 100644 --- a/pmac_ntz.c +++ b/src/mac/pmac/pmac_ntz.c @@ -8,12 +8,18 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file pmac_ntz.c + PMAC implementation, internal function, by Tom St Denis +*/ #ifdef PMAC +/** + Internal PMAC function +*/ int pmac_ntz(unsigned long x) { int c; diff --git a/src/mac/pmac/pmac_process.c b/src/mac/pmac/pmac_process.c new file mode 100644 index 0000000..0f68e90 --- /dev/null +++ b/src/mac/pmac/pmac_process.c @@ -0,0 +1,73 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file pmac_process.c + PMAC implementation, process data, by Tom St Denis +*/ + + +#ifdef PMAC + +/** + Process data in a PMAC stream + @param pmac The PMAC state + @param in The data to send through PMAC + @param inlen The length of the data to send through PMAC + @return CRYPT_OK if successful +*/ +int pmac_process(pmac_state *pmac, const unsigned char *in, unsigned long inlen) +{ + int err, n, x; + unsigned char Z[MAXBLOCKSIZE]; + + LTC_ARGCHK(pmac != NULL); + LTC_ARGCHK(in != NULL); + if ((err = cipher_is_valid(pmac->cipher_idx)) != CRYPT_OK) { + return err; + } + + if ((pmac->buflen > (int)sizeof(pmac->block)) || (pmac->buflen < 0) || + (pmac->block_len > (int)sizeof(pmac->block)) || (pmac->buflen > pmac->block_len)) { + return CRYPT_INVALID_ARG; + } + + while (inlen != 0) { + /* ok if the block is full we xor in prev, encrypt and replace prev */ + if (pmac->buflen == pmac->block_len) { + pmac_shift_xor(pmac); + for (x = 0; x < pmac->block_len; x++) { + Z[x] = pmac->Li[x] ^ pmac->block[x]; + } + cipher_descriptor[pmac->cipher_idx].ecb_encrypt(Z, Z, &pmac->key); + for (x = 0; x < pmac->block_len; x++) { + pmac->checksum[x] ^= Z[x]; + } + pmac->buflen = 0; + } + + /* add bytes */ + n = MIN(inlen, (unsigned long)(pmac->block_len - pmac->buflen)); + XMEMCPY(pmac->block + pmac->buflen, in, n); + pmac->buflen += n; + inlen -= n; + in += n; + } + +#ifdef LTC_CLEAN_STACK + zeromem(Z, sizeof(Z)); +#endif + + return CRYPT_OK; +} + +#endif diff --git a/pmac_shift_xor.c b/src/mac/pmac/pmac_shift_xor.c similarity index 70% rename from pmac_shift_xor.c rename to src/mac/pmac/pmac_shift_xor.c index 46159fb..5c9ab96 100644 --- a/pmac_shift_xor.c +++ b/src/mac/pmac/pmac_shift_xor.c @@ -8,12 +8,19 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" +/** + @file pmac_shift_xor.c + PMAC implementation, internal function, by Tom St Denis +*/ #ifdef PMAC +/** + Internal function. Performs the state update (adding correct multiple) + @param pmac The PMAC state. +*/ void pmac_shift_xor(pmac_state *pmac) { int x, y; diff --git a/pmac_test.c b/src/mac/pmac/pmac_test.c similarity index 94% rename from pmac_test.c rename to src/mac/pmac/pmac_test.c index e813eb5..08cc9b3 100644 --- a/pmac_test.c +++ b/src/mac/pmac/pmac_test.c @@ -8,12 +8,20 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" + +/** + @file pmac_test.c + PMAC implementation, self-test, by Tom St Denis +*/ -/* PMAC implementation by Tom St Denis */ -#include "mycrypt.h" #ifdef PMAC +/** + Test the OMAC implementation + @return CRYPT_OK if successful, CRYPT_NOP if testing has been disabled +*/ int pmac_test(void) { #if !defined(LTC_TEST) diff --git a/base64_decode.c b/src/misc/base64/base64_decode.c similarity index 78% rename from base64_decode.c rename to src/misc/base64/base64_decode.c index 6729480..5c220ee 100644 --- a/base64_decode.c +++ b/src/misc/base64/base64_decode.c @@ -8,9 +8,13 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" + +/** + @file base64_decode.c + Compliant base64 code donated by Wayne Scott (wscott@bitmover.com) +*/ -/* compliant base64 code donated by Wayne Scott (wscott@bitmover.com) */ -#include "mycrypt.h" #ifdef BASE64 @@ -38,19 +42,27 @@ static const unsigned char map[256] = { 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255, 255 }; -int base64_decode(const unsigned char *in, unsigned long len, +/** + base64 decode a block of memory + @param in The base64 data to decode + @param inlen The length of the base64 data + @param out [out] The destination of the binary decoded data + @param outlen [in/out] The max size and resulting size of the decoded data + @return CRYPT_OK if successful +*/ +int base64_decode(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen) { unsigned long t, x, y, z; unsigned char c; int g; - _ARGCHK(in != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); g = 3; - for (x = y = z = t = 0; x < len; x++) { + for (x = y = z = t = 0; x < inlen; x++) { c = map[in[x]&0xFF]; if (c == 255) continue; if (c == 254) { c = 0; g--; } diff --git a/base64_encode.c b/src/misc/base64/base64_encode.c similarity index 61% rename from base64_encode.c rename to src/misc/base64/base64_encode.c index c322bcc..85b5a17 100644 --- a/base64_encode.c +++ b/src/misc/base64/base64_encode.c @@ -8,31 +8,44 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* compliant base64 code donated by Wayne Scott (wscott@bitmover.com) */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file base64_encode.c + Compliant base64 encoder donated by Wayne Scott (wscott@bitmover.com) +*/ + #ifdef BASE64 static const char *codes = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; -int base64_encode(const unsigned char *in, unsigned long len, +/** + base64 Encode a buffer (NUL terminated) + @param in The input buffer to encode + @param inlen The length of the input buffer + @param out [out] The destination of the base64 encoded data + @param outlen [in/out] The max size and resulting size + @return CRYPT_OK if successful +*/ +int base64_encode(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen) { unsigned long i, len2, leven; unsigned char *p; - _ARGCHK(in != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* valid output size ? */ - len2 = 4 * ((len + 2) / 3); + len2 = 4 * ((inlen + 2) / 3); if (*outlen < len2 + 1) { return CRYPT_BUFFER_OVERFLOW; } p = out; - leven = 3*(len / 3); + leven = 3*(inlen / 3); for (i = 0; i < leven; i += 3) { *p++ = codes[(in[0] >> 2) & 0x3F]; *p++ = codes[(((in[0] & 3) << 4) + (in[1] >> 4)) & 0x3F]; @@ -41,13 +54,13 @@ int base64_encode(const unsigned char *in, unsigned long len, in += 3; } /* Pad it if necessary... */ - if (i < len) { + if (i < inlen) { unsigned a = in[0]; - unsigned b = (i+1 < len) ? in[1] : 0; + unsigned b = (i+1 < inlen) ? in[1] : 0; *p++ = codes[(a >> 2) & 0x3F]; *p++ = codes[(((a & 3) << 4) + (b >> 4)) & 0x3F]; - *p++ = (i+1 < len) ? codes[(((b & 0xf) << 2)) & 0x3F] : '='; + *p++ = (i+1 < inlen) ? codes[(((b & 0xf) << 2)) & 0x3F] : '='; *p++ = '='; } diff --git a/burn_stack.c b/src/misc/burn_stack.c similarity index 76% rename from burn_stack.c rename to src/misc/burn_stack.c index 17b1391..0724154 100644 --- a/burn_stack.c +++ b/src/misc/burn_stack.c @@ -8,8 +8,17 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file burn_stack.c + Burn stack, Tom St Denis +*/ + +/** + Burn some stack memory + @param len amount of stack to burn in bytes +*/ void burn_stack(unsigned long len) { unsigned char buf[32]; diff --git a/crypt.c b/src/misc/crypt/crypt.c similarity index 77% rename from crypt.c rename to src/misc/crypt/crypt.c index 3a4bdc3..6726046 100644 --- a/crypt.c +++ b/src/misc/crypt/crypt.c @@ -8,10 +8,17 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file crypt.c + Build strings, Tom St Denis +*/ const char *crypt_build_settings = - "LibTomCrypt " SCRYPT "\n\n" + "LibTomCrypt " SCRYPT " (Tom St Denis, tomstdenis@gmail.com)\n" + "LibTomCrypt is public domain software.\n" + "Built on " __DATE__ " at " __TIME__ "\n\n\n" "Endianess: " #if defined(ENDIAN_NEUTRAL) "neutral\n" @@ -31,7 +38,7 @@ const char *crypt_build_settings = #endif #endif "Clean stack: " -#if defined(CLEAN_STACK) +#if defined(LTC_CLEAN_STACK) "enabled\n" #else "disabled\n" @@ -63,12 +70,20 @@ const char *crypt_build_settings = #endif #if defined(TWOFISH) " Twofish " - #if defined(TWOFISH_SMALL) && defined(TWOFISH_TABLES) + #if defined(TWOFISH_SMALL) && defined(TWOFISH_TABLES) && defined(TWOFISH_ALL_TABLES) + "(small, tables, all_tables)\n" + #elif defined(TWOFISH_SMALL) && defined(TWOFISH_TABLES) "(small, tables)\n" + #elif defined(TWOFISH_SMALL) && defined(TWOFISH_ALL_TABLES) + "(small, all_tables)\n" + #elif defined(TWOFISH_TABLES) && defined(TWOFISH_ALL_TABLES) + "(tables, all_tables)\n" #elif defined(TWOFISH_SMALL) "(small)\n" #elif defined(TWOFISH_TABLES) "(tables)\n" + #elif defined(TWOFISH_ALL_TABLES) + "(all_tables)\n" #else "\n" #endif @@ -85,6 +100,16 @@ const char *crypt_build_settings = #if defined(SKIPJACK) " Skipjack\n" #endif +#if defined(KHAZAD) + " Khazad\n" +#endif +#if defined(ANUBIS) + " Anubis " +#endif +#if defined(ANUBIS_TWEAK) + " (tweaked)" +#endif + "\n" "\nHashes built-in:\n" #if defined(SHA512) @@ -183,11 +208,7 @@ const char *crypt_build_settings = "\nPK Algs:\n" #if defined(MRSA) - " RSA" -#if defined(RSA_TIMING) - " + RSA_TIMING " -#endif - "\n" + " RSA \n" #endif #if defined(MDH) " DH\n" @@ -203,10 +224,10 @@ const char *crypt_build_settings = #if defined(WIN32) " WIN32 platform detected.\n" #endif -#if defined(__CYGWIN__) +#if defined(LBL_CYGWIN__) " CYGWIN Detected.\n" #endif -#if defined(__DJGPP__) +#if defined(LBL_DJGPP__) " DJGPP Detected.\n" #endif #if defined(_MSC_VER) @@ -218,6 +239,9 @@ const char *crypt_build_settings = #if defined(INTEL_CC) " Intel C Compiler detected.\n" #endif +#if defined(LBL_x86_64__) + " x86-64 detected.\n" +#endif "\nVarious others: " #if defined(BASE64) @@ -238,14 +262,14 @@ const char *crypt_build_settings = #if defined(PKCS_5) " PKCS#5 " #endif -#if defined(SMALL_CODE) - " SMALL_CODE " +#if defined(LTC_SMALL_CODE) + " LTC_SMALL_CODE " #endif -#if defined(NO_FILE) - " NO_FILE " +#if defined(LTC_NO_FILE) + " LTC_NO_FILE " #endif -#if defined(LTMSSE) - " LTMSSE " +#if defined(LTC_DER) + " LTC_DER " #endif "\n" "\n\n\n" diff --git a/crypt_argchk.c b/src/misc/crypt/crypt_argchk.c similarity index 74% rename from crypt_argchk.c rename to src/misc/crypt/crypt_argchk.c index 3bb73a0..b44d012 100644 --- a/crypt_argchk.c +++ b/src/misc/crypt/crypt_argchk.c @@ -8,13 +8,18 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" #include +/** + @file crypt_argchk.c + Perform argument checking, Tom St Denis +*/ + #if (ARGTYPE == 0) void crypt_argchk(char *v, char *s, int d) { - fprintf(stderr, "_ARGCHK '%s' failure on line %d of file %s\n", + fprintf(stderr, "LTC_ARGCHK '%s' failure on line %d of file %s\n", v, d, s); (void)raise(SIGABRT); } diff --git a/crypt_cipher_descriptor.c b/src/misc/crypt/crypt_cipher_descriptor.c similarity index 66% rename from crypt_cipher_descriptor.c rename to src/misc/crypt/crypt_cipher_descriptor.c index 4a8a943..99091bf 100644 --- a/crypt_cipher_descriptor.c +++ b/src/misc/crypt/crypt_cipher_descriptor.c @@ -8,7 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -struct _cipher_descriptor cipher_descriptor[TAB_SIZE]; +/** + @file crypt_cipher_descriptor.c + Stores the cipher descriptor table, Tom St Denis +*/ + +struct ltc_cipher_descriptor cipher_descriptor[TAB_SIZE]; diff --git a/crypt_cipher_is_valid.c b/src/misc/crypt/crypt_cipher_is_valid.c similarity index 68% rename from crypt_cipher_is_valid.c rename to src/misc/crypt/crypt_cipher_is_valid.c index 8b0c448..f730b54 100644 --- a/crypt_cipher_is_valid.c +++ b/src/misc/crypt/crypt_cipher_is_valid.c @@ -8,8 +8,18 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_cipher_is_valid.c + Determine if cipher is valid, Tom St Denis +*/ + +/* + Test if a cipher index is valid + @param idx The index of the cipher to search for + @return CRYPT_OK if valid +*/ int cipher_is_valid(int idx) { if (idx < 0 || idx >= TAB_SIZE || cipher_descriptor[idx].name == NULL) { diff --git a/crypt_find_cipher.c b/src/misc/crypt/crypt_find_cipher.c similarity index 66% rename from crypt_find_cipher.c rename to src/misc/crypt/crypt_find_cipher.c index 0aa88c7..661e0ae 100644 --- a/crypt_find_cipher.c +++ b/src/misc/crypt/crypt_find_cipher.c @@ -8,12 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_find_cipher.c + Find a cipher in the descriptor tables, Tom St Denis +*/ + +/** + Find a registered cipher by name + @param name The name of the cipher to look for + @return >= 0 if found, -1 if not present +*/ int find_cipher(const char *name) { int x; - _ARGCHK(name != NULL); + LTC_ARGCHK(name != NULL); for (x = 0; x < TAB_SIZE; x++) { if (cipher_descriptor[x].name != NULL && !strcmp(cipher_descriptor[x].name, name)) { return x; diff --git a/crypt_find_cipher_any.c b/src/misc/crypt/crypt_find_cipher_any.c similarity index 60% rename from crypt_find_cipher_any.c rename to src/misc/crypt/crypt_find_cipher_any.c index 81c33be..880b082 100644 --- a/crypt_find_cipher_any.c +++ b/src/misc/crypt/crypt_find_cipher_any.c @@ -8,14 +8,25 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* idea from Wayne Scott */ +/** + @file crypt_find_cipher_any.c + Find a cipher in the descriptor tables, Tom St Denis +*/ + +/** + Find a cipher flexibly. First by name then if not present by block and key size + @param name The name of the cipher desired + @param blocklen The minimum length of the block cipher desired (octets) + @param keylen The minimum length of the key size desired (octets) + @return >= 0 if found, -1 if not present +*/ int find_cipher_any(const char *name, int blocklen, int keylen) { int x; - _ARGCHK(name != NULL); + LTC_ARGCHK(name != NULL); x = find_cipher(name); if (x != -1) return x; diff --git a/crypt_find_cipher_id.c b/src/misc/crypt/crypt_find_cipher_id.c similarity index 69% rename from crypt_find_cipher_id.c rename to src/misc/crypt/crypt_find_cipher_id.c index 91b19d5..422eef7 100644 --- a/crypt_find_cipher_id.c +++ b/src/misc/crypt/crypt_find_cipher_id.c @@ -8,8 +8,18 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_find_cipher_id.c + Find cipher by ID, Tom St Denis +*/ + +/** + Find a cipher by ID number + @param ID The ID (not same as index) of the cipher to find + @return >= 0 if found, -1 if not present +*/ int find_cipher_id(unsigned char ID) { int x; diff --git a/crypt_find_hash.c b/src/misc/crypt/crypt_find_hash.c similarity index 69% rename from crypt_find_hash.c rename to src/misc/crypt/crypt_find_hash.c index 1422233..e7eb9ee 100644 --- a/crypt_find_hash.c +++ b/src/misc/crypt/crypt_find_hash.c @@ -8,12 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_find_hash.c + Find a hash, Tom St Denis +*/ + +/** + Find a registered hash by name + @param name The name of the hash to look for + @return >= 0 if found, -1 if not present +*/ int find_hash(const char *name) { int x; - _ARGCHK(name != NULL); + LTC_ARGCHK(name != NULL); for (x = 0; x < TAB_SIZE; x++) { if (hash_descriptor[x].name != NULL && strcmp(hash_descriptor[x].name, name) == 0) { return x; diff --git a/crypt_find_hash_any.c b/src/misc/crypt/crypt_find_hash_any.c similarity index 64% rename from crypt_find_hash_any.c rename to src/misc/crypt/crypt_find_hash_any.c index 5b35252..a2650ec 100644 --- a/crypt_find_hash_any.c +++ b/src/misc/crypt/crypt_find_hash_any.c @@ -8,13 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* return first hash with at least [amount over] digestlen bytes of output */ -int find_hash_any(const char *name, int digestlen) +/** + @file crypt_find_hash_any.c + Find a hash, Tom St Denis +*/ + +/** + Find a hash flexibly. First by name then if not present by digest size + @param name The name of the hash desired + @param digestlen The minimum length of the digest size (octets) + @return >= 0 if found, -1 if not present +*/int find_hash_any(const char *name, int digestlen) { int x, y, z; - _ARGCHK(name != NULL); + LTC_ARGCHK(name != NULL); x = find_hash(name); if (x != -1) return x; diff --git a/crypt_find_hash_id.c b/src/misc/crypt/crypt_find_hash_id.c similarity index 70% rename from crypt_find_hash_id.c rename to src/misc/crypt/crypt_find_hash_id.c index ff04aea..fbd965a 100644 --- a/crypt_find_hash_id.c +++ b/src/misc/crypt/crypt_find_hash_id.c @@ -8,8 +8,18 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_find_hash_id.c + Find hash by ID, Tom St Denis +*/ + +/** + Find a hash by ID number + @param ID The ID (not same as index) of the hash to find + @return >= 0 if found, -1 if not present +*/ int find_hash_id(unsigned char ID) { int x; diff --git a/crypt_find_prng.c b/src/misc/crypt/crypt_find_prng.c similarity index 69% rename from crypt_find_prng.c rename to src/misc/crypt/crypt_find_prng.c index 7fc4e45..cac1317 100644 --- a/crypt_find_prng.c +++ b/src/misc/crypt/crypt_find_prng.c @@ -8,12 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_find_prng.c + Find a PRNG, Tom St Denis +*/ + +/** + Find a registered PRNG by name + @param name The name of the PRNG to look for + @return >= 0 if found, -1 if not present +*/ int find_prng(const char *name) { int x; - _ARGCHK(name != NULL); + LTC_ARGCHK(name != NULL); for (x = 0; x < TAB_SIZE; x++) { if ((prng_descriptor[x].name != NULL) && strcmp(prng_descriptor[x].name, name) == 0) { return x; diff --git a/crypt_hash_descriptor.c b/src/misc/crypt/crypt_hash_descriptor.c similarity index 67% rename from crypt_hash_descriptor.c rename to src/misc/crypt/crypt_hash_descriptor.c index 5c02255..e06cbf0 100644 --- a/crypt_hash_descriptor.c +++ b/src/misc/crypt/crypt_hash_descriptor.c @@ -8,7 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -struct _hash_descriptor hash_descriptor[TAB_SIZE]; +/** + @file crypt_hash_decriptor.c + Stores the hash descriptor table, Tom St Denis +*/ + +struct ltc_hash_descriptor hash_descriptor[TAB_SIZE]; diff --git a/crypt_hash_is_valid.c b/src/misc/crypt/crypt_hash_is_valid.c similarity index 69% rename from crypt_hash_is_valid.c rename to src/misc/crypt/crypt_hash_is_valid.c index b924e59..8ea88a0 100644 --- a/crypt_hash_is_valid.c +++ b/src/misc/crypt/crypt_hash_is_valid.c @@ -8,8 +8,18 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_hash_is_valid.c + Determine if hash is valid, Tom St Denis +*/ + +/* + Test if a hash index is valid + @param idx The index of the hash to search for + @return CRYPT_OK if valid +*/ int hash_is_valid(int idx) { if (idx < 0 || idx >= TAB_SIZE || hash_descriptor[idx].name == NULL) { diff --git a/crypt_prng_descriptor.c b/src/misc/crypt/crypt_prng_descriptor.c similarity index 67% rename from crypt_prng_descriptor.c rename to src/misc/crypt/crypt_prng_descriptor.c index 129118f..6f496da 100644 --- a/crypt_prng_descriptor.c +++ b/src/misc/crypt/crypt_prng_descriptor.c @@ -8,6 +8,10 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -struct _prng_descriptor prng_descriptor[TAB_SIZE]; +/** + @file crypt_prng_descriptor.c + Stores the PRNG descriptors, Tom St Denis +*/ +struct ltc_prng_descriptor prng_descriptor[TAB_SIZE]; diff --git a/crypt_prng_is_valid.c b/src/misc/crypt/crypt_prng_is_valid.c similarity index 69% rename from crypt_prng_is_valid.c rename to src/misc/crypt/crypt_prng_is_valid.c index cc66bc2..8634e94 100644 --- a/crypt_prng_is_valid.c +++ b/src/misc/crypt/crypt_prng_is_valid.c @@ -8,8 +8,18 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file crypt_prng_is_valid.c + Determine if PRNG is valid, Tom St Denis +*/ + +/* + Test if a PRNG index is valid + @param idx The index of the PRNG to search for + @return CRYPT_OK if valid +*/ int prng_is_valid(int idx) { if (idx < 0 || idx >= TAB_SIZE || prng_descriptor[idx].name == NULL) { diff --git a/crypt_register_cipher.c b/src/misc/crypt/crypt_register_cipher.c similarity index 60% rename from crypt_register_cipher.c rename to src/misc/crypt/crypt_register_cipher.c index e8e021e..c1fe8f0 100644 --- a/crypt_register_cipher.c +++ b/src/misc/crypt/crypt_register_cipher.c @@ -8,13 +8,23 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int register_cipher(const struct _cipher_descriptor *cipher) +/** + @file crypt_register_cipher.c + Register a cipher, Tom St Denis +*/ + +/** + Register a cipher with the descriptor table + @param cipher The cipher you wish to register + @return value >= 0 if successfully added (or already present), -1 if unsuccessful +*/ +int register_cipher(const struct ltc_cipher_descriptor *cipher) { int x; - _ARGCHK(cipher != NULL); + LTC_ARGCHK(cipher != NULL); /* is it already registered? */ for (x = 0; x < TAB_SIZE; x++) { @@ -26,7 +36,7 @@ int register_cipher(const struct _cipher_descriptor *cipher) /* find a blank spot */ for (x = 0; x < TAB_SIZE; x++) { if (cipher_descriptor[x].name == NULL) { - XMEMCPY(&cipher_descriptor[x], cipher, sizeof(struct _cipher_descriptor)); + XMEMCPY(&cipher_descriptor[x], cipher, sizeof(struct ltc_cipher_descriptor)); return x; } } diff --git a/crypt_register_hash.c b/src/misc/crypt/crypt_register_hash.c similarity index 54% rename from crypt_register_hash.c rename to src/misc/crypt/crypt_register_hash.c index c8023a9..8d05e42 100644 --- a/crypt_register_hash.c +++ b/src/misc/crypt/crypt_register_hash.c @@ -8,17 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int register_hash(const struct _hash_descriptor *hash) +/** + @file crypt_register_hash.c + Register a HASH, Tom St Denis +*/ + +/** + Register a hash with the descriptor table + @param hash The hash you wish to register + @return value >= 0 if successfully added (or already present), -1 if unsuccessful +*/ +int register_hash(const struct ltc_hash_descriptor *hash) { int x; - _ARGCHK(hash != NULL); + LTC_ARGCHK(hash != NULL); /* is it already registered? */ for (x = 0; x < TAB_SIZE; x++) { - if (memcmp(&hash_descriptor[x], hash, sizeof(struct _hash_descriptor)) == 0) { + if (memcmp(&hash_descriptor[x], hash, sizeof(struct ltc_hash_descriptor)) == 0) { return x; } } @@ -26,7 +36,7 @@ int register_hash(const struct _hash_descriptor *hash) /* find a blank spot */ for (x = 0; x < TAB_SIZE; x++) { if (hash_descriptor[x].name == NULL) { - XMEMCPY(&hash_descriptor[x], hash, sizeof(struct _hash_descriptor)); + XMEMCPY(&hash_descriptor[x], hash, sizeof(struct ltc_hash_descriptor)); return x; } } diff --git a/crypt_register_prng.c b/src/misc/crypt/crypt_register_prng.c similarity index 54% rename from crypt_register_prng.c rename to src/misc/crypt/crypt_register_prng.c index 8176338..50ff229 100644 --- a/crypt_register_prng.c +++ b/src/misc/crypt/crypt_register_prng.c @@ -8,17 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int register_prng(const struct _prng_descriptor *prng) +/** + @file register_prng.c + Register a PRNG, Tom St Denis +*/ + +/** + Register a PRNG with the descriptor table + @param prng The PRNG you wish to register + @return value >= 0 if successfully added (or already present), -1 if unsuccessful +*/ +int register_prng(const struct ltc_prng_descriptor *prng) { int x; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* is it already registered? */ for (x = 0; x < TAB_SIZE; x++) { - if (memcmp(&prng_descriptor[x], prng, sizeof(struct _prng_descriptor)) == 0) { + if (memcmp(&prng_descriptor[x], prng, sizeof(struct ltc_prng_descriptor)) == 0) { return x; } } @@ -26,7 +36,7 @@ int register_prng(const struct _prng_descriptor *prng) /* find a blank spot */ for (x = 0; x < TAB_SIZE; x++) { if (prng_descriptor[x].name == NULL) { - XMEMCPY(&prng_descriptor[x], prng, sizeof(struct _prng_descriptor)); + XMEMCPY(&prng_descriptor[x], prng, sizeof(struct ltc_prng_descriptor)); return x; } } diff --git a/crypt_unregister_cipher.c b/src/misc/crypt/crypt_unregister_cipher.c similarity index 57% rename from crypt_unregister_cipher.c rename to src/misc/crypt/crypt_unregister_cipher.c index 6321daf..309e08a 100644 --- a/crypt_unregister_cipher.c +++ b/src/misc/crypt/crypt_unregister_cipher.c @@ -8,17 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int unregister_cipher(const struct _cipher_descriptor *cipher) +/** + @file crypt_unregister_cipher.c + Unregister a cipher, Tom St Denis +*/ + +/** + Unregister a cipher from the descriptor table + @param cipher The cipher descriptor to remove + @return CRYPT_OK on success +*/ +int unregister_cipher(const struct ltc_cipher_descriptor *cipher) { int x; - _ARGCHK(cipher != NULL); + LTC_ARGCHK(cipher != NULL); /* is it already registered? */ for (x = 0; x < TAB_SIZE; x++) { - if (memcmp(&cipher_descriptor[x], cipher, sizeof(struct _cipher_descriptor)) == 0) { + if (memcmp(&cipher_descriptor[x], cipher, sizeof(struct ltc_cipher_descriptor)) == 0) { cipher_descriptor[x].name = NULL; cipher_descriptor[x].ID = 255; return CRYPT_OK; diff --git a/crypt_unregister_hash.c b/src/misc/crypt/crypt_unregister_hash.c similarity index 56% rename from crypt_unregister_hash.c rename to src/misc/crypt/crypt_unregister_hash.c index fcdca5f..aef522d 100644 --- a/crypt_unregister_hash.c +++ b/src/misc/crypt/crypt_unregister_hash.c @@ -8,17 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int unregister_hash(const struct _hash_descriptor *hash) +/** + @file crypt_unregister_hash.c + Unregister a hash, Tom St Denis +*/ + +/** + Unregister a hash from the descriptor table + @param hash The hash descriptor to remove + @return CRYPT_OK on success +*/ +int unregister_hash(const struct ltc_hash_descriptor *hash) { int x; - _ARGCHK(hash != NULL); + LTC_ARGCHK(hash != NULL); /* is it already registered? */ for (x = 0; x < TAB_SIZE; x++) { - if (memcmp(&hash_descriptor[x], hash, sizeof(struct _hash_descriptor)) == 0) { + if (memcmp(&hash_descriptor[x], hash, sizeof(struct ltc_hash_descriptor)) == 0) { hash_descriptor[x].name = NULL; return CRYPT_OK; } diff --git a/crypt_unregister_prng.c b/src/misc/crypt/crypt_unregister_prng.c similarity index 56% rename from crypt_unregister_prng.c rename to src/misc/crypt/crypt_unregister_prng.c index c315338..fafa9b6 100644 --- a/crypt_unregister_prng.c +++ b/src/misc/crypt/crypt_unregister_prng.c @@ -8,17 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -int unregister_prng(const struct _prng_descriptor *prng) +/** + @file crypt_unregister_prng.c + Unregister a PRNG, Tom St Denis +*/ + +/** + Unregister a PRNG from the descriptor table + @param prng The PRNG descriptor to remove + @return CRYPT_OK on success +*/ +int unregister_prng(const struct ltc_prng_descriptor *prng) { int x; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* is it already registered? */ for (x = 0; x < TAB_SIZE; x++) { - if (memcmp(&prng_descriptor[x], prng, sizeof(struct _prng_descriptor)) != 0) { + if (memcmp(&prng_descriptor[x], prng, sizeof(struct ltc_prng_descriptor)) != 0) { prng_descriptor[x].name = NULL; return CRYPT_OK; } diff --git a/error_to_string.c b/src/misc/error_to_string.c similarity index 81% rename from error_to_string.c rename to src/misc/error_to_string.c index 9c388fa..5a7e0f4 100644 --- a/error_to_string.c +++ b/src/misc/error_to_string.c @@ -9,7 +9,12 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file error_to_string.c + Convert error codes to ASCII strings, Tom St Denis +*/ static const char *err_2_str[] = { @@ -49,6 +54,11 @@ static const char *err_2_str[] = }; +/** + Convert an LTC error code to ASCII + @param err The error code + @return A pointer to the ASCII NUL terminated string for the error or "Invalid error code." if the err code was not valid. +*/ const char *error_to_string(int err) { if (err < 0 || err >= (int)(sizeof(err_2_str)/sizeof(err_2_str[0]))) { diff --git a/is_prime.c b/src/misc/mpi/is_prime.c similarity index 79% rename from is_prime.c rename to src/misc/mpi/is_prime.c index d6fc84e..4f52323 100644 --- a/is_prime.c +++ b/src/misc/mpi/is_prime.c @@ -8,7 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file is_prime.c + Determines if integer is prime for LTC, Tom St Denis +*/ #ifdef MPI @@ -16,8 +21,8 @@ int is_prime(mp_int *N, int *result) { int err; - _ARGCHK(N != NULL); - _ARGCHK(result != NULL); + LTC_ARGCHK(N != NULL); + LTC_ARGCHK(result != NULL); if ((err = mp_prime_is_prime(N, mp_prime_rabin_miller_trials(mp_count_bits(N)), result)) != MP_OKAY) { return mpi_to_ltc_error(err); } diff --git a/mpi.c b/src/misc/mpi/mpi.c similarity index 97% rename from mpi.c rename to src/misc/mpi/mpi.c index 2ddd0de..e5664e6 100644 --- a/mpi.c +++ b/src/misc/mpi/mpi.c @@ -87,20 +87,20 @@ fast_mp_invmod (mp_int * a, mp_int * b, mp_int * c) /* x == modulus, y == value to invert */ if ((res = mp_copy (b, &x)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* we need y = |a| */ if ((res = mp_abs (a, &y)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* 3. u=x, v=y, A=1, B=0, C=0,D=1 */ if ((res = mp_copy (&x, &u)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_copy (&y, &v)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } mp_set (&D, 1); @@ -109,17 +109,17 @@ top: while (mp_iseven (&u) == 1) { /* 4.1 u = u/2 */ if ((res = mp_div_2 (&u, &u)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* 4.2 if B is odd then */ if (mp_isodd (&B) == 1) { if ((res = mp_sub (&B, &x, &B)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } /* B = B/2 */ if ((res = mp_div_2 (&B, &B)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } @@ -127,18 +127,18 @@ top: while (mp_iseven (&v) == 1) { /* 5.1 v = v/2 */ if ((res = mp_div_2 (&v, &v)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* 5.2 if D is odd then */ if (mp_isodd (&D) == 1) { /* D = (D-x)/2 */ if ((res = mp_sub (&D, &x, &D)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } /* D = D/2 */ if ((res = mp_div_2 (&D, &D)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } @@ -146,20 +146,20 @@ top: if (mp_cmp (&u, &v) != MP_LT) { /* u = u - v, B = B - D */ if ((res = mp_sub (&u, &v, &u)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&B, &D, &B)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } else { /* v - v - u, D = D - B */ if ((res = mp_sub (&v, &u, &v)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&D, &B, &D)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } @@ -173,21 +173,21 @@ top: /* if v != 1 then there is no inverse */ if (mp_cmp_d (&v, 1) != MP_EQ) { res = MP_VAL; - goto __ERR; + goto LBL_ERR; } /* b is now the inverse */ neg = a->sign; while (D.sign == MP_NEG) { if ((res = mp_add (&D, b, &D)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } mp_exch (&D, c); c->sign = neg; res = MP_OKAY; -__ERR:mp_clear_multi (&x, &y, &u, &v, &B, &D, NULL); +LBL_ERR:mp_clear_multi (&x, &y, &u, &v, &B, &D, NULL); return res; } #endif @@ -409,7 +409,7 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs) register mp_word _W; /* grow the destination as required */ - if (c->alloc < digs) { + if (c->alloc <= digs) { if ((res = mp_grow (c, digs)) != MP_OKAY) { return res; } @@ -420,7 +420,7 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs) /* clear the carry */ _W = 0; - for (ix = 0; ix <= pa; ix++) { + for (ix = 0; ix < pa; ix++) { int tx, ty; int iy; mp_digit *tmpx, *tmpy; @@ -450,6 +450,9 @@ fast_s_mp_mul_digs (mp_int * a, mp_int * b, mp_int * c, int digs) _W = _W >> ((mp_word)DIGIT_BIT); } + /* store final carry */ + W[ix] = _W; + /* setup dest */ olduse = c->used; c->used = digs; @@ -510,7 +513,7 @@ fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs) /* grow the destination as required */ pa = a->used + b->used; - if (c->alloc < pa) { + if (c->alloc <= pa) { if ((res = mp_grow (c, pa)) != MP_OKAY) { return res; } @@ -519,7 +522,7 @@ fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs) /* number of output digits to produce */ pa = a->used + b->used; _W = 0; - for (ix = digs; ix <= pa; ix++) { + for (ix = digs; ix < pa; ix++) { int tx, ty, iy; mp_digit *tmpx, *tmpy; @@ -547,6 +550,9 @@ fast_s_mp_mul_high_digs (mp_int * a, mp_int * b, mp_int * c, int digs) /* make next carry */ _W = _W >> ((mp_word)DIGIT_BIT); } + + /* store final carry */ + W[ix] = _W; /* setup dest */ olduse = c->used; @@ -628,7 +634,7 @@ int fast_s_mp_sqr (mp_int * a, mp_int * b) /* grow the destination as required */ pa = a->used + a->used; - if (b->alloc < pa) { + if (b->alloc <= pa) { if ((res = mp_grow (b, pa)) != MP_OKAY) { return res; } @@ -636,7 +642,7 @@ int fast_s_mp_sqr (mp_int * a, mp_int * b) /* number of output digits to produce */ W1 = 0; - for (ix = 0; ix <= pa; ix++) { + for (ix = 0; ix < pa; ix++) { int tx, ty, iy; mp_word _W; mp_digit *tmpy; @@ -1539,23 +1545,23 @@ int mp_div(mp_int * a, mp_int * b, mp_int * c, mp_int * d) mp_set(&tq, 1); n = mp_count_bits(a) - mp_count_bits(b); - if (((res = mp_copy(a, &ta)) != MP_OKAY) || - ((res = mp_copy(b, &tb)) != MP_OKAY) || + if (((res = mp_abs(a, &ta)) != MP_OKAY) || + ((res = mp_abs(b, &tb)) != MP_OKAY) || ((res = mp_mul_2d(&tb, n, &tb)) != MP_OKAY) || ((res = mp_mul_2d(&tq, n, &tq)) != MP_OKAY)) { - goto __ERR; + goto LBL_ERR; } while (n-- >= 0) { if (mp_cmp(&tb, &ta) != MP_GT) { if (((res = mp_sub(&ta, &tb, &ta)) != MP_OKAY) || ((res = mp_add(&q, &tq, &q)) != MP_OKAY)) { - goto __ERR; + goto LBL_ERR; } } if (((res = mp_div_2d(&tb, 1, &tb, NULL)) != MP_OKAY) || ((res = mp_div_2d(&tq, 1, &tq, NULL)) != MP_OKAY)) { - goto __ERR; + goto LBL_ERR; } } @@ -1564,13 +1570,13 @@ int mp_div(mp_int * a, mp_int * b, mp_int * c, mp_int * d) n2 = (a->sign == b->sign ? MP_ZPOS : MP_NEG); if (c != NULL) { mp_exch(c, &q); - c->sign = n2; + c->sign = (mp_iszero(c) == MP_YES) ? MP_ZPOS : n2; } if (d != NULL) { mp_exch(d, &ta); - d->sign = n; + d->sign = (mp_iszero(d) == MP_YES) ? MP_ZPOS : n; } -__ERR: +LBL_ERR: mp_clear_multi(&ta, &tb, &tq, &q, NULL); return res; } @@ -1619,19 +1625,19 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d) q.used = a->used + 2; if ((res = mp_init (&t1)) != MP_OKAY) { - goto __Q; + goto LBL_Q; } if ((res = mp_init (&t2)) != MP_OKAY) { - goto __T1; + goto LBL_T1; } if ((res = mp_init_copy (&x, a)) != MP_OKAY) { - goto __T2; + goto LBL_T2; } if ((res = mp_init_copy (&y, b)) != MP_OKAY) { - goto __X; + goto LBL_X; } /* fix the sign */ @@ -1643,10 +1649,10 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d) if (norm < (int)(DIGIT_BIT-1)) { norm = (DIGIT_BIT-1) - norm; if ((res = mp_mul_2d (&x, norm, &x)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } if ((res = mp_mul_2d (&y, norm, &y)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } } else { norm = 0; @@ -1658,13 +1664,13 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d) /* while (x >= y*b**n-t) do { q[n-t] += 1; x -= y*b**{n-t} } */ if ((res = mp_lshd (&y, n - t)) != MP_OKAY) { /* y = y*b**{n-t} */ - goto __Y; + goto LBL_Y; } while (mp_cmp (&x, &y) != MP_LT) { ++(q.dp[n - t]); if ((res = mp_sub (&x, &y, &x)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } } @@ -1706,7 +1712,7 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d) t1.dp[1] = y.dp[t]; t1.used = 2; if ((res = mp_mul_d (&t1, q.dp[i - t - 1], &t1)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } /* find right hand */ @@ -1718,27 +1724,27 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d) /* step 3.3 x = x - q{i-t-1} * y * b**{i-t-1} */ if ((res = mp_mul_d (&y, q.dp[i - t - 1], &t1)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } if ((res = mp_lshd (&t1, i - t - 1)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } if ((res = mp_sub (&x, &t1, &x)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } /* if x < 0 then { x = x + y*b**{i-t-1}; q{i-t-1} -= 1; } */ if (x.sign == MP_NEG) { if ((res = mp_copy (&y, &t1)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } if ((res = mp_lshd (&t1, i - t - 1)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } if ((res = mp_add (&x, &t1, &x)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } q.dp[i - t - 1] = (q.dp[i - t - 1] - 1UL) & MP_MASK; @@ -1765,11 +1771,11 @@ int mp_div (mp_int * a, mp_int * b, mp_int * c, mp_int * d) res = MP_OKAY; -__Y:mp_clear (&y); -__X:mp_clear (&x); -__T2:mp_clear (&t2); -__T1:mp_clear (&t1); -__Q:mp_clear (&q); +LBL_Y:mp_clear (&y); +LBL_X:mp_clear (&x); +LBL_T2:mp_clear (&t2); +LBL_T1:mp_clear (&t1); +LBL_Q:mp_clear (&q); return res; } @@ -2457,7 +2463,7 @@ int mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) return err; #else /* no invmod */ - return MP_VAL + return MP_VAL; #endif } @@ -2588,11 +2594,11 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) #ifdef BN_MP_MONTGOMERY_SETUP_C /* now setup montgomery */ if ((err = mp_montgomery_setup (P, &mp)) != MP_OKAY) { - goto __M; + goto LBL_M; } #else err = MP_VAL; - goto __M; + goto LBL_M; #endif /* automatically pick the comba one if available (saves quite a few calls/ifs) */ @@ -2608,7 +2614,7 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) redux = mp_montgomery_reduce; #else err = MP_VAL; - goto __M; + goto LBL_M; #endif } } else if (redmode == 1) { @@ -2618,24 +2624,24 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) redux = mp_dr_reduce; #else err = MP_VAL; - goto __M; + goto LBL_M; #endif } else { #if defined(BN_MP_REDUCE_2K_SETUP_C) && defined(BN_MP_REDUCE_2K_C) /* setup DR reduction for moduli of the form 2**k - b */ if ((err = mp_reduce_2k_setup(P, &mp)) != MP_OKAY) { - goto __M; + goto LBL_M; } redux = mp_reduce_2k; #else err = MP_VAL; - goto __M; + goto LBL_M; #endif } /* setup result */ if ((err = mp_init (&res)) != MP_OKAY) { - goto __M; + goto LBL_M; } /* create M table @@ -2649,45 +2655,45 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) #ifdef BN_MP_MONTGOMERY_CALC_NORMALIZATION_C /* now we need R mod m */ if ((err = mp_montgomery_calc_normalization (&res, P)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } #else err = MP_VAL; - goto __RES; + goto LBL_RES; #endif /* now set M[1] to G * R mod m */ if ((err = mp_mulmod (G, &res, P, &M[1])) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } else { mp_set(&res, 1); if ((err = mp_mod(G, P, &M[1])) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } /* compute the value at M[1<<(winsize-1)] by squaring M[1] (winsize-1) times */ if ((err = mp_copy (&M[1], &M[1 << (winsize - 1)])) != MP_OKAY) { - goto __RES; + goto LBL_RES; } for (x = 0; x < (winsize - 1); x++) { if ((err = mp_sqr (&M[1 << (winsize - 1)], &M[1 << (winsize - 1)])) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = redux (&M[1 << (winsize - 1)], P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } /* create upper table */ for (x = (1 << (winsize - 1)) + 1; x < (1 << winsize); x++) { if ((err = mp_mul (&M[x - 1], &M[1], &M[x])) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = redux (&M[x], P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } @@ -2727,10 +2733,10 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) /* if the bit is zero and mode == 1 then we square */ if (mode == 1 && y == 0) { if ((err = mp_sqr (&res, &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = redux (&res, P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } continue; } @@ -2744,19 +2750,19 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) /* square first */ for (x = 0; x < winsize; x++) { if ((err = mp_sqr (&res, &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = redux (&res, P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } /* then multiply */ if ((err = mp_mul (&res, &M[bitbuf], &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = redux (&res, P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } /* empty window and reset */ @@ -2771,10 +2777,10 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) /* square then multiply if the bit is set */ for (x = 0; x < bitcpy; x++) { if ((err = mp_sqr (&res, &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = redux (&res, P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } /* get next bit of the window */ @@ -2782,10 +2788,10 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) if ((bitbuf & (1 << winsize)) != 0) { /* then multiply */ if ((err = mp_mul (&res, &M[1], &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = redux (&res, P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } } @@ -2799,15 +2805,15 @@ mp_exptmod_fast (mp_int * G, mp_int * X, mp_int * P, mp_int * Y, int redmode) * of R. */ if ((err = redux(&res, P, mp)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } /* swap res with Y */ mp_exch (&res, Y); err = MP_OKAY; -__RES:mp_clear (&res); -__M: +LBL_RES:mp_clear (&res); +LBL_M: mp_clear(&M[1]); for (x = 1<<(winsize-1); x < (1 << winsize); x++) { mp_clear (&M[x]); @@ -3059,7 +3065,7 @@ int mp_gcd (mp_int * a, mp_int * b, mp_int * c) } if ((res = mp_init_copy (&v, b)) != MP_OKAY) { - goto __U; + goto LBL_U; } /* must be positive for the remainder of the algorithm */ @@ -3073,24 +3079,24 @@ int mp_gcd (mp_int * a, mp_int * b, mp_int * c) if (k > 0) { /* divide the power of two out */ if ((res = mp_div_2d(&u, k, &u, NULL)) != MP_OKAY) { - goto __V; + goto LBL_V; } if ((res = mp_div_2d(&v, k, &v, NULL)) != MP_OKAY) { - goto __V; + goto LBL_V; } } /* divide any remaining factors of two out */ if (u_lsb != k) { if ((res = mp_div_2d(&u, u_lsb - k, &u, NULL)) != MP_OKAY) { - goto __V; + goto LBL_V; } } if (v_lsb != k) { if ((res = mp_div_2d(&v, v_lsb - k, &v, NULL)) != MP_OKAY) { - goto __V; + goto LBL_V; } } @@ -3103,23 +3109,23 @@ int mp_gcd (mp_int * a, mp_int * b, mp_int * c) /* subtract smallest from largest */ if ((res = s_mp_sub(&v, &u, &v)) != MP_OKAY) { - goto __V; + goto LBL_V; } /* Divide out all factors of two */ if ((res = mp_div_2d(&v, mp_cnt_lsb(&v), &v, NULL)) != MP_OKAY) { - goto __V; + goto LBL_V; } } /* multiply by 2**k which we divided out at the beginning */ if ((res = mp_mul_2d (&u, k, c)) != MP_OKAY) { - goto __V; + goto LBL_V; } c->sign = MP_ZPOS; res = MP_OKAY; -__V:mp_clear (&u); -__U:mp_clear (&v); +LBL_V:mp_clear (&u); +LBL_U:mp_clear (&v); return res; } #endif @@ -3556,24 +3562,24 @@ int mp_invmod_slow (mp_int * a, mp_int * b, mp_int * c) /* x = a, y = b */ if ((res = mp_copy (a, &x)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_copy (b, &y)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* 2. [modified] if x,y are both even then return an error! */ if (mp_iseven (&x) == 1 && mp_iseven (&y) == 1) { res = MP_VAL; - goto __ERR; + goto LBL_ERR; } /* 3. u=x, v=y, A=1, B=0, C=0,D=1 */ if ((res = mp_copy (&x, &u)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_copy (&y, &v)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } mp_set (&A, 1); mp_set (&D, 1); @@ -3583,24 +3589,24 @@ top: while (mp_iseven (&u) == 1) { /* 4.1 u = u/2 */ if ((res = mp_div_2 (&u, &u)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* 4.2 if A or B is odd then */ if (mp_isodd (&A) == 1 || mp_isodd (&B) == 1) { /* A = (A+y)/2, B = (B-x)/2 */ if ((res = mp_add (&A, &y, &A)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&B, &x, &B)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } /* A = A/2, B = B/2 */ if ((res = mp_div_2 (&A, &A)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_div_2 (&B, &B)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } @@ -3608,24 +3614,24 @@ top: while (mp_iseven (&v) == 1) { /* 5.1 v = v/2 */ if ((res = mp_div_2 (&v, &v)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* 5.2 if C or D is odd then */ if (mp_isodd (&C) == 1 || mp_isodd (&D) == 1) { /* C = (C+y)/2, D = (D-x)/2 */ if ((res = mp_add (&C, &y, &C)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&D, &x, &D)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } /* C = C/2, D = D/2 */ if ((res = mp_div_2 (&C, &C)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_div_2 (&D, &D)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } @@ -3633,28 +3639,28 @@ top: if (mp_cmp (&u, &v) != MP_LT) { /* u = u - v, A = A - C, B = B - D */ if ((res = mp_sub (&u, &v, &u)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&A, &C, &A)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&B, &D, &B)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } else { /* v - v - u, C = C - A, D = D - B */ if ((res = mp_sub (&v, &u, &v)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&C, &A, &C)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if ((res = mp_sub (&D, &B, &D)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } @@ -3667,27 +3673,27 @@ top: /* if v != 1 then there is no inverse */ if (mp_cmp_d (&v, 1) != MP_EQ) { res = MP_VAL; - goto __ERR; + goto LBL_ERR; } /* if its too low */ while (mp_cmp_d(&C, 0) == MP_LT) { if ((res = mp_add(&C, b, &C)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } /* too big */ while (mp_cmp_mag(&C, b) != MP_LT) { if ((res = mp_sub(&C, b, &C)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } } /* C is now the inverse */ mp_exch (&C, c); res = MP_OKAY; -__ERR:mp_clear_multi (&x, &y, &u, &v, &A, &B, &C, &D, NULL); +LBL_ERR:mp_clear_multi (&x, &y, &u, &v, &A, &B, &C, &D, NULL); return res; } #endif @@ -3856,13 +3862,13 @@ int mp_jacobi (mp_int * a, mp_int * p, int *c) } if ((res = mp_init (&p1)) != MP_OKAY) { - goto __A1; + goto LBL_A1; } /* divide out larger power of two */ k = mp_cnt_lsb(&a1); if ((res = mp_div_2d(&a1, k, &a1, NULL)) != MP_OKAY) { - goto __P1; + goto LBL_P1; } /* step 4. if e is even set s=1 */ @@ -3890,18 +3896,18 @@ int mp_jacobi (mp_int * a, mp_int * p, int *c) } else { /* n1 = n mod a1 */ if ((res = mp_mod (p, &a1, &p1)) != MP_OKAY) { - goto __P1; + goto LBL_P1; } if ((res = mp_jacobi (&p1, &a1, &r)) != MP_OKAY) { - goto __P1; + goto LBL_P1; } *c = s * r; } /* done */ res = MP_OKAY; -__P1:mp_clear (&p1); -__A1:mp_clear (&a1); +LBL_P1:mp_clear (&p1); +LBL_A1:mp_clear (&a1); return res; } #endif @@ -4227,20 +4233,20 @@ int mp_lcm (mp_int * a, mp_int * b, mp_int * c) /* t1 = get the GCD of the two inputs */ if ((res = mp_gcd (a, b, &t1)) != MP_OKAY) { - goto __T; + goto LBL_T; } /* divide the smallest by the GCD */ if (mp_cmp_mag(a, b) == MP_LT) { /* store quotient in t2 such that t2 * b is the LCM */ if ((res = mp_div(a, &t1, &t2, NULL)) != MP_OKAY) { - goto __T; + goto LBL_T; } res = mp_mul(b, &t2, c); } else { /* store quotient in t2 such that t2 * a is the LCM */ if ((res = mp_div(b, &t1, &t2, NULL)) != MP_OKAY) { - goto __T; + goto LBL_T; } res = mp_mul(a, &t2, c); } @@ -4248,7 +4254,7 @@ int mp_lcm (mp_int * a, mp_int * b, mp_int * c) /* fix the sign to positive */ c->sign = MP_ZPOS; -__T: +LBL_T: mp_clear_multi (&t1, &t2, NULL); return res; } @@ -4402,7 +4408,7 @@ mp_mod_2d (mp_int * a, int b, mp_int * c) } /* if the modulus is larger than the value than return */ - if (b > (int) (a->used * DIGIT_BIT)) { + if (b >= (int) (a->used * DIGIT_BIT)) { res = mp_copy (a, c); return res; } @@ -5085,11 +5091,11 @@ int mp_n_root (mp_int * a, mp_digit b, mp_int * c) } if ((res = mp_init (&t2)) != MP_OKAY) { - goto __T1; + goto LBL_T1; } if ((res = mp_init (&t3)) != MP_OKAY) { - goto __T2; + goto LBL_T2; } /* if a is negative fudge the sign but keep track */ @@ -5102,52 +5108,52 @@ int mp_n_root (mp_int * a, mp_digit b, mp_int * c) do { /* t1 = t2 */ if ((res = mp_copy (&t2, &t1)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } /* t2 = t1 - ((t1**b - a) / (b * t1**(b-1))) */ /* t3 = t1**(b-1) */ if ((res = mp_expt_d (&t1, b - 1, &t3)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } /* numerator */ /* t2 = t1**b */ if ((res = mp_mul (&t3, &t1, &t2)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } /* t2 = t1**b - a */ if ((res = mp_sub (&t2, a, &t2)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } /* denominator */ /* t3 = t1**(b-1) * b */ if ((res = mp_mul_d (&t3, b, &t3)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } /* t3 = (t1**b - a)/(b * t1**(b-1)) */ if ((res = mp_div (&t2, &t3, &t3, NULL)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } if ((res = mp_sub (&t1, &t3, &t2)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } } while (mp_cmp (&t1, &t2) != MP_EQ); /* result can be off by a few so check */ for (;;) { if ((res = mp_expt_d (&t1, b, &t2)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } if (mp_cmp (&t2, a) == MP_GT) { if ((res = mp_sub_d (&t1, 1, &t1)) != MP_OKAY) { - goto __T3; + goto LBL_T3; } } else { break; @@ -5165,9 +5171,9 @@ int mp_n_root (mp_int * a, mp_digit b, mp_int * c) res = MP_OKAY; -__T3:mp_clear (&t3); -__T2:mp_clear (&t2); -__T1:mp_clear (&t1); +LBL_T3:mp_clear (&t3); +LBL_T2:mp_clear (&t2); +LBL_T1:mp_clear (&t1); return res; } #endif @@ -5304,7 +5310,7 @@ int mp_prime_fermat (mp_int * a, mp_int * b, int *result) /* compute t = b**a mod a */ if ((err = mp_exptmod (b, a, a, &t)) != MP_OKAY) { - goto __T; + goto LBL_T; } /* is it equal to b? */ @@ -5313,7 +5319,7 @@ int mp_prime_fermat (mp_int * a, mp_int * b, int *result) } err = MP_OKAY; -__T:mp_clear (&t); +LBL_T:mp_clear (&t); return err; } #endif @@ -5352,8 +5358,8 @@ int mp_prime_is_divisible (mp_int * a, int *result) *result = MP_NO; for (ix = 0; ix < PRIME_SIZE; ix++) { - /* what is a mod __prime_tab[ix] */ - if ((err = mp_mod_d (a, __prime_tab[ix], &res)) != MP_OKAY) { + /* what is a mod LBL_prime_tab[ix] */ + if ((err = mp_mod_d (a, ltm_prime_tab[ix], &res)) != MP_OKAY) { return err; } @@ -5410,7 +5416,7 @@ int mp_prime_is_prime (mp_int * a, int t, int *result) /* is the input equal to one of the primes in the table? */ for (ix = 0; ix < PRIME_SIZE; ix++) { - if (mp_cmp_d(a, __prime_tab[ix]) == MP_EQ) { + if (mp_cmp_d(a, ltm_prime_tab[ix]) == MP_EQ) { *result = 1; return MP_OKAY; } @@ -5433,20 +5439,20 @@ int mp_prime_is_prime (mp_int * a, int t, int *result) for (ix = 0; ix < t; ix++) { /* set the prime */ - mp_set (&b, __prime_tab[ix]); + mp_set (&b, ltm_prime_tab[ix]); if ((err = mp_prime_miller_rabin (a, &b, &res)) != MP_OKAY) { - goto __B; + goto LBL_B; } if (res == MP_NO) { - goto __B; + goto LBL_B; } } /* passed the test */ *result = MP_YES; -__B:mp_clear (&b); +LBL_B:mp_clear (&b); return err; } #endif @@ -5496,12 +5502,12 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result) return err; } if ((err = mp_sub_d (&n1, 1, &n1)) != MP_OKAY) { - goto __N1; + goto LBL_N1; } /* set 2**s * r = n1 */ if ((err = mp_init_copy (&r, &n1)) != MP_OKAY) { - goto __N1; + goto LBL_N1; } /* count the number of least significant bits @@ -5511,15 +5517,15 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result) /* now divide n - 1 by 2**s */ if ((err = mp_div_2d (&r, s, &r, NULL)) != MP_OKAY) { - goto __R; + goto LBL_R; } /* compute y = b**r mod a */ if ((err = mp_init (&y)) != MP_OKAY) { - goto __R; + goto LBL_R; } if ((err = mp_exptmod (b, &r, a, &y)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } /* if y != 1 and y != n1 do */ @@ -5528,12 +5534,12 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result) /* while j <= s-1 and y != n1 */ while ((j <= (s - 1)) && mp_cmp (&y, &n1) != MP_EQ) { if ((err = mp_sqrmod (&y, a, &y)) != MP_OKAY) { - goto __Y; + goto LBL_Y; } /* if y == 1 then composite */ if (mp_cmp_d (&y, 1) == MP_EQ) { - goto __Y; + goto LBL_Y; } ++j; @@ -5541,15 +5547,15 @@ int mp_prime_miller_rabin (mp_int * a, mp_int * b, int *result) /* if y != n1 then composite */ if (mp_cmp (&y, &n1) != MP_EQ) { - goto __Y; + goto LBL_Y; } } /* probably prime now */ *result = MP_YES; -__Y:mp_clear (&y); -__R:mp_clear (&r); -__N1:mp_clear (&n1); +LBL_Y:mp_clear (&y); +LBL_R:mp_clear (&r); +LBL_N1:mp_clear (&n1); return err; } #endif @@ -5594,10 +5600,10 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) a->sign = MP_ZPOS; /* simple algo if a is less than the largest prime in the table */ - if (mp_cmp_d(a, __prime_tab[PRIME_SIZE-1]) == MP_LT) { + if (mp_cmp_d(a, ltm_prime_tab[PRIME_SIZE-1]) == MP_LT) { /* find which prime it is bigger than */ for (x = PRIME_SIZE - 2; x >= 0; x--) { - if (mp_cmp_d(a, __prime_tab[x]) != MP_LT) { + if (mp_cmp_d(a, ltm_prime_tab[x]) != MP_LT) { if (bbs_style == 1) { /* ok we found a prime smaller or * equal [so the next is larger] @@ -5605,17 +5611,17 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) * however, the prime must be * congruent to 3 mod 4 */ - if ((__prime_tab[x + 1] & 3) != 3) { + if ((ltm_prime_tab[x + 1] & 3) != 3) { /* scan upwards for a prime congruent to 3 mod 4 */ for (y = x + 1; y < PRIME_SIZE; y++) { - if ((__prime_tab[y] & 3) == 3) { - mp_set(a, __prime_tab[y]); + if ((ltm_prime_tab[y] & 3) == 3) { + mp_set(a, ltm_prime_tab[y]); return MP_OKAY; } } } } else { - mp_set(a, __prime_tab[x + 1]); + mp_set(a, ltm_prime_tab[x + 1]); return MP_OKAY; } } @@ -5653,7 +5659,7 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) /* generate the restable */ for (x = 1; x < PRIME_SIZE; x++) { - if ((err = mp_mod_d(a, __prime_tab[x], res_tab + x)) != MP_OKAY) { + if ((err = mp_mod_d(a, ltm_prime_tab[x], res_tab + x)) != MP_OKAY) { return err; } } @@ -5679,8 +5685,8 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) res_tab[x] += kstep; /* subtract the modulus [instead of using division] */ - if (res_tab[x] >= __prime_tab[x]) { - res_tab[x] -= __prime_tab[x]; + if (res_tab[x] >= ltm_prime_tab[x]) { + res_tab[x] -= ltm_prime_tab[x]; } /* set flag if zero */ @@ -5692,7 +5698,7 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) /* add the step */ if ((err = mp_add_d(a, step, a)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } /* if didn't pass sieve and step == MAX then skip test */ @@ -5702,9 +5708,9 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) /* is this prime? */ for (x = 0; x < t; x++) { - mp_set(&b, __prime_tab[t]); + mp_set(&b, ltm_prime_tab[t]); if ((err = mp_prime_miller_rabin(a, &b, &res)) != MP_OKAY) { - goto __ERR; + goto LBL_ERR; } if (res == MP_NO) { break; @@ -5717,7 +5723,7 @@ int mp_prime_next_prime(mp_int *a, int t, int bbs_style) } err = MP_OKAY; -__ERR: +LBL_ERR: mp_clear(&b); return err; } @@ -5828,7 +5834,7 @@ int mp_prime_random_ex(mp_int *a, int t, int size, int flags, ltm_prime_callback } /* calc the byte size */ - bsize = (size>>3)+(size&7?1:0); + bsize = (size>>3) + ((size&7)?1:0); /* we need a buffer of bsize bytes */ tmp = OPT_CAST(unsigned char) XMALLOC(bsize); @@ -5837,19 +5843,19 @@ int mp_prime_random_ex(mp_int *a, int t, int size, int flags, ltm_prime_callback } /* calc the maskAND value for the MSbyte*/ - maskAND = 0xFF >> (8 - (size & 7)); + maskAND = ((size&7) == 0) ? 0xFF : (0xFF >> (8 - (size & 7))); /* calc the maskOR_msb */ maskOR_msb = 0; - maskOR_msb_offset = (size - 2) >> 3; + maskOR_msb_offset = ((size&7)==1)?1:0; if (flags & LTM_PRIME_2MSB_ON) { maskOR_msb |= 1 << ((size - 2) & 7); } else if (flags & LTM_PRIME_2MSB_OFF) { maskAND &= ~(1 << ((size - 2) & 7)); - } + } /* get the maskOR_lsb */ - maskOR_lsb = 0; + maskOR_lsb = 1; if (flags & LTM_PRIME_BBS) { maskOR_lsb |= 3; } @@ -7996,7 +8002,7 @@ mp_zero (mp_int * a) * * Tom St Denis, tomstdenis@iahu.ca, http://math.libtomcrypt.org */ -const mp_digit __prime_tab[] = { +const mp_digit ltm_prime_tab[] = { 0x0002, 0x0003, 0x0005, 0x0007, 0x000B, 0x000D, 0x0011, 0x0013, 0x0017, 0x001D, 0x001F, 0x0025, 0x0029, 0x002B, 0x002F, 0x0035, 0x003B, 0x003D, 0x0043, 0x0047, 0x0049, 0x004F, 0x0053, 0x0059, @@ -8261,10 +8267,10 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) /* create mu, used for Barrett reduction */ if ((err = mp_init (&mu)) != MP_OKAY) { - goto __M; + goto LBL_M; } if ((err = mp_reduce_setup (&mu, P)) != MP_OKAY) { - goto __MU; + goto LBL_MU; } /* create M table @@ -8276,23 +8282,23 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) * computed though accept for M[0] and M[1] */ if ((err = mp_mod (G, P, &M[1])) != MP_OKAY) { - goto __MU; + goto LBL_MU; } /* compute the value at M[1<<(winsize-1)] by squaring * M[1] (winsize-1) times */ if ((err = mp_copy (&M[1], &M[1 << (winsize - 1)])) != MP_OKAY) { - goto __MU; + goto LBL_MU; } for (x = 0; x < (winsize - 1); x++) { if ((err = mp_sqr (&M[1 << (winsize - 1)], &M[1 << (winsize - 1)])) != MP_OKAY) { - goto __MU; + goto LBL_MU; } if ((err = mp_reduce (&M[1 << (winsize - 1)], P, &mu)) != MP_OKAY) { - goto __MU; + goto LBL_MU; } } @@ -8301,16 +8307,16 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) */ for (x = (1 << (winsize - 1)) + 1; x < (1 << winsize); x++) { if ((err = mp_mul (&M[x - 1], &M[1], &M[x])) != MP_OKAY) { - goto __MU; + goto LBL_MU; } if ((err = mp_reduce (&M[x], P, &mu)) != MP_OKAY) { - goto __MU; + goto LBL_MU; } } /* setup result */ if ((err = mp_init (&res)) != MP_OKAY) { - goto __MU; + goto LBL_MU; } mp_set (&res, 1); @@ -8350,10 +8356,10 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) /* if the bit is zero and mode == 1 then we square */ if (mode == 1 && y == 0) { if ((err = mp_sqr (&res, &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } continue; } @@ -8367,19 +8373,19 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) /* square first */ for (x = 0; x < winsize; x++) { if ((err = mp_sqr (&res, &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } /* then multiply */ if ((err = mp_mul (&res, &M[bitbuf], &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } /* empty window and reset */ @@ -8394,20 +8400,20 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) /* square then multiply if the bit is set */ for (x = 0; x < bitcpy; x++) { if ((err = mp_sqr (&res, &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } bitbuf <<= 1; if ((bitbuf & (1 << winsize)) != 0) { /* then multiply */ if ((err = mp_mul (&res, &M[1], &res)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } if ((err = mp_reduce (&res, P, &mu)) != MP_OKAY) { - goto __RES; + goto LBL_RES; } } } @@ -8415,9 +8421,9 @@ int s_mp_exptmod (mp_int * G, mp_int * X, mp_int * P, mp_int * Y) mp_exch (&res, Y); err = MP_OKAY; -__RES:mp_clear (&res); -__MU:mp_clear (&mu); -__M: +LBL_RES:mp_clear (&res); +LBL_MU:mp_clear (&mu); +LBL_M: mp_clear(&M[1]); for (x = 1<<(winsize-1); x < (1 << winsize); x++) { mp_clear (&M[x]); diff --git a/mpi_to_ltc_error.c b/src/misc/mpi/mpi_to_ltc_error.c similarity index 71% rename from mpi_to_ltc_error.c rename to src/misc/mpi/mpi_to_ltc_error.c index 015b1b2..0fa590d 100644 --- a/mpi_to_ltc_error.c +++ b/src/misc/mpi/mpi_to_ltc_error.c @@ -8,8 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file mpi_to_ltc_error.c + Convert MPI errors to LTC, Tom St Denis +*/ #ifdef MPI static const struct { @@ -20,7 +24,11 @@ static const struct { { MP_VAL , CRYPT_INVALID_ARG}, }; -/* convert a MPI error to a LTC error (Possibly the most powerful function ever! Oh wait... no) */ +/** + Convert a MPI error to a LTC error (Possibly the most powerful function ever! Oh wait... no) + @param err The error to convert + @return The equivalent LTC error code or CRYPT_ERROR if none found +*/ int mpi_to_ltc_error(int err) { int x; diff --git a/rand_prime.c b/src/misc/mpi/rand_prime.c similarity index 92% rename from rand_prime.c rename to src/misc/mpi/rand_prime.c index 4e9cdbd..c7d875c 100644 --- a/rand_prime.c +++ b/src/misc/mpi/rand_prime.c @@ -8,8 +8,12 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file rand_prime.c + Generate a random prime, Tom St Denis +*/ #ifdef MPI struct rng_data { @@ -27,7 +31,7 @@ int rand_prime(mp_int *N, long len, prng_state *prng, int wprng) struct rng_data rng; int type, err; - _ARGCHK(N != NULL); + LTC_ARGCHK(N != NULL); /* allow sizes between 2 and 256 bytes for a prime size */ if (len < 16 || len > 4096) { diff --git a/pkcs_5_1.c b/src/misc/pkcs5/pkcs_5_1.c similarity index 68% rename from pkcs_5_1.c rename to src/misc/pkcs5/pkcs_5_1.c index a98affa..7c0c805 100644 --- a/pkcs_5_1.c +++ b/src/misc/pkcs5/pkcs_5_1.c @@ -8,11 +8,24 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include +#include -/* PKCS #5, Algorithm #1 */ +/** + @file pkcs_5_1.c + PKCS #5, Algorithm #1, Tom St Denis +*/ #ifdef PKCS_5 - +/** + Execute PKCS #5 v1 + @param password The password (or key) + @param password_len The length of the password (octet) + @param salt The salt (or nonce) which is 8 octets long + @param iteration_count The PKCS #5 v1 iteration count + @param hash_idx The index of the hash desired + @param out [out] The destination for this algorithm + @param outlen [in/out] The max size and resulting size of the algorithm output + @return CRYPT_OK if successful +*/ int pkcs_5_alg1(const unsigned char *password, unsigned long password_len, const unsigned char *salt, int iteration_count, int hash_idx, @@ -23,10 +36,10 @@ int pkcs_5_alg1(const unsigned char *password, unsigned long password_len, hash_state *md; unsigned char *buf; - _ARGCHK(password != NULL); - _ARGCHK(salt != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(password != NULL); + LTC_ARGCHK(salt != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* test hash IDX */ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { @@ -48,23 +61,23 @@ int pkcs_5_alg1(const unsigned char *password, unsigned long password_len, /* hash initial password + salt */ if ((err = hash_descriptor[hash_idx].init(md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(md, password, password_len)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(md, salt, 8)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].done(md, buf)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } while (--iteration_count) { // code goes here. x = MAXBLOCKSIZE; if ((err = hash_memory(hash_idx, buf, hash_descriptor[hash_idx].hashsize, buf, &x)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } } @@ -74,8 +87,8 @@ int pkcs_5_alg1(const unsigned char *password, unsigned long password_len, } *outlen = x; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(buf, MAXBLOCKSIZE); zeromem(md, sizeof(hash_state)); #endif diff --git a/pkcs_5_2.c b/src/misc/pkcs5/pkcs_5_2.c similarity index 73% rename from pkcs_5_2.c rename to src/misc/pkcs5/pkcs_5_2.c index a58994f..57cbd80 100644 --- a/pkcs_5_2.c +++ b/src/misc/pkcs5/pkcs_5_2.c @@ -8,11 +8,26 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include +#include -/* PKCS #5, Algorithm #2 */ +/** + @file pkcs_5_2.c + PKCS #5, Algorithm #2, Tom St Denis +*/ #ifdef PKCS_5 +/** + Execute PKCS #5 v2 + @param password The input password (or key) + @param password_len The length of the password (octets) + @param salt The salt (or nonce) + @param salt_len The length of the salt (octets) + @param iteration_count # of iterations desired for PKCS #5 v2 [read specs for more] + @param hash_idx The index of the hash desired + @param out [out] The destination for this algorithm + @param outlen [in/out] The max size and resulting size of the algorithm output + @return CRYPT_OK if successful +*/ int pkcs_5_alg2(const unsigned char *password, unsigned long password_len, const unsigned char *salt, unsigned long salt_len, int iteration_count, int hash_idx, @@ -23,10 +38,10 @@ int pkcs_5_alg2(const unsigned char *password, unsigned long password_len, unsigned char *buf[2]; hmac_state *hmac; - _ARGCHK(password != NULL); - _ARGCHK(salt != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(password != NULL); + LTC_ARGCHK(salt != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* test hash IDX */ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { @@ -60,24 +75,24 @@ int pkcs_5_alg2(const unsigned char *password, unsigned long password_len, /* get PRF(P, S||int(blkno)) */ if ((err = hmac_init(hmac, hash_idx, password, password_len)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hmac_process(hmac, salt, salt_len)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hmac_process(hmac, buf[1], 4)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } x = MAXBLOCKSIZE; if ((err = hmac_done(hmac, buf[0], &x)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* now compute repeated and XOR it in buf[1] */ XMEMCPY(buf[1], buf[0], x); for (itts = 1; itts < iteration_count; ++itts) { if ((err = hmac_memory(hash_idx, password, password_len, buf[0], x, buf[0], &x)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } for (y = 0; y < x; y++) { buf[1][y] ^= buf[0][y]; @@ -93,8 +108,8 @@ int pkcs_5_alg2(const unsigned char *password, unsigned long password_len, *outlen = stored; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(buf[0], MAXBLOCKSIZE*2); zeromem(hmac, sizeof(hmac_state)); #endif diff --git a/src/misc/zeromem.c b/src/misc/zeromem.c new file mode 100644 index 0000000..92f5f37 --- /dev/null +++ b/src/misc/zeromem.c @@ -0,0 +1,29 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file zeromem.c + Zero a block of memory, Tom St Denis +*/ + +/** + Zero a block of memory + @param out The destination of the area to zero + @param outlen The length of the area to zero (octets) +*/ +void zeromem(void *out, size_t outlen) +{ + unsigned char *mem = (unsigned char *)out; + LTC_ARGCHK(out != NULL); + while (outlen-- > 0) + *mem++ = 0; +} diff --git a/cbc_decrypt.c b/src/modes/cbc/cbc_decrypt.c similarity index 75% rename from cbc_decrypt.c rename to src/modes/cbc/cbc_decrypt.c index 3f4958a..0343268 100644 --- a/cbc_decrypt.c +++ b/src/modes/cbc/cbc_decrypt.c @@ -8,24 +8,36 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file cbc_decrypt.c + CBC implementation, decrypt block, Tom St Denis +*/ #ifdef CBC +/** + CBC decrypt + @param ct Ciphertext + @param pt [out] Plaintext + @param cbc CBC state + @return CRYPT_OK if successful +*/ int cbc_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_CBC *cbc) { int x, err; unsigned char tmp[MAXBLOCKSIZE], tmp2[MAXBLOCKSIZE]; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(cbc != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(cbc != NULL); /* decrypt the block from ct into tmp */ if ((err = cipher_is_valid(cbc->cipher)) != CRYPT_OK) { return err; } - _ARGCHK(cipher_descriptor[cbc->cipher].ecb_decrypt != NULL); + LTC_ARGCHK(cipher_descriptor[cbc->cipher].ecb_decrypt != NULL); /* is blocklen valid? */ if (cbc->blocklen < 0 || cbc->blocklen > (int)sizeof(cbc->IV)) { @@ -46,7 +58,7 @@ int cbc_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_CBC *cbc) for (x = 0; x < cbc->blocklen; x++) { cbc->IV[x] = tmp2[x]; } - #ifdef CLEAN_STACK + #ifdef LTC_CLEAN_STACK zeromem(tmp, sizeof(tmp)); zeromem(tmp2, sizeof(tmp2)); #endif diff --git a/cbc_encrypt.c b/src/modes/cbc/cbc_encrypt.c similarity index 75% rename from cbc_encrypt.c rename to src/modes/cbc/cbc_encrypt.c index 8db5b5b..bd665de 100644 --- a/cbc_encrypt.c +++ b/src/modes/cbc/cbc_encrypt.c @@ -8,18 +8,31 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file cbc_encrypt.c + CBC implementation, encrypt block, Tom St Denis +*/ + #ifdef CBC +/** + CBC encrypt + @param pt Plaintext + @param ct [out] Ciphertext + @param cbc CBC state + @return CRYPT_OK if successful +*/ int cbc_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_CBC *cbc) { int x, err; unsigned char tmp[MAXBLOCKSIZE]; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(cbc != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(cbc != NULL); if ((err = cipher_is_valid(cbc->cipher)) != CRYPT_OK) { return err; @@ -43,7 +56,7 @@ int cbc_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_CBC *cbc) cbc->IV[x] = ct[x]; } - #ifdef CLEAN_STACK + #ifdef LTC_CLEAN_STACK zeromem(tmp, sizeof(tmp)); #endif return CRYPT_OK; diff --git a/cbc_getiv.c b/src/modes/cbc/cbc_getiv.c similarity index 59% rename from cbc_getiv.c rename to src/modes/cbc/cbc_getiv.c index 89356a0..86e4eb6 100644 --- a/cbc_getiv.c +++ b/src/modes/cbc/cbc_getiv.c @@ -8,16 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file cbc_getiv.c + CBC implementation, get IV, Tom St Denis +*/ #ifdef CBC +/** + Get the current initial vector + @param IV [out] The destination of the initial vector + @param len [in/out] The max size and resulting size of the initial vector + @param cbc The CBC state + @return CRYPT_OK if successful +*/ int cbc_getiv(unsigned char *IV, unsigned long *len, symmetric_CBC *cbc) { - _ARGCHK(IV != NULL); - _ARGCHK(len != NULL); - _ARGCHK(cbc != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(len != NULL); + LTC_ARGCHK(cbc != NULL); if ((unsigned long)cbc->blocklen > *len) { return CRYPT_BUFFER_OVERFLOW; } diff --git a/cbc_setiv.c b/src/modes/cbc/cbc_setiv.c similarity index 63% rename from cbc_setiv.c rename to src/modes/cbc/cbc_setiv.c index 9fa562b..034a516 100644 --- a/cbc_setiv.c +++ b/src/modes/cbc/cbc_setiv.c @@ -8,15 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" + +/** + @file cbc_setiv.c + CBC implementation, set IV, Tom St Denis +*/ -#include "mycrypt.h" #ifdef CBC +/** + Set an initial vector + @param IV The initial vector + @param len The length of the vector (in octets) + @param cbc The CBC state + @return CRYPT_OK if successful +*/ int cbc_setiv(const unsigned char *IV, unsigned long len, symmetric_CBC *cbc) { - _ARGCHK(IV != NULL); - _ARGCHK(cbc != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(cbc != NULL); if (len != (unsigned long)cbc->blocklen) { return CRYPT_INVALID_ARG; } diff --git a/cbc_start.c b/src/modes/cbc/cbc_start.c similarity index 62% rename from cbc_start.c rename to src/modes/cbc/cbc_start.c index f0d5fb6..df2e6a1 100644 --- a/cbc_start.c +++ b/src/modes/cbc/cbc_start.c @@ -8,18 +8,33 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file cbc_start.c + CBC implementation, start chain, Tom St Denis +*/ #ifdef CBC +/** + Initialize a CBC context + @param cipher The index of the cipher desired + @param IV The initial vector + @param key The secret key + @param keylen The length of the secret key (octets) + @param num_rounds Number of rounds in the cipher desired (0 for default) + @param cbc The CBC state to initialize + @return CRYPT_OK if successful +*/ int cbc_start(int cipher, const unsigned char *IV, const unsigned char *key, int keylen, int num_rounds, symmetric_CBC *cbc) { int x, err; - _ARGCHK(IV != NULL); - _ARGCHK(key != NULL); - _ARGCHK(cbc != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(cbc != NULL); /* bad param? */ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { diff --git a/cfb_decrypt.c b/src/modes/cfb/cfb_decrypt.c similarity index 74% rename from cfb_decrypt.c rename to src/modes/cfb/cfb_decrypt.c index 1e1d3c0..27930b0 100644 --- a/cfb_decrypt.c +++ b/src/modes/cfb/cfb_decrypt.c @@ -8,17 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file cfb_decrypt.c + CFB implementation, decrypt data, Tom St Denis +*/ #ifdef CFB +/** + CFB decrypt + @param ct Ciphertext + @param pt [out] Plaintext + @param len Length of ciphertext (octets) + @param cfb CFB state + @return CRYPT_OK if successful +*/ int cfb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CFB *cfb) { int err; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(cfb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(cfb != NULL); if ((err = cipher_is_valid(cfb->cipher)) != CRYPT_OK) { return err; diff --git a/cfb_encrypt.c b/src/modes/cfb/cfb_encrypt.c similarity index 74% rename from cfb_encrypt.c rename to src/modes/cfb/cfb_encrypt.c index 8016959..f6d39ae 100644 --- a/cfb_encrypt.c +++ b/src/modes/cfb/cfb_encrypt.c @@ -8,17 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file cfb_encrypt.c + CFB implementation, encrypt data, Tom St Denis +*/ #ifdef CFB +/** + CFB encrypt + @param pt Plaintext + @param ct [out] Ciphertext + @param len Length of plaintext (octets) + @param cfb CFB state + @return CRYPT_OK if successful +*/ int cfb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CFB *cfb) { int err; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(cfb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(cfb != NULL); if ((err = cipher_is_valid(cfb->cipher)) != CRYPT_OK) { return err; diff --git a/cfb_getiv.c b/src/modes/cfb/cfb_getiv.c similarity index 59% rename from cfb_getiv.c rename to src/modes/cfb/cfb_getiv.c index c54f70f..27720a8 100644 --- a/cfb_getiv.c +++ b/src/modes/cfb/cfb_getiv.c @@ -8,16 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file cfb_getiv.c + CFB implementation, get IV, Tom St Denis +*/ #ifdef CFB +/** + Get the current initial vector + @param IV [out] The destination of the initial vector + @param len [in/out] The max size and resulting size of the initial vector + @param cfb The CFB state + @return CRYPT_OK if successful +*/ int cfb_getiv(unsigned char *IV, unsigned long *len, symmetric_CFB *cfb) { - _ARGCHK(IV != NULL); - _ARGCHK(len != NULL); - _ARGCHK(cfb != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(len != NULL); + LTC_ARGCHK(cfb != NULL); if ((unsigned long)cfb->blocklen > *len) { return CRYPT_BUFFER_OVERFLOW; } diff --git a/cfb_setiv.c b/src/modes/cfb/cfb_setiv.c similarity index 70% rename from cfb_setiv.c rename to src/modes/cfb/cfb_setiv.c index ddbbe59..6745b2c 100644 --- a/cfb_setiv.c +++ b/src/modes/cfb/cfb_setiv.c @@ -8,17 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" - +/** + @file cfb_setiv.c + CFB implementation, set IV, Tom St Denis +*/ #ifdef CFB +/** + Set an initial vector + @param IV The initial vector + @param len The length of the vector (in octets) + @param cfb The CFB state + @return CRYPT_OK if successful +*/ int cfb_setiv(const unsigned char *IV, unsigned long len, symmetric_CFB *cfb) { int err; - _ARGCHK(IV != NULL); - _ARGCHK(cfb != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(cfb != NULL); if ((err = cipher_is_valid(cfb->cipher)) != CRYPT_OK) { return err; diff --git a/cfb_start.c b/src/modes/cfb/cfb_start.c similarity index 64% rename from cfb_start.c rename to src/modes/cfb/cfb_start.c index d471412..209e175 100644 --- a/cfb_start.c +++ b/src/modes/cfb/cfb_start.c @@ -8,18 +8,34 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file cfb_start.c + CFB implementation, start chain, Tom St Denis +*/ + #ifdef CFB +/** + Initialize a CFB context + @param cipher The index of the cipher desired + @param IV The initial vector + @param key The secret key + @param keylen The length of the secret key (octets) + @param num_rounds Number of rounds in the cipher desired (0 for default) + @param cfb The CFB state to initialize + @return CRYPT_OK if successful +*/ int cfb_start(int cipher, const unsigned char *IV, const unsigned char *key, int keylen, int num_rounds, symmetric_CFB *cfb) { int x, err; - _ARGCHK(IV != NULL); - _ARGCHK(key != NULL); - _ARGCHK(cfb != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(cfb != NULL); if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { return err; diff --git a/ctr_decrypt.c b/src/modes/ctr/ctr_decrypt.c similarity index 57% rename from ctr_decrypt.c rename to src/modes/ctr/ctr_decrypt.c index dce3a39..0277a43 100644 --- a/ctr_decrypt.c +++ b/src/modes/ctr/ctr_decrypt.c @@ -8,15 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ctr_decrypt.c + CTR implementation, decrypt data, Tom St Denis +*/ #ifdef CTR +/** + CTR decrypt + @param ct Ciphertext + @param pt [out] Plaintext + @param len Length of ciphertext (octets) + @param ctr CTR state + @return CRYPT_OK if successful +*/ int ctr_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_CTR *ctr) { - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(ctr != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(ctr != NULL); return ctr_encrypt(ct, pt, len, ctr); } diff --git a/ctr_encrypt.c b/src/modes/ctr/ctr_encrypt.c similarity index 82% rename from ctr_encrypt.c rename to src/modes/ctr/ctr_encrypt.c index 476de38..ca22554 100644 --- a/ctr_encrypt.c +++ b/src/modes/ctr/ctr_encrypt.c @@ -8,17 +8,31 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ctr_encrypt.c + CTR implementation, encrypt data, Tom St Denis +*/ + #ifdef CTR +/** + CTR encrypt + @param pt Plaintext + @param ct [out] Ciphertext + @param len Length of plaintext (octets) + @param ctr CTR state + @return CRYPT_OK if successful +*/ int ctr_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_CTR *ctr) { int x, err; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(ctr != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(ctr != NULL); if ((err = cipher_is_valid(ctr->cipher)) != CRYPT_OK) { return err; diff --git a/ctr_getiv.c b/src/modes/ctr/ctr_getiv.c similarity index 59% rename from ctr_getiv.c rename to src/modes/ctr/ctr_getiv.c index ab20491..c05ba21 100644 --- a/ctr_getiv.c +++ b/src/modes/ctr/ctr_getiv.c @@ -8,16 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file ctr_getiv.c + CTR implementation, get IV, Tom St Denis +*/ #ifdef CTR +/** + Get the current initial vector + @param IV [out] The destination of the initial vector + @param len [in/out] The max size and resulting size of the initial vector + @param ctr The CTR state + @return CRYPT_OK if successful +*/ int ctr_getiv(unsigned char *IV, unsigned long *len, symmetric_CTR *ctr) { - _ARGCHK(IV != NULL); - _ARGCHK(len != NULL); - _ARGCHK(ctr != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(len != NULL); + LTC_ARGCHK(ctr != NULL); if ((unsigned long)ctr->blocklen > *len) { return CRYPT_BUFFER_OVERFLOW; } diff --git a/ctr_setiv.c b/src/modes/ctr/ctr_setiv.c similarity index 71% rename from ctr_setiv.c rename to src/modes/ctr/ctr_setiv.c index f15ee22..c97d1d1 100644 --- a/ctr_setiv.c +++ b/src/modes/ctr/ctr_setiv.c @@ -8,17 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" - +/** + @file ctr_setiv.c + CTR implementation, set IV, Tom St Denis +*/ + #ifdef CTR +/** + Set an initial vector + @param IV The initial vector + @param len The length of the vector (in octets) + @param ctr The CTR state + @return CRYPT_OK if successful +*/ int ctr_setiv(const unsigned char *IV, unsigned long len, symmetric_CTR *ctr) { int err; - _ARGCHK(IV != NULL); - _ARGCHK(ctr != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(ctr != NULL); /* bad param? */ if ((err = cipher_is_valid(ctr->cipher)) != CRYPT_OK) { diff --git a/ctr_start.c b/src/modes/ctr/ctr_start.c similarity index 65% rename from ctr_start.c rename to src/modes/ctr/ctr_start.c index f752b65..fc0a104 100644 --- a/ctr_start.c +++ b/src/modes/ctr/ctr_start.c @@ -8,18 +8,34 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ctr_start.c + CTR implementation, start chain, Tom St Denis +*/ + #ifdef CTR +/** + Initialize a CTR context + @param cipher The index of the cipher desired + @param count The initial vector + @param key The secret key + @param keylen The length of the secret key (octets) + @param num_rounds Number of rounds in the cipher desired (0 for default) + @param ctr The CTR state to initialize + @return CRYPT_OK if successful +*/ int ctr_start(int cipher, const unsigned char *count, const unsigned char *key, int keylen, int num_rounds, symmetric_CTR *ctr) { int x, err; - _ARGCHK(count != NULL); - _ARGCHK(key != NULL); - _ARGCHK(ctr != NULL); + LTC_ARGCHK(count != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(ctr != NULL); /* bad param? */ if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { diff --git a/ecb_decrypt.c b/src/modes/ecb/ecb_decrypt.c similarity index 62% rename from ecb_decrypt.c rename to src/modes/ecb/ecb_decrypt.c index 4f23156..d60bad2 100644 --- a/ecb_decrypt.c +++ b/src/modes/ecb/ecb_decrypt.c @@ -8,22 +8,34 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ecb_decrypt.c + ECB implementation, decrypt block, Tom St Denis +*/ #ifdef ECB +/** + ECB decrypt + @param ct Ciphertext + @param pt [out] Plaintext + @param ecb ECB state + @return CRYPT_OK if successful +*/ int ecb_decrypt(const unsigned char *ct, unsigned char *pt, symmetric_ECB *ecb) { int err; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(ecb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(ecb != NULL); /* valid cipher? */ if ((err = cipher_is_valid(ecb->cipher)) != CRYPT_OK) { return err; } - _ARGCHK(cipher_descriptor[ecb->cipher].ecb_decrypt != NULL); + LTC_ARGCHK(cipher_descriptor[ecb->cipher].ecb_decrypt != NULL); cipher_descriptor[ecb->cipher].ecb_decrypt(ct, pt, &ecb->key); return CRYPT_OK; diff --git a/ecb_encrypt.c b/src/modes/ecb/ecb_encrypt.c similarity index 65% rename from ecb_encrypt.c rename to src/modes/ecb/ecb_encrypt.c index 51b7646..68b6e5d 100644 --- a/ecb_encrypt.c +++ b/src/modes/ecb/ecb_encrypt.c @@ -8,16 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ecb_encrypt.c + ECB implementation, encrypt a block, Tom St Denis +*/ #ifdef ECB +/** + ECB encrypt + @param pt Plaintext + @param ct [out] Ciphertext + @param ecb ECB state + @return CRYPT_OK if successful +*/ int ecb_encrypt(const unsigned char *pt, unsigned char *ct, symmetric_ECB *ecb) { int err; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(ecb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(ecb != NULL); if ((err = cipher_is_valid(ecb->cipher)) != CRYPT_OK) { return err; diff --git a/ecb_start.c b/src/modes/ecb/ecb_start.c similarity index 58% rename from ecb_start.c rename to src/modes/ecb/ecb_start.c index 073bbe9..c84b3c7 100644 --- a/ecb_start.c +++ b/src/modes/ecb/ecb_start.c @@ -8,15 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ecb_start.c + ECB implementation, start chain, Tom St Denis +*/ + #ifdef ECB +/** + Initialize a ECB context + @param cipher The index of the cipher desired + @param key The secret key + @param keylen The length of the secret key (octets) + @param num_rounds Number of rounds in the cipher desired (0 for default) + @param ecb The ECB state to initialize + @return CRYPT_OK if successful +*/ int ecb_start(int cipher, const unsigned char *key, int keylen, int num_rounds, symmetric_ECB *ecb) { int err; - _ARGCHK(key != NULL); - _ARGCHK(ecb != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(ecb != NULL); if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { return err; diff --git a/ofb_decrypt.c b/src/modes/ofb/ofb_decrypt.c similarity index 57% rename from ofb_decrypt.c rename to src/modes/ofb/ofb_decrypt.c index 9531969..732daf7 100644 --- a/ofb_decrypt.c +++ b/src/modes/ofb/ofb_decrypt.c @@ -8,15 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ofb_decrypt.c + OFB implementation, decrypt data, Tom St Denis +*/ #ifdef OFB +/** + OFB decrypt + @param ct Ciphertext + @param pt [out] Plaintext + @param len Length of ciphertext (octets) + @param ofb OFB state + @return CRYPT_OK if successful +*/ int ofb_decrypt(const unsigned char *ct, unsigned char *pt, unsigned long len, symmetric_OFB *ofb) { - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(ofb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(ofb != NULL); return ofb_encrypt(ct, pt, len, ofb); } diff --git a/ofb_encrypt.c b/src/modes/ofb/ofb_encrypt.c similarity index 73% rename from ofb_encrypt.c rename to src/modes/ofb/ofb_encrypt.c index d5d06f3..56a3647 100644 --- a/ofb_encrypt.c +++ b/src/modes/ofb/ofb_encrypt.c @@ -8,16 +8,29 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ofb_encrypt.c + OFB implementation, encrypt data, Tom St Denis +*/ #ifdef OFB +/** + OFB encrypt + @param pt Plaintext + @param ct [out] Ciphertext + @param len Length of plaintext (octets) + @param ofb OFB state + @return CRYPT_OK if successful +*/ int ofb_encrypt(const unsigned char *pt, unsigned char *ct, unsigned long len, symmetric_OFB *ofb) { int err; - _ARGCHK(pt != NULL); - _ARGCHK(ct != NULL); - _ARGCHK(ofb != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(ct != NULL); + LTC_ARGCHK(ofb != NULL); if ((err = cipher_is_valid(ofb->cipher)) != CRYPT_OK) { return err; } diff --git a/ofb_getiv.c b/src/modes/ofb/ofb_getiv.c similarity index 59% rename from ofb_getiv.c rename to src/modes/ofb/ofb_getiv.c index fee5768..7211d95 100644 --- a/ofb_getiv.c +++ b/src/modes/ofb/ofb_getiv.c @@ -8,16 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file ofb_getiv.c + OFB implementation, get IV, Tom St Denis +*/ #ifdef OFB +/** + Get the current initial vector + @param IV [out] The destination of the initial vector + @param len [in/out] The max size and resulting size of the initial vector + @param ofb The OFB state + @return CRYPT_OK if successful +*/ int ofb_getiv(unsigned char *IV, unsigned long *len, symmetric_OFB *ofb) { - _ARGCHK(IV != NULL); - _ARGCHK(len != NULL); - _ARGCHK(ofb != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(len != NULL); + LTC_ARGCHK(ofb != NULL); if ((unsigned long)ofb->blocklen > *len) { return CRYPT_BUFFER_OVERFLOW; } diff --git a/ofb_setiv.c b/src/modes/ofb/ofb_setiv.c similarity index 69% rename from ofb_setiv.c rename to src/modes/ofb/ofb_setiv.c index 6683bc7..af7b843 100644 --- a/ofb_setiv.c +++ b/src/modes/ofb/ofb_setiv.c @@ -8,17 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file ofb_setiv.c + OFB implementation, set IV, Tom St Denis +*/ #ifdef OFB +/** + Set an initial vector + @param IV The initial vector + @param len The length of the vector (in octets) + @param ofb The OFB state + @return CRYPT_OK if successful +*/ int ofb_setiv(const unsigned char *IV, unsigned long len, symmetric_OFB *ofb) { int err; - _ARGCHK(IV != NULL); - _ARGCHK(ofb != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(ofb != NULL); if ((err = cipher_is_valid(ofb->cipher)) != CRYPT_OK) { return err; diff --git a/ofb_start.c b/src/modes/ofb/ofb_start.c similarity index 61% rename from ofb_start.c rename to src/modes/ofb/ofb_start.c index 45fcc70..67dc2c6 100644 --- a/ofb_start.c +++ b/src/modes/ofb/ofb_start.c @@ -8,18 +8,34 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file ofb_start.c + OFB implementation, start chain, Tom St Denis +*/ + #ifdef OFB +/** + Initialize a OFB context + @param cipher The index of the cipher desired + @param IV The initial vector + @param key The secret key + @param keylen The length of the secret key (octets) + @param num_rounds Number of rounds in the cipher desired (0 for default) + @param ofb The OFB state to initialize + @return CRYPT_OK if successful +*/ int ofb_start(int cipher, const unsigned char *IV, const unsigned char *key, int keylen, int num_rounds, symmetric_OFB *ofb) { int x, err; - _ARGCHK(IV != NULL); - _ARGCHK(key != NULL); - _ARGCHK(ofb != NULL); + LTC_ARGCHK(IV != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(ofb != NULL); if ((err = cipher_is_valid(cipher)) != CRYPT_OK) { return err; diff --git a/der_decode_integer.c b/src/pk/asn1/der/der_decode_integer.c similarity index 82% rename from der_decode_integer.c rename to src/pk/asn1/der/der_decode_integer.c index 71ce1f6..08ec619 100644 --- a/der_decode_integer.c +++ b/src/pk/asn1/der/der_decode_integer.c @@ -8,22 +8,35 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file der_decode_integer.c + ASN.1 DER, decode an integer, Tom St Denis +*/ +#ifdef LTC_DER + /* decodes a DER INTEGER in [in]. You have to tell this function * how many bytes are available [inlen]. It will then attempt to * read the INTEGER. If all goes well it stores the number of bytes * read in [inlen] and the number in [num]. */ +/** + Read a mp_int integer + @param in The DER encoded data + @param inlen [in] Size of the in data, [out] number of bytes read + @param num The first mp_int to decode + @return CRYPT_OK if successful +*/ int der_decode_integer(const unsigned char *in, unsigned long *inlen, mp_int *num) { unsigned long tmplen, y, z; - _ARGCHK(num != NULL); - _ARGCHK(in != NULL); - _ARGCHK(inlen != NULL); + LTC_ARGCHK(num != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(inlen != NULL); /* save copy of max output size */ tmplen = *inlen; @@ -81,3 +94,5 @@ int der_decode_integer(const unsigned char *in, unsigned long *inlen, mp_int *nu return mpi_to_ltc_error(mp_read_unsigned_bin(num, (unsigned char *)in, y)); } } + +#endif diff --git a/der_encode_integer.c b/src/pk/asn1/der/der_encode_integer.c similarity index 81% rename from der_encode_integer.c rename to src/pk/asn1/der/der_encode_integer.c index b742dec..460eace 100644 --- a/der_encode_integer.c +++ b/src/pk/asn1/der/der_encode_integer.c @@ -8,18 +8,32 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file der_encode_integer.c + ASN.1 DER, encode an integer, Tom St Denis +*/ + + +#ifdef LTC_DER /* Exports a positive bignum as DER format (upto 2^32 bytes in size) */ +/** + Store a mp_int integer + @param num The first mp_int to encode + @param out [out] The destination for the DER encoded integers + @param outlen [in/out] The max size and resulting size of the DER encoded integers + @return CRYPT_OK if successful +*/ int der_encode_integer(mp_int *num, unsigned char *out, unsigned long *outlen) { unsigned long tmplen, x, y, z; int err, leading_zero; - _ARGCHK(num != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(num != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* find out how big this will be */ if ((err = der_length_integer(num, &tmplen)) != CRYPT_OK) { @@ -91,3 +105,5 @@ int der_encode_integer(mp_int *num, unsigned char *out, unsigned long *outlen) *outlen = tmplen; return CRYPT_OK; } + +#endif diff --git a/der_get_multi_integer.c b/src/pk/asn1/der/der_get_multi_integer.c similarity index 69% rename from der_get_multi_integer.c rename to src/pk/asn1/der/der_get_multi_integer.c index d2b83c5..e4d5c1b 100644 --- a/der_get_multi_integer.c +++ b/src/pk/asn1/der/der_get_multi_integer.c @@ -9,12 +9,28 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ #include -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file der_get_multi_integer.c + ASN.1 DER, read multiple integers, Tom St Denis +*/ + + +#ifdef LTC_DER /* will read multiple DER INTEGER encoded mp_ints from src * of upto [inlen] bytes. It will store the number of bytes * read back into [inlen]. */ +/** + Read multiple mp_int integers one after another + @param src The DER encoded integers + @param inlen [in] The length of the src buffer, [out] the amount of bytes read + @param num The first mp_int to decode + @param ... A NULL terminated list of mp_ints to decode + @return CRYPT_OK if successful +*/ int der_get_multi_integer(const unsigned char *src, unsigned long *inlen, mp_int *num, ...) { @@ -23,8 +39,8 @@ int der_get_multi_integer(const unsigned char *src, unsigned long *inlen, unsigned long wrote, len; int err; - _ARGCHK(src != NULL); - _ARGCHK(inlen != NULL); + LTC_ARGCHK(src != NULL); + LTC_ARGCHK(inlen != NULL); /* setup va list */ next = num; @@ -48,3 +64,4 @@ int der_get_multi_integer(const unsigned char *src, unsigned long *inlen, return CRYPT_OK; } +#endif diff --git a/der_length_integer.c b/src/pk/asn1/der/der_length_integer.c similarity index 72% rename from der_length_integer.c rename to src/pk/asn1/der/der_length_integer.c index 5291f82..ff9a394 100644 --- a/der_length_integer.c +++ b/src/pk/asn1/der/der_length_integer.c @@ -8,18 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file der_length_integer.c + ASN.1 DER, get length of encoding, Tom St Denis +*/ -/* Gets length of DER encoding of num */ +#ifdef LTC_DER +/** + Gets length of DER encoding of num + @param num The mp_int to get the size of + @param outlen [out] The length of the DER encoding for the given integer + @return CRYPT_OK if successful +*/ int der_length_integer(mp_int *num, unsigned long *outlen) { unsigned long z, len; int leading_zero; - _ARGCHK(num != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(num != NULL); + LTC_ARGCHK(outlen != NULL); /* we only need a leading zero if the msb of the first byte is one */ if ((mp_count_bits(num) & 7) == 7 || mp_iszero(num) == MP_YES) { @@ -52,3 +62,4 @@ int der_length_integer(mp_int *num, unsigned long *outlen) return CRYPT_OK; } +#endif diff --git a/der_put_multi_integer.c b/src/pk/asn1/der/der_put_multi_integer.c similarity index 56% rename from der_put_multi_integer.c rename to src/pk/asn1/der/der_put_multi_integer.c index e166e0b..44f5ef3 100644 --- a/der_put_multi_integer.c +++ b/src/pk/asn1/der/der_put_multi_integer.c @@ -9,13 +9,29 @@ * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ #include -#include "mycrypt.h" +#include "tomcrypt.h" -/* store multiple mp_ints in DER INTEGER format to the dst, will not +/** + @file der_put_multi_integer.c + ASN.1 DER, store multiple integers, Tom St Denis +*/ + + +#ifdef LTC_DER + +/* store multiple mp_ints in DER INTEGER format to the out, will not * overflow the length you give it [outlen] and store the number of * bytes used in [outlen] */ -int der_put_multi_integer(unsigned char *dst, unsigned long *outlen, +/** + Store multiple mp_int integers one after another + @param out [out] The destination for the DER encoded integers + @param outlen [in/out] The max size and resulting size of the DER encoded integers + @param num The first mp_int to encode + @param ... A NULL terminated list of mp_ints to encode + @return CRYPT_OK if successful +*/ +int der_put_multi_integer(unsigned char *out, unsigned long *outlen, mp_int *num, ...) { va_list args; @@ -23,8 +39,8 @@ int der_put_multi_integer(unsigned char *dst, unsigned long *outlen, unsigned long wrote, len; int err; - _ARGCHK(dst != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* setup va list */ next = num; @@ -33,12 +49,12 @@ int der_put_multi_integer(unsigned char *dst, unsigned long *outlen, va_start(args, num); while (next != NULL) { - if ((err = der_encode_integer(next, dst, outlen)) != CRYPT_OK) { + if ((err = der_encode_integer(next, out, outlen)) != CRYPT_OK) { va_end(args); return err; } wrote += *outlen; - dst += *outlen; + out += *outlen; len -= *outlen; *outlen = len; next = va_arg(args, mp_int*); @@ -47,3 +63,5 @@ int der_put_multi_integer(unsigned char *dst, unsigned long *outlen, *outlen = wrote; return CRYPT_OK; } + +#endif diff --git a/dh.c b/src/pk/dh/dh.c similarity index 83% rename from dh.c rename to src/pk/dh/dh.c index f2defb0..a70e594 100644 --- a/dh.c +++ b/src/pk/dh/dh.c @@ -8,11 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file dh.c + DH crypto, Tom St Denis +*/ + #ifdef MDH -/* max export size we'll encounter (smaller than this but lets round up a bit */ +/* max export size we'll encounter (smaller than this but lets round up a bit) */ #define DH_BUF_SIZE 1200 /* This holds the key settings. ***MUST*** be organized by size from smallest to largest. */ @@ -157,6 +162,10 @@ static int is_valid_idx(int n) return 1; } +/** + Test the DH sub-system (can take a while) + @return CRYPT_OK if successful +*/ int dh_test(void) { mp_int p, g, tmp; @@ -204,11 +213,16 @@ done: return err; } +/** + Get the min and max DH key sizes (octets) + @param low [out] The smallest key size supported + @param high [out] The largest key size supported +*/ void dh_sizes(int *low, int *high) { int x; - _ARGCHK(low != NULL); - _ARGCHK(high != NULL); + LTC_ARGCHK(low != NULL); + LTC_ARGCHK(high != NULL); *low = INT_MAX; *high = 0; for (x = 0; sets[x].size != 0; x++) { @@ -217,9 +231,14 @@ void dh_sizes(int *low, int *high) } } +/** + Returns the key size of a given DH key (octets) + @param key The DH key to get the size of + @return The size if valid or INT_MAX if not +*/ int dh_get_size(dh_key *key) { - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); if (is_valid_idx(key->idx) == 1) { return sets[key->idx].size; } else { @@ -227,6 +246,14 @@ int dh_get_size(dh_key *key) } } +/** + Make a DH key [private key pair] + @param prng An active PRNG state + @param wprng The index for the PRNG you desire to use + @param keysize The key size (octets) desired + @param key [out] Where the newly created DH key will be stored + @return CRYPT_OK if successful, note: on error all allocated memory will be freed automatically. +*/ int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key) { unsigned char *buf; @@ -234,7 +261,7 @@ int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key) mp_int p, g; int err; - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); /* good prng? */ if ((err = prng_is_valid(wprng)) != CRYPT_OK) { @@ -289,7 +316,7 @@ error: error2: mp_clear_multi(&key->x, &key->y, NULL); done: -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, keysize); #endif mp_clear_multi(&p, &g, NULL); @@ -297,20 +324,32 @@ done: return err; } +/** + Free the allocated ram for a DH key + @param key The key which you wish to free +*/ void dh_free(dh_key *key) { - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); mp_clear_multi(&key->x, &key->y, NULL); } +/** + Export a DH key to a binary packet + @param out [out] The destination for the key + @param outlen [in/out] The max size and resulting size of the DH key + @param type Which type of key (PK_PRIVATE or PK_PUBLIC) + @param key The key you wish to export + @return CRYPT_OK if successful +*/ int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key) { unsigned long y, z; int err; - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* can we store the static header? */ if (*outlen < (PACKET_SIZE + 2)) { @@ -344,13 +383,20 @@ int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key) return CRYPT_OK; } +/** + Import a DH key from a binary packet + @param in The packet to read + @param inlen The length of the input packet + @param key [out] Where to import the key to + @return CRYPT_OK if successful, on error all allocated memory is freed automatically +*/ int dh_import(const unsigned char *in, unsigned long inlen, dh_key *key) { unsigned long x, y, s; int err; - _ARGCHK(in != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(key != NULL); /* make sure valid length */ if ((2+PACKET_SIZE) > inlen) { @@ -413,6 +459,14 @@ error: return err; } +/** + Create a DH shared secret. + @param private_key The private DH key in the pair + @param public_key The public DH key in the pair + @param out [out] The destination of the shared data + @param outlen [in/out] The max size and resulting size of the shared data. + @return CRYPT_OK if successful +*/ int dh_shared_secret(dh_key *private_key, dh_key *public_key, unsigned char *out, unsigned long *outlen) { @@ -420,10 +474,10 @@ int dh_shared_secret(dh_key *private_key, dh_key *public_key, unsigned long x; int err; - _ARGCHK(private_key != NULL); - _ARGCHK(public_key != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(private_key != NULL); + LTC_ARGCHK(public_key != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* types valid? */ if (private_key->type != PK_PRIVATE) { diff --git a/dh_sys.c b/src/pk/dh/dh_sys.c similarity index 74% rename from dh_sys.c rename to src/pk/dh/dh_sys.c index e0439c3..0596b37 100644 --- a/dh_sys.c +++ b/src/pk/dh/dh_sys.c @@ -8,20 +8,38 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen, - unsigned char *out, unsigned long *len, + +/** + @file dh_sys.c + DH Crypto, Tom St Denis +*/ + +/** + Encrypt a short symmetric key with a public DH key + @param in The symmetric key to encrypt + @param inlen The length of the key (octets) + @param out [out] The ciphertext + @param outlen [in/out] The max size and resulting size of the ciphertext + @param prng An active PRNG state + @param wprng The index of the PRNG desired + @param hash The index of the hash desired (must produce a digest of size >= the size of the plaintext) + @param key The public key you wish to encrypt with. + @return CRYPT_OK if successful +*/ +int dh_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, prng_state *prng, int wprng, int hash, dh_key *key) { unsigned char *pub_expt, *dh_shared, *skey; - dh_key pubkey; + dh_key pubkey; unsigned long x, y, z, hashsize, pubkeysize; - int err; + int err; - _ARGCHK(inkey != NULL); - _ARGCHK(out != NULL); - _ARGCHK(len != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* check that wprng/hash are not invalid */ if ((err = prng_is_valid(wprng)) != CRYPT_OK) { @@ -32,7 +50,7 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen, return err; } - if (keylen > hash_descriptor[hash].hashsize) { + if (inlen > hash_descriptor[hash].hashsize) { return CRYPT_INVALID_HASH; } @@ -55,20 +73,20 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen, /* make a random key and export the public copy */ if ((err = dh_make_key(prng, wprng, dh_get_size(key), &pubkey)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } pubkeysize = DH_BUF_SIZE; if ((err = dh_export(pub_expt, &pubkeysize, PK_PUBLIC, &pubkey)) != CRYPT_OK) { dh_free(&pubkey); - goto __ERR; + goto LBL_ERR; } /* now check if the out buffer is big enough */ - if (*len < (1 + 4 + 4 + PACKET_SIZE + pubkeysize + keylen)) { + if (*outlen < (1 + 4 + 4 + PACKET_SIZE + pubkeysize + inlen)) { dh_free(&pubkey); err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* make random key */ @@ -77,13 +95,13 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen, x = DH_BUF_SIZE; if ((err = dh_shared_secret(&pubkey, key, dh_shared, &x)) != CRYPT_OK) { dh_free(&pubkey); - goto __ERR; + goto LBL_ERR; } dh_free(&pubkey); z = MAXBLOCKSIZE; if ((err = hash_memory(hash, dh_shared, x, skey, &z)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* store header */ @@ -103,17 +121,17 @@ int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen, } /* Store the encrypted key */ - STORE32L(keylen, out+y); + STORE32L(inlen, out+y); y += 4; - for (x = 0; x < keylen; x++, y++) { - out[y] = skey[x] ^ inkey[x]; + for (x = 0; x < inlen; x++, y++) { + out[y] = skey[x] ^ in[x]; } - *len = y; + *outlen = y; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK /* clean up */ zeromem(pub_expt, DH_BUF_SIZE); zeromem(dh_shared, DH_BUF_SIZE); @@ -126,19 +144,28 @@ __ERR: return err; } +/** + Decrypt a DH encrypted symmetric key + @param in The DH encrypted packet + @param inlen The length of the DH encrypted packet + @param out The plaintext + @param outlen [in/out] The max size and resulting size of the plaintext + @param key The private DH key corresponding to the public key that encrypted the plaintext + @return CRYPT_OK if successful +*/ int dh_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, + unsigned char *out, unsigned long *outlen, dh_key *key) { unsigned char *shared_secret, *skey; - unsigned long x, y, z,hashsize, keysize; - int hash, err; - dh_key pubkey; + unsigned long x, y, z, hashsize, keysize; + int hash, err; + dh_key pubkey; - _ARGCHK(in != NULL); - _ARGCHK(outkey != NULL); - _ARGCHK(keylen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* right key type? */ if (key->type != PK_PRIVATE) { @@ -161,14 +188,14 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen, /* check if initial header should fit */ if (inlen < PACKET_SIZE+1+4+4) { err = CRYPT_INVALID_PACKET; - goto __ERR; + goto LBL_ERR; } else { inlen -= PACKET_SIZE+1+4+4; } /* is header correct? */ if ((err = packet_valid_header((unsigned char *)in, PACKET_SECT_DH, PACKET_SUB_ENC_KEY)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* now lets get the hash name */ @@ -176,7 +203,7 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen, hash = find_hash_id(in[y++]); if (hash == -1) { err = CRYPT_INVALID_HASH; - goto __ERR; + goto LBL_ERR; } /* common values */ @@ -188,14 +215,14 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen, /* now check if the imported key will fit */ if (inlen < x) { err = CRYPT_INVALID_PACKET; - goto __ERR; + goto LBL_ERR; } else { inlen -= x; } y += 4; if ((err = dh_import(in+y, x, &pubkey)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } y += x; @@ -203,41 +230,41 @@ int dh_decrypt_key(const unsigned char *in, unsigned long inlen, x = DH_BUF_SIZE; if ((err = dh_shared_secret(key, &pubkey, shared_secret, &x)) != CRYPT_OK) { dh_free(&pubkey); - goto __ERR; + goto LBL_ERR; } dh_free(&pubkey); z = MAXBLOCKSIZE; if ((err = hash_memory(hash, shared_secret, x, skey, &z)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* load in the encrypted key */ LOAD32L(keysize, in+y); - /* will the outkey fit as part of the input */ + /* will the out fit as part of the input */ if (inlen < keysize) { err = CRYPT_INVALID_PACKET; - goto __ERR; + goto LBL_ERR; } else { inlen -= keysize; } - if (keysize > *keylen) { + if (keysize > *outlen) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } y += 4; - *keylen = keysize; + *outlen = keysize; for (x = 0; x < keysize; x++, y++) { - outkey[x] = skey[x] ^ in[y]; + out[x] = skey[x] ^ in[y]; } err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(shared_secret, DH_BUF_SIZE); zeromem(skey, MAXBLOCKSIZE); #endif @@ -266,19 +293,31 @@ __ERR: 2. Compare against g^M mod p [based on input hash]. 3. If result of #2 == result of #1 then signature valid */ + +/** + Sign a message digest using a DH private key + @param in The data to sign + @param inlen The length of the input (octets) + @param out [out] The destination of the signature + @param outlen [in/out] The max size and resulting size of the output + @param prng An active PRNG state + @param wprng The index of the PRNG desired + @param key A private DH key + @return CRYPT_OK if successful +*/ int dh_sign_hash(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen, prng_state *prng, int wprng, dh_key *key) { - mp_int a, b, k, m, g, p, p1, tmp; + mp_int a, b, k, m, g, p, p1, tmp; unsigned char *buf; - unsigned long x, y; - int err; + unsigned long x, y; + int err; - _ARGCHK(in != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* check parameters */ if (key->type != PK_PRIVATE) { @@ -304,22 +343,18 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen, if (prng_descriptor[wprng].read(buf, sets[key->idx].size, prng) != (unsigned long)(sets[key->idx].size)) { err = CRYPT_ERROR_READPRNG; - goto __ERR; + goto LBL_ERR; } /* init bignums */ if ((err = mp_init_multi(&a, &b, &k, &m, &p, &g, &p1, &tmp, NULL)) != MP_OKAY) { err = mpi_to_ltc_error(err); - goto __ERR; + goto LBL_ERR; } /* load k and m */ if ((err = mp_read_unsigned_bin(&m, (unsigned char *)in, inlen)) != MP_OKAY) { goto error; } -#ifdef FAST_PK - if ((err = mp_read_unsigned_bin(&k, buf, MIN(32,sets[key->idx].size))) != MP_OKAY) { goto error; } -#else if ((err = mp_read_unsigned_bin(&k, buf, sets[key->idx].size)) != MP_OKAY) { goto error; } -#endif /* load g, p and p1 */ if ((err = mp_read_radix(&g, sets[key->idx].base, 64)) != MP_OKAY) { goto error; } @@ -339,7 +374,7 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen, /* check for overflow */ if ((unsigned long)(PACKET_SIZE + 4 + 4 + mp_unsigned_bin_size(&a) + mp_unsigned_bin_size(&b)) > *outlen) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* store header */ @@ -359,7 +394,7 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen, /* check if size too big */ if (*outlen < y) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* store header */ @@ -367,10 +402,10 @@ int dh_sign_hash(const unsigned char *in, unsigned long inlen, *outlen = y; err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; error: err = mpi_to_ltc_error(err); -__ERR: +LBL_ERR: mp_clear_multi(&tmp, &p1, &g, &p, &m, &k, &b, &a, NULL); XFREE(buf); @@ -379,19 +414,28 @@ __ERR: } -/* verify the signature in sig of the given hash */ +/** + Verify the signature given + @param sig The signature + @param siglen The length of the signature (octets) + @param hash The hash that was signed + @param hashlen The length of the hash (octets) + @param stat [out] Result of signature comparison, 1==valid, 0==invalid + @param key The public DH key that signed the hash + @return CRYPT_OK if succsessful (even if signature is invalid) +*/ int dh_verify_hash(const unsigned char *sig, unsigned long siglen, const unsigned char *hash, unsigned long hashlen, int *stat, dh_key *key) { - mp_int a, b, p, g, m, tmp; + mp_int a, b, p, g, m, tmp; unsigned long x, y; - int err; + int err; - _ARGCHK(sig != NULL); - _ARGCHK(hash != NULL); - _ARGCHK(stat != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(sig != NULL); + LTC_ARGCHK(hash != NULL); + LTC_ARGCHK(stat != NULL); + LTC_ARGCHK(key != NULL); /* default to invalid */ *stat = 0; diff --git a/dsa_export.c b/src/pk/dsa/dsa_export.c similarity index 72% rename from dsa_export.c rename to src/pk/dsa/dsa_export.c index 995b1cf..35c16fe 100644 --- a/dsa_export.c +++ b/src/pk/dsa/dsa_export.c @@ -8,18 +8,31 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file dsa_export.c + DSA implementation, export key, Tom St Denis +*/ #ifdef MDSA +/** + Export a DSA key to a binary packet + @param out [out] Where to store the packet + @param outlen [in/out] The max size and resulting size of the packet + @param type The type of key to export (PK_PRIVATE or PK_PUBLIC) + @param key The key to export + @return CRYPT_OK if successful +*/ int dsa_export(unsigned char *out, unsigned long *outlen, int type, dsa_key *key) { unsigned long y, z; int err; - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* can we store the static header? */ if (*outlen < (PACKET_SIZE + 1 + 2)) { diff --git a/dsa_free.c b/src/pk/dsa/dsa_free.c similarity index 69% rename from dsa_free.c rename to src/pk/dsa/dsa_free.c index c451951..d8d3ddf 100644 --- a/dsa_free.c +++ b/src/pk/dsa/dsa_free.c @@ -8,13 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file dsa_free.c + DSA implementation, free a DSA key, Tom St Denis +*/ #ifdef MDSA +/** + Free a DSA key + @param key The key to free from memory +*/ void dsa_free(dsa_key *key) { - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); mp_clear_multi(&key->g, &key->q, &key->p, &key->x, &key->y, NULL); } diff --git a/dsa_import.c b/src/pk/dsa/dsa_import.c similarity index 74% rename from dsa_import.c rename to src/pk/dsa/dsa_import.c index 429876d..73c2a55 100644 --- a/dsa_import.c +++ b/src/pk/dsa/dsa_import.c @@ -8,17 +8,29 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file dsa_import.c + DSA implementation, import a DSA key, Tom St Denis +*/ #ifdef MDSA +/** + Import a DSA key + @param in The binary packet to import from + @param inlen The length of the binary packet + @param key [out] Where to store the imported key + @return CRYPT_OK if successful, upon error this function will free all allocated memory +*/ int dsa_import(const unsigned char *in, unsigned long inlen, dsa_key *key) { unsigned long x, y; - int err; + int err; - _ARGCHK(in != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(key != NULL); /* check length */ if ((1+2+PACKET_SIZE) > inlen) { diff --git a/dsa_make_key.c b/src/pk/dsa/dsa_make_key.c similarity index 85% rename from dsa_make_key.c rename to src/pk/dsa/dsa_make_key.c index 09953a2..d5dd889 100644 --- a/dsa_make_key.c +++ b/src/pk/dsa/dsa_make_key.c @@ -8,17 +8,31 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file dsa_make_key.c + DSA implementation, generate a DSA key, Tom St Denis +*/ #ifdef MDSA +/** + Create a DSA key + @param prng An active PRNG state + @param wprng The index of the PRNG desired + @param group_size Size of the multiplicative group (octets) + @param modulus_size Size of the modulus (octets) + @param key [out] Where to store the created key + @return CRYPT_OK if successful, upon error this function will free all allocated memory +*/ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, dsa_key *key) { mp_int tmp, tmp2; int err, res; unsigned char *buf; - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); /* check prng */ if ((err = prng_is_valid(wprng)) != CRYPT_OK) { @@ -40,11 +54,11 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, /* init mp_ints */ if ((err = mp_init_multi(&tmp, &tmp2, &key->g, &key->q, &key->p, &key->x, &key->y, NULL)) != MP_OKAY) { err = mpi_to_ltc_error(err); - goto __ERR; + goto LBL_ERR; } /* make our prime q */ - if ((err = rand_prime(&key->q, group_size*8, prng, wprng)) != CRYPT_OK) { goto __ERR; } + if ((err = rand_prime(&key->q, group_size*8, prng, wprng)) != CRYPT_OK) { goto LBL_ERR; } /* double q */ if ((err = mp_mul_2(&key->q, &tmp)) != MP_OKAY) { goto error; } @@ -52,7 +66,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, /* now make a random string and multply it against q */ if (prng_descriptor[wprng].read(buf+1, modulus_size - group_size, prng) != (unsigned long)(modulus_size - group_size)) { err = CRYPT_ERROR_READPRNG; - goto __ERR; + goto LBL_ERR; } /* force magnitude */ @@ -67,7 +81,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, /* now loop until p is prime */ for (;;) { - if ((err = is_prime(&key->p, &res)) != CRYPT_OK) { goto __ERR; } + if ((err = is_prime(&key->p, &res)) != CRYPT_OK) { goto LBL_ERR; } if (res == MP_YES) break; /* add 2q to p and 2 to tmp2 */ @@ -92,7 +106,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, do { if (prng_descriptor[wprng].read(buf, group_size, prng) != (unsigned long)group_size) { err = CRYPT_ERROR_READPRNG; - goto __ERR; + goto LBL_ERR; } if ((err = mp_read_unsigned_bin(&key->x, buf, group_size)) != MP_OKAY) { goto error; } } while (mp_cmp_d(&key->x, 1) != MP_GT); @@ -108,7 +122,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, if ((err = mp_shrink(&key->x)) != MP_OKAY) { goto error; } if ((err = mp_shrink(&key->y)) != MP_OKAY) { goto error; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, MDSA_DELTA); #endif @@ -116,7 +130,7 @@ int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, goto done; error: err = mpi_to_ltc_error(err); -__ERR: +LBL_ERR: mp_clear_multi(&key->g, &key->q, &key->p, &key->x, &key->y, NULL); done: mp_clear_multi(&tmp, &tmp2, NULL); diff --git a/dsa_sign_hash.c b/src/pk/dsa/dsa_sign_hash.c similarity index 73% rename from dsa_sign_hash.c rename to src/pk/dsa/dsa_sign_hash.c index c790f24..38ae121 100644 --- a/dsa_sign_hash.c +++ b/src/pk/dsa/dsa_sign_hash.c @@ -8,23 +8,39 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file dsa_sign_hash.c + DSA implementation, sign a hash, Tom St Denis +*/ #ifdef MDSA +/** + Sign a hash with DSA + @param in The hash to sign + @param inlen The length of the hash to sign + @param out [out] Where to store the signature + @param outlen [in/out] The max size and resulting size of the signature + @param prng An active PRNG state + @param wprng The index of the PRNG desired + @param key A private DSA key + @return CRYPT_OK if successful +*/ int dsa_sign_hash(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen, prng_state *prng, int wprng, dsa_key *key) { mp_int k, kinv, tmp, r, s; unsigned char *buf; - int err, y; - unsigned long len; + int err; + unsigned long out1, out2; - _ARGCHK(in != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); if ((err = prng_is_valid(wprng)) != CRYPT_OK) { return err; @@ -52,7 +68,7 @@ retry: /* gen random k */ if (prng_descriptor[wprng].read(buf, key->qord, prng) != (unsigned long)key->qord) { err = CRYPT_ERROR_READPRNG; - goto __ERR; + goto LBL_ERR; } /* read k */ @@ -85,44 +101,22 @@ retry: /* now store em both */ /* first check that we have enough room */ - if (*outlen < (unsigned long)(PACKET_SIZE + 4 + mp_unsigned_bin_size(&s) + mp_unsigned_bin_size(&r))) { + if ((err = der_length_integer(&s, &out1)) != CRYPT_OK) { goto LBL_ERR; } + if ((err = der_length_integer(&r, &out2)) != CRYPT_OK) { goto LBL_ERR; } + if (*outlen < (out1+out2)) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } - /* packet header */ - packet_store_header(out, PACKET_SECT_DSA, PACKET_SUB_SIGNED); - y = PACKET_SIZE; - - /* store length of r */ - len = mp_unsigned_bin_size(&r); - out[y++] = (len>>8)&255; - out[y++] = len&255; - - /* store r */ - if ((err = mp_to_unsigned_bin(&r, out+y)) != MP_OKAY) { goto error; } - y += len; - - /* store length of s */ - len = mp_unsigned_bin_size(&s); - out[y++] = (len>>8)&255; - out[y++] = len&255; - - /* store s */ - if ((err = mp_to_unsigned_bin(&s, out+y)) != MP_OKAY) { goto error; } - y += len; - - /* reset size */ - *outlen = y; - - err = CRYPT_OK; - goto __ERR; + /* store ints */ + err = der_put_multi_integer(out, outlen, &r, &s, NULL); + goto LBL_ERR; error: err = mpi_to_ltc_error(err); -__ERR: +LBL_ERR: mp_clear_multi(&k, &kinv, &r, &s, &tmp, NULL); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(buf, MDSA_MAX_GROUP); #endif XFREE(buf); diff --git a/dsa_verify_hash.c b/src/pk/dsa/dsa_verify_hash.c similarity index 62% rename from dsa_verify_hash.c rename to src/pk/dsa/dsa_verify_hash.c index 745cd7c..391cc24 100644 --- a/dsa_verify_hash.c +++ b/src/pk/dsa/dsa_verify_hash.c @@ -8,67 +8,60 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file dsa_verify_hash.c + DSA implementation, verify a signature, Tom St Denis +*/ + #ifdef MDSA +/** + Verify a DSA signature + @param sig The signature + @param siglen The length of the signature (octets) + @param hash The hash that was signed + @param hashlen The length of the hash that was signed + @param stat [out] The result of the signature verification, 1==valid, 0==invalid + @param key The corresponding public DH key + @return CRYPT_OK if successful (even if the signature is invalid) +*/ int dsa_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *hash, unsigned long inlen, + const unsigned char *hash, unsigned long hashlen, int *stat, dsa_key *key) { - mp_int r, s, w, v, u1, u2; - unsigned long x, y; - int err; + mp_int r, s, w, v, u1, u2; + int err; - _ARGCHK(sig != NULL); - _ARGCHK(hash != NULL); - _ARGCHK(stat != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(sig != NULL); + LTC_ARGCHK(hash != NULL); + LTC_ARGCHK(stat != NULL); + LTC_ARGCHK(key != NULL); /* default to invalid signature */ *stat = 0; - if (siglen < PACKET_SIZE+2+2) { - return CRYPT_INVALID_PACKET; - } - - /* is the message format correct? */ - if ((err = packet_valid_header((unsigned char *)sig, PACKET_SECT_DSA, PACKET_SUB_SIGNED)) != CRYPT_OK) { - return err; - } - - /* skip over header */ - y = PACKET_SIZE; - /* init our variables */ if ((err = mp_init_multi(&r, &s, &w, &v, &u1, &u2, NULL)) != MP_OKAY) { return mpi_to_ltc_error(err); } /* read in r followed by s */ - x = ((unsigned)sig[y]<<8)|((unsigned)sig[y+1]); - y += 2; - if (y + x > siglen) { + if ((err = der_get_multi_integer(sig, &siglen, &r, &s, NULL)) != CRYPT_OK) { goto done; } + + /* neither r or s can be null */ + if (mp_iszero(&r) == MP_YES || mp_iszero(&s) == MP_YES) { err = CRYPT_INVALID_PACKET; goto done; } - if ((err = mp_read_unsigned_bin(&r, (unsigned char *)sig+y, x)) != MP_OKAY) { goto error; } - y += x; - - /* load s */ - x = ((unsigned)sig[y]<<8)|((unsigned)sig[y+1]); - y += 2; - if (y + x > siglen) { - err = CRYPT_INVALID_PACKET; - goto done; - } - if ((err = mp_read_unsigned_bin(&s, (unsigned char *)sig+y, x)) != MP_OKAY) { goto error; } - + /* w = 1/s mod q */ if ((err = mp_invmod(&s, &key->q, &w)) != MP_OKAY) { goto error; } /* u1 = m * w mod q */ - if ((err = mp_read_unsigned_bin(&u1, (unsigned char *)hash, inlen)) != MP_OKAY) { goto error; } + if ((err = mp_read_unsigned_bin(&u1, (unsigned char *)hash, hashlen)) != MP_OKAY) { goto error; } if ((err = mp_mulmod(&u1, &w, &key->q, &u1)) != MP_OKAY) { goto error; } /* u2 = r*w mod q */ diff --git a/dsa_verify_key.c b/src/pk/dsa/dsa_verify_key.c similarity index 85% rename from dsa_verify_key.c rename to src/pk/dsa/dsa_verify_key.c index c17bab8..3039668 100644 --- a/dsa_verify_key.c +++ b/src/pk/dsa/dsa_verify_key.c @@ -8,18 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file dsa_verify_key.c + DSA implementation, verify a key, Tom St Denis +*/ #ifdef MDSA +/** + Verify a DSA key for validity + @param key The key to verify + @param stat [out] Result of test, 1==valid, 0==invalid + @return CRYPT_OK if successful +*/ int dsa_verify_key(dsa_key *key, int *stat) { mp_int tmp, tmp2; - int res, err; + int res, err; - _ARGCHK(key != NULL); - _ARGCHK(stat != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(stat != NULL); + /* default to an invalid key */ *stat = 0; /* first make sure key->q and key->p are prime */ diff --git a/ecc.c b/src/pk/ecc/ecc.c similarity index 92% rename from ecc.c rename to src/pk/ecc/ecc.c index 2c50a5f..cb99dde 100644 --- a/ecc.c +++ b/src/pk/ecc/ecc.c @@ -14,8 +14,12 @@ * All curves taken from NIST recommendation paper of July 1999 * Available at http://csrc.nist.gov/cryptval/dss.htm */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file ecc.c + ECC Crypto, Tom St Denis +*/ #ifdef MECC @@ -516,6 +520,10 @@ done: #undef WINSIZE +/** + Perform on the ECC system + @return CRYPT_OK if successful +*/ int ecc_test(void) { mp_int modulus, order; @@ -581,8 +589,8 @@ done: void ecc_sizes(int *low, int *high) { int i; - _ARGCHK(low != NULL); - _ARGCHK(high != NULL); + LTC_ARGCHK(low != NULL); + LTC_ARGCHK(high != NULL); *low = INT_MAX; *high = 0; @@ -596,6 +604,14 @@ void ecc_sizes(int *low, int *high) } } +/** + Make a new ECC key + @param prng An active PRNG state + @param wprng The index of the PRNG you wish to use + @param keysize The keysize for the new key (in octets from 20 to 65 bytes) + @param key [out] Destination of the newly created key + @return CRYPT_OK if successful, upon error all allocated memory will be freed +*/ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key) { int x, err; @@ -603,7 +619,7 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key) mp_int prime; unsigned char *buf; - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); /* good prng? */ if ((err = prng_is_valid(wprng)) != CRYPT_OK) { @@ -613,7 +629,7 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key) /* find key size */ for (x = 0; (keysize > sets[x].size) && (sets[x].size != 0); x++); keysize = sets[x].size; - _ARGCHK(keysize <= ECC_MAXSIZE); + LTC_ARGCHK(keysize <= ECC_MAXSIZE); if (sets[x].size == 0) { return CRYPT_INVALID_KEYSIZE; @@ -630,19 +646,19 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key) /* make up random string */ if (prng_descriptor[wprng].read(buf, (unsigned long)keysize, prng) != (unsigned long)keysize) { err = CRYPT_ERROR_READPRNG; - goto __ERR2; + goto LBL_ERR2; } /* setup the key variables */ if ((err = mp_init_multi(&key->pubkey.x, &key->pubkey.y, &key->k, &prime, NULL)) != MP_OKAY) { err = mpi_to_ltc_error(err); - goto __ERR; + goto LBL_ERR; } base = new_point(); if (base == NULL) { mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->k, &prime, NULL); err = CRYPT_MEM; - goto __ERR; + goto LBL_ERR; } /* read in the specs for this key */ @@ -652,7 +668,7 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key) if ((err = mp_read_unsigned_bin(&key->k, (unsigned char *)buf, keysize)) != MP_OKAY) { goto error; } /* make the public key */ - if ((err = ecc_mulmod(&key->k, base, &key->pubkey, &prime)) != CRYPT_OK) { goto __ERR; } + if ((err = ecc_mulmod(&key->k, base, &key->pubkey, &prime)) != CRYPT_OK) { goto LBL_ERR; } key->type = PK_PRIVATE; /* shrink key */ @@ -662,14 +678,14 @@ int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key) /* free up ram */ err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; error: err = mpi_to_ltc_error(err); -__ERR: +LBL_ERR: del_point(base); mp_clear(&prime); -__ERR2: -#ifdef CLEAN_STACK +LBL_ERR2: +#ifdef LTC_CLEAN_STACK zeromem(buf, ECC_MAXSIZE); #endif @@ -678,9 +694,13 @@ __ERR2: return err; } +/** + Free an ECC key from memory + @param key The key you wish to free +*/ void ecc_free(ecc_key *key) { - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); mp_clear_multi(&key->pubkey.x, &key->pubkey.y, &key->k, NULL); } @@ -689,8 +709,8 @@ static int compress_y_point(ecc_point *pt, int idx, int *result) mp_int tmp, tmp2, p; int err; - _ARGCHK(pt != NULL); - _ARGCHK(result != NULL); + LTC_ARGCHK(pt != NULL); + LTC_ARGCHK(result != NULL); if ((err = mp_init_multi(&tmp, &tmp2, &p, NULL)) != MP_OKAY) { return mpi_to_ltc_error(err); @@ -731,7 +751,7 @@ static int expand_y_point(ecc_point *pt, int idx, int result) mp_int tmp, tmp2, p; int err; - _ARGCHK(pt != NULL); + LTC_ARGCHK(pt != NULL); if ((err = mp_init_multi(&tmp, &tmp2, &p, NULL)) != MP_OKAY) { return CRYPT_MEM; @@ -767,14 +787,22 @@ done: return err; } +/** + Export an ECC key as a binary packet + @param out [out] Destination for the key + @param outlen [in/out] Max size and resulting size of the exported key + @param type The type of key you want to export (PK_PRIVATE or PK_PUBLIC) + @param key The key to export + @return CRYPT_OK if successful +*/ int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key) { unsigned long y, z; int cp, err; - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* can we store the static header? */ if (*outlen < (PACKET_SIZE + 3)) { @@ -811,13 +839,20 @@ int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key return CRYPT_OK; } +/** + Import an ECC key from a binary packet + @param in The packet to import + @param inlen The length of the packet + @param key [out] The destination of the import + @return CRYPT_OK if successful, upon error all allocated memory will be freed +*/ int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key) { unsigned long x, y, s; int err; - _ARGCHK(in != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(key != NULL); /* check length */ if ((3+PACKET_SIZE) > inlen) { @@ -882,6 +917,14 @@ error: return err; } +/** + Create an ECC shared secret between two keys + @param private_key The private ECC key + @param public_key The public key + @param out [out] Destination of the shared secret + @param outlen [in/out] The max size and resulting size of the shared secret + @return CRYPT_OK if successful +*/ int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key, unsigned char *out, unsigned long *outlen) { @@ -890,10 +933,10 @@ int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key, mp_int prime; int err; - _ARGCHK(private_key != NULL); - _ARGCHK(public_key != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(private_key != NULL); + LTC_ARGCHK(public_key != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* type valid? */ if (private_key->type != PK_PRIVATE) { @@ -939,9 +982,14 @@ done1: return err; } +/** + Get the size of an ECC key + @param key The key to get the size of + @return The size (octets) of the key or INT_MAX on error +*/ int ecc_get_size(ecc_key *key) { - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); if (is_valid_idx(key->idx)) return sets[key->idx].size; else diff --git a/ecc_sys.c b/src/pk/ecc/ecc_sys.c similarity index 76% rename from ecc_sys.c rename to src/pk/ecc/ecc_sys.c index 5b0ef82..9a92572 100644 --- a/ecc_sys.c +++ b/src/pk/ecc/ecc_sys.c @@ -8,8 +8,26 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, - unsigned char *out, unsigned long *len, + +/** + @file ecc_sys.c + ECC Crypto, Tom St Denis +*/ + +/** + Encrypt a symmetric key with ECC + @param in The symmetric key you want to encrypt + @param inlen The length of the key to encrypt (octets) + @param out [out] The destination for the ciphertext + @param outlen [in/out] The max size and resulting size of the ciphertext + @param prng An active PRNG state + @param wprng The index of the PRNG you wish to use + @param hash The index of the hash you want to use + @param key The ECC key you want to encrypt to + @return CRYPT_OK if successful +*/ +int ecc_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, prng_state *prng, int wprng, int hash, ecc_key *key) { @@ -18,10 +36,10 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, unsigned long x, y, z, hashsize, pubkeysize; int err; - _ARGCHK(inkey != NULL); - _ARGCHK(out != NULL); - _ARGCHK(len != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* check that wprng/cipher/hash are not invalid */ if ((err = prng_is_valid(wprng)) != CRYPT_OK) { @@ -32,7 +50,7 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, return err; } - if (keylen > hash_descriptor[hash].hashsize) { + if (inlen > hash_descriptor[hash].hashsize) { return CRYPT_INVALID_HASH; } @@ -61,14 +79,14 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, pubkeysize = ECC_BUF_SIZE; if ((err = ecc_export(pub_expt, &pubkeysize, PK_PUBLIC, &pubkey)) != CRYPT_OK) { ecc_free(&pubkey); - goto __ERR; + goto LBL_ERR; } /* now check if the out buffer is big enough */ - if (*len < (9 + PACKET_SIZE + pubkeysize + hash_descriptor[hash].hashsize)) { + if (*outlen < (9 + PACKET_SIZE + pubkeysize + hash_descriptor[hash].hashsize)) { ecc_free(&pubkey); err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* make random key */ @@ -76,12 +94,12 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, x = ECC_BUF_SIZE; if ((err = ecc_shared_secret(&pubkey, key, ecc_shared, &x)) != CRYPT_OK) { ecc_free(&pubkey); - goto __ERR; + goto LBL_ERR; } ecc_free(&pubkey); z = MAXBLOCKSIZE; if ((err = hash_memory(hash, ecc_shared, x, skey, &z)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* store header */ @@ -101,18 +119,18 @@ int ecc_encrypt_key(const unsigned char *inkey, unsigned long keylen, out[y] = pub_expt[x]; } - STORE32L(keylen, out+y); + STORE32L(inlen, out+y); y += 4; /* Encrypt/Store the encrypted key */ - for (x = 0; x < keylen; x++, y++) { - out[y] = skey[x] ^ inkey[x]; + for (x = 0; x < inlen; x++, y++) { + out[y] = skey[x] ^ in[x]; } - *len = y; + *outlen = y; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK /* clean up */ zeromem(pub_expt, ECC_BUF_SIZE); zeromem(ecc_shared, ECC_BUF_SIZE); @@ -126,8 +144,17 @@ __ERR: return err; } -int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, - unsigned char *outkey, unsigned long *keylen, +/** + Decrypt an ECC encrypted key + @param in The ciphertext + @param inlen The length of the ciphertext (octets) + @param out [out] The plaintext + @param outlen [in/out] The max size and resulting size of the plaintext + @param key The corresponding private ECC key + @return CRYPT_OK if successful +*/ +int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, ecc_key *key) { unsigned char *shared_secret, *skey; @@ -135,10 +162,10 @@ int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, int hash, err; ecc_key pubkey; - _ARGCHK(in != NULL); - _ARGCHK(outkey != NULL); - _ARGCHK(keylen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* right key type? */ if (key->type != PK_PRIVATE) { @@ -198,39 +225,39 @@ int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, x = ECC_BUF_SIZE; if ((err = ecc_shared_secret(key, &pubkey, shared_secret, &x)) != CRYPT_OK) { ecc_free(&pubkey); - goto __ERR; + goto LBL_ERR; } ecc_free(&pubkey); z = MAXBLOCKSIZE; if ((err = hash_memory(hash, shared_secret, x, skey, &z)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } LOAD32L(keysize, in+y); if (inlen < keysize) { err = CRYPT_INVALID_PACKET; - goto __ERR; + goto LBL_ERR; } else { inlen -= keysize; } y += 4; - if (*keylen < keysize) { + if (*outlen < keysize) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* Decrypt the key */ for (x = 0; x < keysize; x++, y++) { - outkey[x] = skey[x] ^ in[y]; + out[x] = skey[x] ^ in[y]; } - *keylen = keysize; + *outlen = keysize; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(shared_secret, ECC_BUF_SIZE); zeromem(skey, MAXBLOCKSIZE); #endif @@ -241,6 +268,17 @@ __ERR: return err; } +/** + Sign a message digest + @param in The message digest to sign + @param inlen The length of the digest + @param out [out] The destination for the signature + @param outlen [in/out] The max size and resulting size of the signature + @param prng An active PRNG state + @param wprng The index of the PRNG you wish to use + @param key A private ECC key + @return CRYPT_OK if successful +*/ int ecc_sign_hash(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen, prng_state *prng, int wprng, ecc_key *key) @@ -251,10 +289,10 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen, unsigned long x, y, pubkeysize, rsize; int err; - _ARGCHK(in != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* is this a private key? */ if (key->type != PK_PRIVATE) { @@ -292,7 +330,7 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen, pubkeysize = ECC_BUF_SIZE; if ((err = ecc_export(epubkey, &pubkeysize, PK_PUBLIC, &pubkey)) != CRYPT_OK) { ecc_free(&pubkey); - goto __ERR; + goto LBL_ERR; } /* get the hash and load it as a bignum into 'b' */ @@ -300,7 +338,7 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen, if ((err = mp_init_multi(&b, &p, NULL)) != MP_OKAY) { ecc_free(&pubkey); err = mpi_to_ltc_error(err); - goto __ERR; + goto LBL_ERR; } if ((err = mp_read_radix(&p, (char *)sets[key->idx].order, 64)) != MP_OKAY) { goto error; } if ((err = mp_read_unsigned_bin(&b, (unsigned char *)in, (int)inlen)) != MP_OKAY) { goto error; } @@ -321,7 +359,7 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen, /* now lets check the outlen before we write */ if (*outlen < (12 + rsize + pubkeysize)) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* lets output */ @@ -351,13 +389,13 @@ int ecc_sign_hash(const unsigned char *in, unsigned long inlen, /* all ok */ err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; error: err = mpi_to_ltc_error(err); -__ERR: +LBL_ERR: mp_clear_multi(&b, &p, NULL); ecc_free(&pubkey); -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(er, ECC_BUF_SIZE); zeromem(epubkey, ECC_BUF_SIZE); #endif @@ -381,8 +419,19 @@ __ERR: * The user given only xG, kG and b cannot determine k or x which means they can't find the private key. * */ -int ecc_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *hash, unsigned long inlen, + +/** + Verify an ECC signature + @param sig The signature to verify + @param siglen The length of the signature (octets) + @param hash The hash (message digest) that was signed + @param hashlen The length of the hash (octets) + @param stat Result of signature, 1==valid, 0==invalid + @param key The corresponding public ECC key + @return CRYPT_OK if successful (even if the signature is not valid) +*/ +int ecc_verify_hash(const unsigned char *sig, unsigned long siglen, + const unsigned char *hash, unsigned long hashlen, int *stat, ecc_key *key) { ecc_point *mG; @@ -391,10 +440,10 @@ int ecc_verify_hash(const unsigned char *sig, unsigned long siglen, unsigned long x, y; int err; - _ARGCHK(sig != NULL); - _ARGCHK(hash != NULL); - _ARGCHK(stat != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(sig != NULL); + LTC_ARGCHK(hash != NULL); + LTC_ARGCHK(stat != NULL); + LTC_ARGCHK(key != NULL); /* default to invalid signature */ *stat = 0; @@ -455,7 +504,7 @@ int ecc_verify_hash(const unsigned char *sig, unsigned long siglen, y += x; /* get m in binary a bignum */ - if ((err = mp_read_unsigned_bin(&m, (unsigned char *)hash, (int)inlen)) != MP_OKAY) { goto error; } + if ((err = mp_read_unsigned_bin(&m, (unsigned char *)hash, (int)hashlen)) != MP_OKAY) { goto error; } /* load prime */ if ((err = mp_read_radix(&p, (char *)sets[key->idx].prime, 64)) != MP_OKAY) { goto error; } diff --git a/packet_store_header.c b/src/pk/packet_store_header.c similarity index 93% rename from packet_store_header.c rename to src/pk/packet_store_header.c index d750718..c86f00e 100644 --- a/packet_store_header.c +++ b/src/pk/packet_store_header.c @@ -8,13 +8,13 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" #ifdef PACKET void packet_store_header(unsigned char *dst, int section, int subsection) { - _ARGCHK(dst != NULL); + LTC_ARGCHK(dst != NULL); /* store version number */ dst[0] = (unsigned char)(CRYPT&255); diff --git a/packet_valid_header.c b/src/pk/packet_valid_header.c similarity index 93% rename from packet_valid_header.c rename to src/pk/packet_valid_header.c index 7fda507..39eb0bb 100644 --- a/packet_valid_header.c +++ b/src/pk/packet_valid_header.c @@ -8,7 +8,7 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" #ifdef PACKET @@ -16,7 +16,7 @@ int packet_valid_header(unsigned char *src, int section, int subsection) { unsigned long ver; - _ARGCHK(src != NULL); + LTC_ARGCHK(src != NULL); /* check version */ ver = ((unsigned long)src[0]) | ((unsigned long)src[1] << 8U); diff --git a/pkcs_1_i2osp.c b/src/pk/pkcs1/pkcs_1_i2osp.c similarity index 72% rename from pkcs_1_i2osp.c rename to src/pk/pkcs1/pkcs_1_i2osp.c index 1a7fadd..a1ce7e8 100644 --- a/pkcs_1_i2osp.c +++ b/src/pk/pkcs1/pkcs_1_i2osp.c @@ -8,15 +8,26 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* Integer to Octet I2OSP -- Tom St Denis */ +/** + @file pkcs_1_i2osp.c + Integer to Octet I2OSP, Tom St Denis +*/ #ifdef PKCS_1 /* always stores the same # of bytes, pads with leading zero bytes as required */ + +/** + PKCS #1 Integer to binary + @param n The integer to store + @param modulus_len The length of the RSA modulus + @param out [out] The destination for the integer + @return CRYPT_OK if successful +*/ int pkcs_1_i2osp(mp_int *n, unsigned long modulus_len, unsigned char *out) { int err; diff --git a/pkcs_1_mgf1.c b/src/pk/pkcs1/pkcs_1_mgf1.c similarity index 75% rename from pkcs_1_mgf1.c rename to src/pk/pkcs1/pkcs_1_mgf1.c index 8b2bf8b..48ec7b0 100644 --- a/pkcs_1_mgf1.c +++ b/src/pk/pkcs1/pkcs_1_mgf1.c @@ -8,12 +8,24 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* The Mask Generation Function (MGF1) for PKCS #1 -- Tom St Denis */ +/** + @file pkcs_1_mgf1.c + The Mask Generation Function (MGF1) for PKCS #1, Tom St Denis +*/ #ifdef PKCS_1 +/** + Perform PKCS #1 MGF1 (internal) + @param seed The seed for MGF1 + @param seedlen The length of the seed + @param hash_idx The index of the hash desired + @param mask [out] The destination + @param masklen The length of the mask desired + @return CRYPT_OK if successful +*/ int pkcs_1_mgf1(const unsigned char *seed, unsigned long seedlen, int hash_idx, unsigned char *mask, unsigned long masklen) @@ -23,8 +35,8 @@ int pkcs_1_mgf1(const unsigned char *seed, unsigned long seedlen, hash_state *md; unsigned char *buf; - _ARGCHK(seed != NULL); - _ARGCHK(mask != NULL); + LTC_ARGCHK(seed != NULL); + LTC_ARGCHK(mask != NULL); /* ensure valid hash */ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { @@ -57,16 +69,16 @@ int pkcs_1_mgf1(const unsigned char *seed, unsigned long seedlen, /* get hash of seed || counter */ if ((err = hash_descriptor[hash_idx].init(md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(md, seed, seedlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(md, buf, 4)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].done(md, buf)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* store it */ @@ -76,8 +88,8 @@ int pkcs_1_mgf1(const unsigned char *seed, unsigned long seedlen, } err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(buf, hLen); zeromem(md, sizeof(hash_state)); #endif diff --git a/pkcs_1_oaep_decode.c b/src/pk/pkcs1/pkcs_1_oaep_decode.c similarity index 77% rename from pkcs_1_oaep_decode.c rename to src/pk/pkcs1/pkcs_1_oaep_decode.c index 2275bb3..32a1e36 100644 --- a/pkcs_1_oaep_decode.c +++ b/src/pk/pkcs1/pkcs_1_oaep_decode.c @@ -8,12 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* OAEP Padding for PKCS #1 -- Tom St Denis */ +/** + @file pkcs_1_oaep_decode.c + OAEP Padding for PKCS #1, Tom St Denis +*/ #ifdef PKCS_1 +/** + PKCS #1 v2.00 OAEP decode + @param msg The encoded data to decode + @param msglen The length of the encoded data (octets) + @param lparam The session or system data (can be NULL) + @param lparamlen The length of the lparam + @param modulus_bitlen The bit length of the RSA modulus + @param hash_idx The index of the hash desired + @param out [out] Destination of decoding + @param outlen [in/out] The max size and resulting size of the decoding + @param res [out] Result of decoding, 1==valid, 0==invalid + @return CRYPT_OK if successful (even if invalid) +*/ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, const unsigned char *lparam, unsigned long lparamlen, unsigned long modulus_bitlen, int hash_idx, @@ -24,10 +40,10 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, unsigned long hLen, x, y, modulus_len; int err; - _ARGCHK(msg != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(res != NULL); + LTC_ARGCHK(msg != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(res != NULL); /* default to invalid packet */ *res = 0; @@ -60,7 +76,7 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, /* test message size */ if (msglen != modulus_len) { err = CRYPT_PK_INVALID_SIZE; - goto __ERR; + goto LBL_ERR; } /* ok so it's now in the form @@ -74,7 +90,7 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, /* must have leading 0x00 byte */ if (msg[0] != 0x00) { err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; } /* now read the masked seed */ @@ -89,7 +105,7 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, /* compute MGF1 of maskedDB (hLen) */ if ((err = pkcs_1_mgf1(DB, modulus_len - hLen - 1, hash_idx, mask, hLen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* XOR against seed */ @@ -99,7 +115,7 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, /* compute MGF1 of seed (k - hlen - 1) */ if ((err = pkcs_1_mgf1(seed, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* xor against DB */ @@ -113,19 +129,19 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, x = modulus_len; if (lparam != NULL) { if ((err = hash_memory(hash_idx, lparam, lparamlen, seed, &x)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } } else { /* can't pass hash_memory a NULL so use DB with zero length */ if ((err = hash_memory(hash_idx, DB, 0, seed, &x)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } } /* compare the lhash'es */ if (memcmp(seed, DB, hLen) != 0) { err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; } /* now zeroes before a 0x01 */ @@ -136,13 +152,13 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, /* error out if wasn't 0x01 */ if (x == (modulus_len - hLen - 1) || DB[x] != 0x01) { err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; } /* rest is the message (and skip 0x01) */ if ((modulus_len - hLen - 1) - ++x > *outlen) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* copy message */ @@ -155,8 +171,8 @@ int pkcs_1_oaep_decode(const unsigned char *msg, unsigned long msglen, *res = 1; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(DB, modulus_len); zeromem(seed, modulus_len); zeromem(mask, modulus_len); diff --git a/pkcs_1_oaep_encode.c b/src/pk/pkcs1/pkcs_1_oaep_encode.c similarity index 77% rename from pkcs_1_oaep_encode.c rename to src/pk/pkcs1/pkcs_1_oaep_encode.c index 56816e6..63fc1c8 100644 --- a/pkcs_1_oaep_encode.c +++ b/src/pk/pkcs1/pkcs_1_oaep_encode.c @@ -8,12 +8,29 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* OAEP Padding for PKCS #1 -- Tom St Denis */ +/** + @file pkcs_1_oaep_encode.c + OAEP Padding for PKCS #1, Tom St Denis +*/ #ifdef PKCS_1 +/** + PKCS #1 v2.00 OAEP encode + @param msg The data to encode + @param msglen The length of the data to encode (octets) + @param lparam A session or system parameter (can be NULL) + @param lparamlen The length of the lparam data + @param modulus_bitlen The bit length of the RSA modulus + @param prng An active PRNG state + @param prng_idx The index of the PRNG desired + @param hash_idx The index of the hash desired + @param out [out] The destination for the encoded data + @param outlen [in/out] The max size and resulting size of the encoded data + @return CRYPT_OK if successful +*/ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, const unsigned char *lparam, unsigned long lparamlen, unsigned long modulus_bitlen, prng_state *prng, @@ -24,9 +41,9 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, unsigned long hLen, x, y, modulus_len; int err; - _ARGCHK(msg != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(msg != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* test valid hash */ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { @@ -61,7 +78,7 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, /* test message size */ if (msglen > (modulus_len - 2*hLen - 2)) { err = CRYPT_PK_INVALID_SIZE; - goto __ERR; + goto LBL_ERR; } /* get lhash */ @@ -69,12 +86,12 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, x = modulus_len; if (lparam != NULL) { if ((err = hash_memory(hash_idx, lparam, lparamlen, DB, &x)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } } else { /* can't pass hash_memory a NULL so use DB with zero length */ if ((err = hash_memory(hash_idx, DB, 0, DB, &x)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } } @@ -95,12 +112,12 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, /* now choose a random seed */ if (prng_descriptor[prng_idx].read(seed, hLen, prng) != hLen) { err = CRYPT_ERROR_READPRNG; - goto __ERR; + goto LBL_ERR; } /* compute MGF1 of seed (k - hlen - 1) */ if ((err = pkcs_1_mgf1(seed, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* xor against DB */ @@ -110,7 +127,7 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, /* compute MGF1 of maskedDB (hLen) */ if ((err = pkcs_1_mgf1(DB, modulus_len - hLen - 1, hash_idx, mask, hLen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* XOR against seed */ @@ -121,7 +138,7 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, /* create string of length modulus_len */ if (*outlen < modulus_len) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* start output which is 0x00 || maskedSeed || maskedDB */ @@ -136,8 +153,8 @@ int pkcs_1_oaep_encode(const unsigned char *msg, unsigned long msglen, *outlen = x; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(DB, modulus_len); zeromem(seed, modulus_len); zeromem(mask, modulus_len); diff --git a/pkcs_1_os2ip.c b/src/pk/pkcs1/pkcs_1_os2ip.c similarity index 65% rename from pkcs_1_os2ip.c rename to src/pk/pkcs1/pkcs_1_os2ip.c index cff881e..4e786ad 100644 --- a/pkcs_1_os2ip.c +++ b/src/pk/pkcs1/pkcs_1_os2ip.c @@ -8,11 +8,21 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* Octet to Integer OS2IP -- Tom St Denis */ +/** + @file pkcs_1_os2ip.c + Octet to Integer OS2IP, Tom St Denis +*/ #ifdef PKCS_1 +/** + Read a binary string into an mp_int + @param n [out] The mp_int destination + @param in The binary string to read + @param inlen The length of the binary string + @return CRYPT_OK if successful +*/ int pkcs_1_os2ip(mp_int *n, unsigned char *in, unsigned long inlen) { int err; diff --git a/pkcs_1_pss_decode.c b/src/pk/pkcs1/pkcs_1_pss_decode.c similarity index 78% rename from pkcs_1_pss_decode.c rename to src/pk/pkcs1/pkcs_1_pss_decode.c index 564c90c..6ea2e91 100644 --- a/pkcs_1_pss_decode.c +++ b/src/pk/pkcs1/pkcs_1_pss_decode.c @@ -8,12 +8,27 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* PKCS #1 PSS Signature Padding -- Tom St Denis */ +/** + @file pkcs_1_pss_decode.c + PKCS #1 PSS Signature Padding, Tom St Denis +*/ #ifdef PKCS_1 +/** + PKCS #1 v2.00 PSS decode + @param msghash The hash to verify + @param msghashlen The length of the hash (octets) + @param sig The signature data (encoded data) + @param siglen The length of the signature data (octets) + @param saltlen The length of the salt used (octets) + @param hash_idx The index of the hash desired + @param modulus_bitlen The bit length of the RSA modulus + @param res [out] The result of the comparison, 1==valid, 0==invalid + @return CRYPT_OK if successful (even if the comparison failed) +*/ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen, const unsigned char *sig, unsigned long siglen, unsigned long saltlen, int hash_idx, @@ -24,8 +39,8 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen, int err; hash_state md; - _ARGCHK(msghash != NULL); - _ARGCHK(res != NULL); + LTC_ARGCHK(msghash != NULL); + LTC_ARGCHK(res != NULL); /* default to invalid */ *res = 0; @@ -63,13 +78,13 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen, if ((saltlen > modulus_len) || (modulus_len < hLen + saltlen + 2) || (siglen != modulus_len)) { err = CRYPT_INVALID_ARG; - goto __ERR; + goto LBL_ERR; } /* ensure the 0xBC byte */ if (sig[siglen-1] != 0xBC) { err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; } /* copy out the DB */ @@ -85,12 +100,12 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen, /* check the MSB */ if ((sig[0] & ~(0xFF >> ((modulus_len<<3) - (modulus_bitlen-1)))) != 0) { err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; } /* generate mask of length modulus_len - hLen - 1 from hash */ if ((err = pkcs_1_mgf1(hash, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* xor against DB */ @@ -107,32 +122,32 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen, for (x = 0; x < modulus_len - saltlen - hLen - 2; x++) { if (DB[x] != 0x00) { err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; } } /* check for the 0x01 */ if (DB[x++] != 0x01) { err = CRYPT_OK; - goto __ERR; + goto LBL_ERR; } /* M = (eight) 0x00 || msghash || salt, mask = H(M) */ if ((err = hash_descriptor[hash_idx].init(&md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } zeromem(mask, 8); if ((err = hash_descriptor[hash_idx].process(&md, mask, 8)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(&md, msghash, msghashlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(&md, DB+x, saltlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].done(&md, mask)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* mask == hash means valid signature */ @@ -141,8 +156,8 @@ int pkcs_1_pss_decode(const unsigned char *msghash, unsigned long msghashlen, } err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(DB, modulus_len); zeromem(mask, modulus_len); zeromem(salt, modulus_len); diff --git a/pkcs_1_pss_encode.c b/src/pk/pkcs1/pkcs_1_pss_encode.c similarity index 78% rename from pkcs_1_pss_encode.c rename to src/pk/pkcs1/pkcs_1_pss_encode.c index 43691fc..e5adf5b 100644 --- a/pkcs_1_pss_encode.c +++ b/src/pk/pkcs1/pkcs_1_pss_encode.c @@ -8,12 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* PKCS #1 PSS Signature Padding -- Tom St Denis */ +/** + @file pkcs_1_pss_encode.c + PKCS #1 PSS Signature Padding, Tom St Denis +*/ #ifdef PKCS_1 +/** + PKCS #1 v2.00 Signature Encoding + @param msghash The hash to encode + @param msghashlen The length of the hash (octets) + @param saltlen The length of the salt desired (octets) + @param prng An active PRNG context + @param prng_idx The index of the PRNG desired + @param hash_idx The index of the hash desired + @param modulus_bitlen The bit length of the RSA modulus + @param out [out] The destination of the encoding + @param outlen [in/out] The max size and resulting size of the encoded data + @return CRYPT_OK if successful +*/ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen, unsigned long saltlen, prng_state *prng, int prng_idx, int hash_idx, @@ -25,9 +41,9 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen, int err; hash_state md; - _ARGCHK(msghash != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(msghash != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* ensure hash and PRNG are valid */ if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { @@ -65,33 +81,33 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen, /* check sizes */ if ((saltlen > modulus_len) || (modulus_len < hLen + saltlen + 2)) { err = CRYPT_INVALID_ARG; - goto __ERR; + goto LBL_ERR; } /* generate random salt */ if (saltlen > 0) { if (prng_descriptor[prng_idx].read(salt, saltlen, prng) != saltlen) { err = CRYPT_ERROR_READPRNG; - goto __ERR; + goto LBL_ERR; } } /* M = (eight) 0x00 || msghash || salt, hash = H(M) */ if ((err = hash_descriptor[hash_idx].init(&md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } zeromem(DB, 8); if ((err = hash_descriptor[hash_idx].process(&md, DB, 8)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(&md, msghash, msghashlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].process(&md, salt, saltlen)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = hash_descriptor[hash_idx].done(&md, hash)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* generate DB = PS || 0x01 || salt, PS == modulus_len - saltlen - hLen - 2 zero bytes */ @@ -105,7 +121,7 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen, /* generate mask of length modulus_len - hLen - 1 from hash */ if ((err = pkcs_1_mgf1(hash, hLen, hash_idx, mask, modulus_len - hLen - 1)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* xor against DB */ @@ -116,7 +132,7 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen, /* output is DB || hash || 0xBC */ if (*outlen < modulus_len) { err = CRYPT_BUFFER_OVERFLOW; - goto __ERR; + goto LBL_ERR; } /* DB */ @@ -136,8 +152,8 @@ int pkcs_1_pss_encode(const unsigned char *msghash, unsigned long msghashlen, /* store output size */ *outlen = modulus_len; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(DB, modulus_len); zeromem(mask, modulus_len); zeromem(salt, modulus_len); diff --git a/pkcs_1_v15_es_decode.c b/src/pk/pkcs1/pkcs_1_v15_es_decode.c similarity index 68% rename from pkcs_1_v15_es_decode.c rename to src/pk/pkcs1/pkcs_1_v15_es_decode.c index 7de4c15..7f0631c 100644 --- a/pkcs_1_v15_es_decode.c +++ b/src/pk/pkcs1/pkcs_1_v15_es_decode.c @@ -8,12 +8,25 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* PKCS #1 v1.5 Encryption Padding -- Tom St Denis */ +/** + @file pkcs_1_v15_es_decode.c + PKCS #1 v1.5 Encryption Padding, Tom St Denis +*/ #ifdef PKCS_1 +/** + PKCS #1 v1.5 Encryption Decoding + @param msg The padded data + @param msglen The length of the padded data (octets) + @param modulus_bitlen The bit length of the RSA modulus + @param out [out] Where to store the decoded data + @param outlen The length of the decoded data + @param res [out] Result of the decoding, 1==valid, 0==invalid + @return CRYPT_OK if successful +*/ int pkcs_1_v15_es_decode(const unsigned char *msg, unsigned long msglen, unsigned long modulus_bitlen, unsigned char *out, unsigned long outlen, @@ -21,9 +34,9 @@ int pkcs_1_v15_es_decode(const unsigned char *msg, unsigned long msglen, { unsigned long x, modulus_bytelen; - _ARGCHK(msg != NULL); - _ARGCHK(out != NULL); - _ARGCHK(res != NULL); + LTC_ARGCHK(msg != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(res != NULL); /* default to failed */ *res = 0; diff --git a/pkcs_1_v15_es_encode.c b/src/pk/pkcs1/pkcs_1_v15_es_encode.c similarity index 66% rename from pkcs_1_v15_es_encode.c rename to src/pk/pkcs1/pkcs_1_v15_es_encode.c index 1794774..8e18f8f 100644 --- a/pkcs_1_v15_es_encode.c +++ b/src/pk/pkcs1/pkcs_1_v15_es_encode.c @@ -8,12 +8,26 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* v1.5 Encryption Padding for PKCS #1 -- Tom St Denis */ +/** + @file pkcs_1_v15_es_encode.c + v1.5 Encryption Padding for PKCS #1, Tom St Denis +*/ #ifdef PKCS_1 +/** + PKCS #1 v1.5 Encryption Padding + @param msg The data to encode + @param msglen The length of the data (octets) + @param modulus_bitlen The bit length of the RSA modulus + @param prng An active PRNG + @param prng_idx The index of the PRNG desired + @param out [out] The destination of the padding + @param outlen [in/out] The max size and resulting size of the padding + @return CRYPT_OK if successful +*/ int pkcs_1_v15_es_encode(const unsigned char *msg, unsigned long msglen, unsigned long modulus_bitlen, prng_state *prng, int prng_idx, @@ -21,9 +35,9 @@ int pkcs_1_v15_es_encode(const unsigned char *msg, unsigned long msglen, { unsigned long modulus_bytelen, x, y; - _ARGCHK(msg != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(msg != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); /* get modulus len */ modulus_bytelen = (modulus_bitlen >> 3) + (modulus_bitlen & 7 ? 1 : 0); diff --git a/pkcs_1_v15_sa_decode.c b/src/pk/pkcs1/pkcs_1_v15_sa_decode.c similarity index 73% rename from pkcs_1_v15_sa_decode.c rename to src/pk/pkcs1/pkcs_1_v15_sa_decode.c index 1b5307c..595a0aa 100644 --- a/pkcs_1_v15_sa_decode.c +++ b/src/pk/pkcs1/pkcs_1_v15_sa_decode.c @@ -8,12 +8,26 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* PKCS #1 v1.5 Signature Padding -- Tom St Denis */ +/** + @file pkcs_1_v15_sa_decode.c + PKCS #1 v1.5 Signature Padding, Tom St Denis +*/ #ifdef PKCS_1 +/** + Perform PKCS #1 v1.5 Signature Decoding + @param msghash The hash that was signed + @param msghashlen The length of the hash + @param sig The signature [padded data] + @param siglen The length of the signature + @param hash_idx The index of the hash used + @param modulus_bitlen The bit length of the RSA modulus + @param res [out] Result of comparison, 1==valid, 0==invalid + @return CRYPT_OK if successful +*/ int pkcs_1_v15_sa_decode(const unsigned char *msghash, unsigned long msghashlen, const unsigned char *sig, unsigned long siglen, int hash_idx, unsigned long modulus_bitlen, @@ -22,9 +36,9 @@ int pkcs_1_v15_sa_decode(const unsigned char *msghash, unsigned long msghashlen, unsigned long x, y, modulus_bytelen, derlen; int err; - _ARGCHK(msghash != NULL); - _ARGCHK(sig != NULL); - _ARGCHK(res != NULL); + LTC_ARGCHK(msghash != NULL); + LTC_ARGCHK(sig != NULL); + LTC_ARGCHK(res != NULL); /* default to invalid */ *res = 0; diff --git a/pkcs_1_v15_sa_encode.c b/src/pk/pkcs1/pkcs_1_v15_sa_encode.c similarity index 72% rename from pkcs_1_v15_sa_encode.c rename to src/pk/pkcs1/pkcs_1_v15_sa_encode.c index f0f258a..70c88cb 100644 --- a/pkcs_1_v15_sa_encode.c +++ b/src/pk/pkcs1/pkcs_1_v15_sa_encode.c @@ -8,12 +8,25 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* PKCS #1 v1.5 Signature Padding -- Tom St Denis */ +/** + @file pkcs_1_v15_sa_encode.c + PKCS #1 v1.5 Signature Padding, Tom St Denis +*/ #ifdef PKCS_1 +/** + Perform PKCS #1 v1.5 Signature Padding + @param msghash The hash you wish to incorporate in the padding + @param msghashlen The length of the hash + @param hash_idx The index of the hash used + @param modulus_bitlen The length of the RSA modulus that will sign this (bits) + @param out [out] Where to store the padded data + @param outlen [in/out] Max size and resulting size of the padded data + @return CRYPT_OK if successful +*/ int pkcs_1_v15_sa_encode(const unsigned char *msghash, unsigned long msghashlen, int hash_idx, unsigned long modulus_bitlen, unsigned char *out, unsigned long *outlen) @@ -21,9 +34,9 @@ int pkcs_1_v15_sa_encode(const unsigned char *msghash, unsigned long msghashlen unsigned long derlen, modulus_bytelen, x, y; int err; - _ARGCHK(msghash != NULL) - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); + LTC_ARGCHK(msghash != NULL) + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { return err; diff --git a/src/pk/rsa/rsa_decrypt_key.c b/src/pk/rsa/rsa_decrypt_key.c new file mode 100644 index 0000000..95c94e3 --- /dev/null +++ b/src/pk/rsa/rsa_decrypt_key.c @@ -0,0 +1,89 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file rsa_decrypt_key.c + RSA PKCS #1 OAEP Decryption, Tom St Denis +*/ + +#ifdef MRSA + +/** + (PKCS #1 v2.0) decrypt then OAEP depad + @param in The ciphertext + @param inlen The length of the ciphertext (octets) + @param out [out] The plaintext + @param outlen [in/out] The max size and resulting size of the plaintext (octets) + @param lparam The system "lparam" value + @param lparamlen The length of the lparam value (octets) + @param hash_idx The index of the hash desired + @param stat [out] Result of the decryption, 1==valid, 0==invalid + @param key The corresponding private RSA key + @return CRYPT_OK if succcessul (even if invalid) +*/ +int rsa_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + const unsigned char *lparam, unsigned long lparamlen, + int hash_idx, int *stat, + rsa_key *key) +{ + unsigned long modulus_bitlen, modulus_bytelen, x; + int err; + unsigned char *tmp; + + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(stat != NULL); + + /* default to invalid */ + *stat = 0; + + /* valid hash ? */ + if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { + return err; + } + + /* get modulus len in bits */ + modulus_bitlen = mp_count_bits(&(key->N)); + + /* outlen must be at least the size of the modulus */ + modulus_bytelen = mp_unsigned_bin_size(&(key->N)); + if (modulus_bytelen != inlen) { + return CRYPT_INVALID_PACKET; + } + + /* allocate ram */ + tmp = XMALLOC(inlen); + if (tmp == NULL) { + return CRYPT_MEM; + } + + /* rsa decode the packet */ + x = inlen; + if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, key)) != CRYPT_OK) { + XFREE(tmp); + return err; + } + + /* now OAEP decode the packet */ + err = pkcs_1_oaep_decode(tmp, x, lparam, lparamlen, modulus_bitlen, hash_idx, + out, outlen, stat); + XFREE(tmp); + return err; +} + +#endif /* MRSA */ + + + + diff --git a/rsa_encrypt_key.c b/src/pk/rsa/rsa_encrypt_key.c similarity index 53% rename from rsa_encrypt_key.c rename to src/pk/rsa/rsa_encrypt_key.c index c0c8400..ab5b978 100644 --- a/rsa_encrypt_key.c +++ b/src/pk/rsa/rsa_encrypt_key.c @@ -8,24 +8,41 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file rsa_encrypt_key.c + RSA PKCS OAEP encryption, Tom St Denis +*/ #ifdef MRSA -/* (PKCS #1 v2.0) OAEP pad then encrypt */ -int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen, - unsigned char *outkey, unsigned long *outlen, +/** + (PKCS #1 v2.0) OAEP pad then encrypt + @param in The plaintext + @param inlen The length of the plaintext (octets) + @param out [out] The ciphertext + @param outlen [in/out] The max size and resulting size of the ciphertext + @param lparam The system "lparam" for the encryption + @param lparamlen The length of lparam (octets) + @param prng An active PRNG + @param prng_idx The index of the desired prng + @param hash_idx The index of the desired hash + @param key The RSA key to encrypt to + @return CRYPT_OK if successful +*/ +int rsa_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, const unsigned char *lparam, unsigned long lparamlen, prng_state *prng, int prng_idx, int hash_idx, rsa_key *key) { unsigned long modulus_bitlen, modulus_bytelen, x; int err; - _ARGCHK(inkey != NULL); - _ARGCHK(outkey != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* valid prng and hash ? */ if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { @@ -46,14 +63,14 @@ int rsa_encrypt_key(const unsigned char *inkey, unsigned long inlen, /* OAEP pad the key */ x = *outlen; - if ((err = pkcs_1_oaep_encode(inkey, inlen, lparam, + if ((err = pkcs_1_oaep_encode(in, inlen, lparam, lparamlen, modulus_bitlen, prng, prng_idx, hash_idx, - outkey, &x)) != CRYPT_OK) { + out, &x)) != CRYPT_OK) { return err; } /* rsa exptmod the OAEP pad */ - return rsa_exptmod(outkey, x, outkey, outlen, PK_PUBLIC, prng, prng_idx, key); + return rsa_exptmod(out, x, out, outlen, PK_PUBLIC, key); } #endif /* MRSA */ diff --git a/rsa_export.c b/src/pk/rsa/rsa_export.c similarity index 69% rename from rsa_export.c rename to src/pk/rsa/rsa_export.c index bee5cf6..1b52fac 100644 --- a/rsa_export.c +++ b/src/pk/rsa/rsa_export.c @@ -8,19 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file rsa_export.c + Export RSA PKCS keys, Tom St Denis +*/ #ifdef MRSA -/* This will export either an RSAPublicKey or RSAPrivateKey [defined in PKCS #1 v2.1] */ +/** + This will export either an RSAPublicKey or RSAPrivateKey [defined in PKCS #1 v2.1] + @param out [out] Destination of the packet + @param outlen [in/out] The max size and resulting size of the packet + @param type The type of exported key (PK_PRIVATE or PK_PUBLIC) + @param key The RSA key to export + @return CRYPT_OK if successful +*/ int rsa_export(unsigned char *out, unsigned long *outlen, int type, rsa_key *key) { int err; - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); /* type valid? */ if (!(key->type == PK_PRIVATE) && (type == PK_PRIVATE)) { diff --git a/rsa_exptmod.c b/src/pk/rsa/rsa_exptmod.c similarity index 63% rename from rsa_exptmod.c rename to src/pk/rsa/rsa_exptmod.c index 2eebd86..e7f7c6a 100644 --- a/rsa_exptmod.c +++ b/src/pk/rsa/rsa_exptmod.c @@ -8,32 +8,38 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* RSA Code by Tom St Denis */ -#include "mycrypt.h" +/** + @file rsa_exptmod.c + RSA PKCS exptmod, Tom St Denis +*/ #ifdef MRSA -/* compute an RSA modular exponentiation */ +/** + Compute an RSA modular exponentiation + @param in The input data to send into RSA + @param inlen The length of the input (octets) + @param out [out] The destination + @param outlen [in/out] The max size and resulting size of the output + @param which Which exponent to use, e.g. PK_PRIVATE or PK_PUBLIC + @param key The RSA key to use + @return CRYPT_OK if successful +*/ int rsa_exptmod(const unsigned char *in, unsigned long inlen, unsigned char *out, unsigned long *outlen, int which, - prng_state *prng, int prng_idx, rsa_key *key) { mp_int tmp, tmpa, tmpb; unsigned long x; int err; - _ARGCHK(in != NULL); - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); - /* valid prng? */ - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } - /* is the key of the right type for the operation? */ if (which == PK_PRIVATE && (key->type != PK_PRIVATE)) { return CRYPT_PK_NOT_PRIVATE; @@ -45,8 +51,8 @@ int rsa_exptmod(const unsigned char *in, unsigned long inlen, } /* init and copy into tmp */ - if ((err = mp_init_multi(&tmp, &tmpa, &tmpb, NULL)) != MP_OKAY) { return mpi_to_ltc_error(err); } - if ((err = mp_read_unsigned_bin(&tmp, (unsigned char *)in, (int)inlen)) != MP_OKAY) { goto error; } + if ((err = mp_init_multi(&tmp, &tmpa, &tmpb, NULL)) != MP_OKAY) { return mpi_to_ltc_error(err); } + if ((err = mp_read_unsigned_bin(&tmp, (unsigned char *)in, (int)inlen)) != MP_OKAY) { goto error; } /* sanity check on the input */ if (mp_cmp(&key->N, &tmp) == MP_LT) { @@ -57,21 +63,21 @@ int rsa_exptmod(const unsigned char *in, unsigned long inlen, /* are we using the private exponent and is the key optimized? */ if (which == PK_PRIVATE) { /* tmpa = tmp^dP mod p */ - if ((err = tim_exptmod(prng, prng_idx, &tmp, &key->e, &key->dP, &key->p, &tmpa)) != MP_OKAY) { goto error; } + if ((err = mp_exptmod(&tmp, &key->dP, &key->p, &tmpa)) != MP_OKAY) { goto error; } /* tmpb = tmp^dQ mod q */ - if ((err = tim_exptmod(prng, prng_idx, &tmp, &key->e, &key->dQ, &key->q, &tmpb)) != MP_OKAY) { goto error; } + if ((err = mp_exptmod(&tmp, &key->dQ, &key->q, &tmpb)) != MP_OKAY) { goto error; } /* tmp = (tmpa - tmpb) * qInv (mod p) */ - if ((err = mp_sub(&tmpa, &tmpb, &tmp)) != MP_OKAY) { goto error; } - if ((err = mp_mulmod(&tmp, &key->qP, &key->p, &tmp)) != MP_OKAY) { goto error; } + if ((err = mp_sub(&tmpa, &tmpb, &tmp)) != MP_OKAY) { goto error; } + if ((err = mp_mulmod(&tmp, &key->qP, &key->p, &tmp)) != MP_OKAY) { goto error; } /* tmp = tmpb + q * tmp */ - if ((err = mp_mul(&tmp, &key->q, &tmp)) != MP_OKAY) { goto error; } - if ((err = mp_add(&tmp, &tmpb, &tmp)) != MP_OKAY) { goto error; } + if ((err = mp_mul(&tmp, &key->q, &tmp)) != MP_OKAY) { goto error; } + if ((err = mp_add(&tmp, &tmpb, &tmp)) != MP_OKAY) { goto error; } } else { /* exptmod it */ - if ((err = mp_exptmod(&tmp, &key->e, &key->N, &tmp)) != MP_OKAY) { goto error; } + if ((err = mp_exptmod(&tmp, &key->e, &key->N, &tmp)) != MP_OKAY) { goto error; } } /* read it back */ @@ -84,7 +90,7 @@ int rsa_exptmod(const unsigned char *in, unsigned long inlen, /* convert it */ zeromem(out, x); - if ((err = mp_to_unsigned_bin(&tmp, out+(x-mp_unsigned_bin_size(&tmp)))) != MP_OKAY) { goto error; } + if ((err = mp_to_unsigned_bin(&tmp, out+(x-mp_unsigned_bin_size(&tmp)))) != MP_OKAY) { goto error; } /* clean up and return */ err = CRYPT_OK; diff --git a/rsa_free.c b/src/pk/rsa/rsa_free.c similarity index 73% rename from rsa_free.c rename to src/pk/rsa/rsa_free.c index 4562788..e828a72 100644 --- a/rsa_free.c +++ b/src/pk/rsa/rsa_free.c @@ -8,15 +8,22 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* RSA Code by Tom St Denis */ -#include "mycrypt.h" +/** + @file rsa_free.c + Free an RSA key, Tom St Denis +*/ #ifdef MRSA +/** + Free an RSA key from memory + @param key The RSA key to free +*/ void rsa_free(rsa_key *key) { - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); mp_clear_multi(&key->e, &key->d, &key->N, &key->dQ, &key->dP, &key->qP, &key->p, &key->q, NULL); } diff --git a/rsa_import.c b/src/pk/rsa/rsa_import.c similarity index 71% rename from rsa_import.c rename to src/pk/rsa/rsa_import.c index 02b4ca8..2c96f6c 100644 --- a/rsa_import.c +++ b/src/pk/rsa/rsa_import.c @@ -8,19 +8,29 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file rsa_import.c + Import a PKCS RSA key, Tom St Denis +*/ #ifdef MRSA -/* import an RSAPublicKey or RSAPrivateKey [two-prime only, defined in PKCS #1 v2.1] */ +/** + Import an RSAPublicKey or RSAPrivateKey [two-prime only, defined in PKCS #1 v2.1] + @param in The packet to import from + @param inlen It's length (octets) + @param key [out] Destination for newly imported key + @return CRYPT_OK if successful, upon error allocated memory is freed +*/ int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key) { unsigned long x; int err; - _ARGCHK(in != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(key != NULL); /* init key */ if ((err = mp_init_multi(&key->e, &key->d, &key->N, &key->dQ, &key->dP, &key->qP, @@ -31,7 +41,7 @@ int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key) /* read first number, it's either N or 0 [0 == private key] */ x = inlen; if ((err = der_get_multi_integer(in, &x, &key->N, NULL)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* advance */ @@ -43,14 +53,18 @@ int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key) if ((err = der_get_multi_integer(in, &inlen, &key->N, &key->e, &key->d, &key->p, &key->q, &key->dP, &key->dQ, &key->qP, NULL)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } key->type = PK_PRIVATE; + } else if (mp_cmp_d(&key->N, 1) == MP_EQ) { + /* we don't support multi-prime RSA */ + err = CRYPT_PK_INVALID_TYPE; + goto LBL_ERR; } else { /* it's a public key and we lack e */ if ((err = der_get_multi_integer(in, &inlen, &key->e, NULL)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* free up some ram */ @@ -59,7 +73,7 @@ int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key) key->type = PK_PUBLIC; } return CRYPT_OK; -__ERR: +LBL_ERR: mp_clear_multi(&key->d, &key->e, &key->N, &key->dQ, &key->dP, &key->qP, &key->p, &key->q, NULL); return err; diff --git a/rsa_make_key.c b/src/pk/rsa/rsa_make_key.c similarity index 89% rename from rsa_make_key.c rename to src/pk/rsa/rsa_make_key.c index fc95450..a37057b 100644 --- a/rsa_make_key.c +++ b/src/pk/rsa/rsa_make_key.c @@ -8,18 +8,30 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -/* RSA Code by Tom St Denis */ -#include "mycrypt.h" +/** + @file rsa_make_key.c + RSA key generation, Tom St Denis +*/ #ifdef MRSA +/** + Create an RSA key + @param prng An active PRNG state + @param wprng The index of the PRNG desired + @param size The size of the modulus (key size) desired (octets) + @param e The "e" value (public key). e==65537 is a good choice + @param key [out] Destination of a newly created private key pair + @return CRYPT_OK if successful, upon error all allocated ram is freed +*/ int rsa_make_key(prng_state *prng, int wprng, int size, long e, rsa_key *key) { mp_int p, q, tmp1, tmp2, tmp3; int err; - _ARGCHK(key != NULL); + LTC_ARGCHK(key != NULL); if ((size < (MIN_RSA_SIZE/8)) || (size > (MAX_RSA_SIZE/8))) { return CRYPT_INVALID_KEYSIZE; diff --git a/src/pk/rsa/rsa_sign_hash.c b/src/pk/rsa/rsa_sign_hash.c new file mode 100644 index 0000000..70f6259 --- /dev/null +++ b/src/pk/rsa/rsa_sign_hash.c @@ -0,0 +1,75 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file rsa_sign_hash.c + RSA PKCS v2 PSS sign hash, Tom St Denis +*/ + +#ifdef MRSA + +/** + (PKCS #1, v2.0) PSS pad then sign + @param in The hash to sign + @param inlen The length of the hash to sign (octets) + @param out [out] The signature + @param outlen [in/out] The max size and resulting size of the signature + @param prng An active PRNG state + @param prng_idx The index of the PRNG desired + @param hash_idx The index of the hash desired + @param saltlen The length of the salt desired (octets) + @param key The private RSA key to use + @return CRYPT_OK if successful +*/ +int rsa_sign_hash(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + prng_state *prng, int prng_idx, + int hash_idx, unsigned long saltlen, + rsa_key *key) +{ + unsigned long modulus_bitlen, modulus_bytelen, x; + int err; + + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); + + /* valid prng and hash ? */ + if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { + return err; + } + if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { + return err; + } + + /* get modulus len in bits */ + modulus_bitlen = mp_count_bits(&(key->N)); + + /* outlen must be at least the size of the modulus */ + modulus_bytelen = mp_unsigned_bin_size(&(key->N)); + if (modulus_bytelen > *outlen) { + return CRYPT_BUFFER_OVERFLOW; + } + + /* PSS pad the key */ + x = *outlen; + if ((err = pkcs_1_pss_encode(in, inlen, saltlen, prng, prng_idx, + hash_idx, modulus_bitlen, out, &x)) != CRYPT_OK) { + return err; + } + + /* RSA encode it */ + return rsa_exptmod(out, x, out, outlen, PK_PRIVATE, key); +} + +#endif /* MRSA */ diff --git a/src/pk/rsa/rsa_v15_decrypt_key.c b/src/pk/rsa/rsa_v15_decrypt_key.c new file mode 100644 index 0000000..d29aa15 --- /dev/null +++ b/src/pk/rsa/rsa_v15_decrypt_key.c @@ -0,0 +1,73 @@ + /* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file rsa_v15_decrypt_key.c + RSA PKCS v1.5 Decryption, Tom St Denis +*/ + +#ifdef MRSA + +/** + RSA decrypt then PKCS #1 v1.5 depad + @param in The ciphertext + @param inlen The length of the ciphertext (octets) + @param out [out] The plaintext + @param outlen The length of the plaintext (you have to tell this function as it's not part of PKCS #1 v1.0 padding!) + @param stat [out] Status of decryption, 1==valid, 0==invalid + @param key The corresponding private RSA key + @return CRYPT_OK if successful (even if invalid) +*/ +int rsa_v15_decrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long outlen, + int *stat, rsa_key *key) +{ + unsigned long modulus_bitlen, modulus_bytelen, x; + int err; + unsigned char *tmp; + + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(key != NULL); + LTC_ARGCHK(stat != NULL); + + /* default to invalid */ + *stat = 0; + + /* get modulus len in bits */ + modulus_bitlen = mp_count_bits(&(key->N)); + + /* outlen must be at least the size of the modulus */ + modulus_bytelen = mp_unsigned_bin_size(&(key->N)); + if (modulus_bytelen != inlen) { + return CRYPT_INVALID_PACKET; + } + + /* allocate ram */ + tmp = XMALLOC(inlen); + if (tmp == NULL) { + return CRYPT_MEM; + } + + /* rsa decode the packet */ + x = inlen; + if ((err = rsa_exptmod(in, inlen, tmp, &x, PK_PRIVATE, key)) != CRYPT_OK) { + XFREE(tmp); + return err; + } + + /* PKCS #1 v1.5 depad */ + err = pkcs_1_v15_es_decode(tmp, x, modulus_bitlen, out, outlen, stat); + XFREE(tmp); + return err; +} + +#endif diff --git a/src/pk/rsa/rsa_v15_encrypt_key.c b/src/pk/rsa/rsa_v15_encrypt_key.c new file mode 100644 index 0000000..4aaa4a7 --- /dev/null +++ b/src/pk/rsa/rsa_v15_encrypt_key.c @@ -0,0 +1,68 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file rsa_v15_encrypt_key.c + RSA PKCS v1.5 Encryption, Tom St Denis +*/ + +#ifdef MRSA + +/** + PKCS #1 v1.5 pad then encrypt + @param in The plaintext + @param inlen The length of the plaintext (octets) + @param out [out] The ciphertext + @param outlen [in/out] The max size and resulting size of the ciphertext + @param prng An active PRNG + @param prng_idx The index of the desired PRNG + @param key The public RSA key + @return CRYPT_OK if successful +*/ +int rsa_v15_encrypt_key(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *outlen, + prng_state *prng, int prng_idx, + rsa_key *key) +{ + unsigned long modulus_bitlen, modulus_bytelen, x; + int err; + + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(key != NULL); + + /* valid prng? */ + if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { + return err; + } + + /* get modulus len in bits */ + modulus_bitlen = mp_count_bits(&(key->N)); + + /* outlen must be at least the size of the modulus */ + modulus_bytelen = mp_unsigned_bin_size(&(key->N)); + if (modulus_bytelen > *outlen) { + return CRYPT_BUFFER_OVERFLOW; + } + + /* pad it */ + x = *outlen; + if ((err = pkcs_1_v15_es_encode(in, inlen, modulus_bitlen, prng, prng_idx, out, &x)) != CRYPT_OK) { + return err; + } + + /* encrypt it */ + return rsa_exptmod(out, x, out, outlen, PK_PUBLIC, key); +} + +#endif diff --git a/src/pk/rsa/rsa_v15_sign_hash.c b/src/pk/rsa/rsa_v15_sign_hash.c new file mode 100644 index 0000000..4571c68 --- /dev/null +++ b/src/pk/rsa/rsa_v15_sign_hash.c @@ -0,0 +1,66 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file rsa_v15_sign_hash.c + RSA PKCS v1.5 Signature, Tom St Denis +*/ + +#ifdef MRSA + +/** + PKCS #1 v1.5 pad then sign + @param in The hash to sign + @param inlen The length of the message hash (octets) + @param out [out] The signature + @param siglen [in/out] The max size and resulting size of the signature + @param hash_idx The index of the hash desired + @param key The private RSA key to perform the signature with + @return CRYPT_OK if successful +*/ +int rsa_v15_sign_hash(const unsigned char *in, unsigned long inlen, + unsigned char *out, unsigned long *siglen, + int hash_idx, rsa_key *key) +{ + unsigned long modulus_bitlen, modulus_bytelen, x; + int err; + + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(siglen != NULL); + LTC_ARGCHK(key != NULL); + + /* valid hash ? */ + if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { + return err; + } + + /* get modulus len in bits */ + modulus_bitlen = mp_count_bits(&(key->N)); + + /* outlen must be at least the size of the modulus */ + modulus_bytelen = mp_unsigned_bin_size(&(key->N)); + if (modulus_bytelen > *siglen) { + return CRYPT_BUFFER_OVERFLOW; + } + + /* PKCS #1 v1.5 pad the key */ + x = *siglen; + if ((err = pkcs_1_v15_sa_encode(in, inlen, hash_idx, modulus_bitlen, out, &x)) != CRYPT_OK) { + return err; + } + + /* RSA encode it */ + return rsa_exptmod(out, x, out, siglen, PK_PRIVATE, key); +} + +#endif diff --git a/rsa_v15_verify_hash.c b/src/pk/rsa/rsa_v15_verify_hash.c similarity index 55% rename from rsa_v15_verify_hash.c rename to src/pk/rsa/rsa_v15_verify_hash.c index 6f6ee99..bdf6bac 100644 --- a/rsa_v15_verify_hash.c +++ b/src/pk/rsa/rsa_v15_verify_hash.c @@ -8,15 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file rsa_v15_verify_hash.c + RSA PKCS v1.5 Signature verification, Tom St Denis +*/ #ifdef MRSA -/* de-sign then PKCS v1.5 depad */ +/** + RSA de-sign then PKCS v1.5 signature depad + @param sig The signature data + @param siglen The length of the signature (octets) + @param hash The hash of the message that was signed + @param hashlen The length of the hash of the message that was signed (octets) + @param hash_idx The index of the desired hash + @param stat [out] The result of the signature comparison, 1==valid, 0==invalid + @param key The corresponding public RSA key that performed the signature + @return CRYPT_OK if successful (even if the signature is invalid) +*/ int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *msghash, unsigned long msghashlen, - prng_state *prng, int prng_idx, + const unsigned char *hash, unsigned long hashlen, int hash_idx, int *stat, rsa_key *key) { @@ -24,10 +37,10 @@ int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen, int err; unsigned char *tmpbuf; - _ARGCHK(msghash != NULL); - _ARGCHK(sig != NULL); - _ARGCHK(stat != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(hash != NULL); + LTC_ARGCHK(sig != NULL); + LTC_ARGCHK(stat != NULL); + LTC_ARGCHK(key != NULL); /* default to invalid */ *stat = 0; @@ -36,10 +49,6 @@ int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen, if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { return err; } - - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } /* get modulus len in bits */ modulus_bitlen = mp_count_bits(&(key->N)); @@ -58,13 +67,13 @@ int rsa_v15_verify_hash(const unsigned char *sig, unsigned long siglen, /* RSA decode it */ x = siglen; - if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, prng, prng_idx, key)) != CRYPT_OK) { + if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, key)) != CRYPT_OK) { XFREE(tmpbuf); return err; } /* PSS decode it */ - err = pkcs_1_v15_sa_decode(msghash, msghashlen, tmpbuf, x, hash_idx, modulus_bitlen, stat); + err = pkcs_1_v15_sa_decode(hash, hashlen, tmpbuf, x, hash_idx, modulus_bitlen, stat); XFREE(tmpbuf); return err; } diff --git a/rsa_verify_hash.c b/src/pk/rsa/rsa_verify_hash.c similarity index 53% rename from rsa_verify_hash.c rename to src/pk/rsa/rsa_verify_hash.c index 1da1af3..910f093 100644 --- a/rsa_verify_hash.c +++ b/src/pk/rsa/rsa_verify_hash.c @@ -8,15 +8,29 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file rsa_verify_hash.c + RSA PKCS v2 PSS signature verification, Tom St Denis +*/ #ifdef MRSA -/* (PKCS #1, v2.0) de-sign then PSS depad */ +/** + (PKCS #1, v2.0) de-sign then PSS depad + @param sig The signature data + @param siglen The length of the signature data (octets) + @param hash The hash of the message that was signed + @param hashlen The length of the hash of the message that was signed (octets) + @param hash_idx The index of the desired hash + @param saltlen The length of the salt used during signature + @param stat [out] The result of the signature comparison, 1==valid, 0==invalid + @param key The public RSA key corresponding to the key that performed the signature + @return CRYPT_OK on success (even if the signature is invalid) +*/ int rsa_verify_hash(const unsigned char *sig, unsigned long siglen, - const unsigned char *msghash, unsigned long msghashlen, - prng_state *prng, int prng_idx, + const unsigned char *hash, unsigned long hashlen, int hash_idx, unsigned long saltlen, int *stat, rsa_key *key) { @@ -24,10 +38,10 @@ int rsa_verify_hash(const unsigned char *sig, unsigned long siglen, int err; unsigned char *tmpbuf; - _ARGCHK(msghash != NULL); - _ARGCHK(sig != NULL); - _ARGCHK(stat != NULL); - _ARGCHK(key != NULL); + LTC_ARGCHK(hash != NULL); + LTC_ARGCHK(sig != NULL); + LTC_ARGCHK(stat != NULL); + LTC_ARGCHK(key != NULL); /* default to invalid */ *stat = 0; @@ -36,10 +50,6 @@ int rsa_verify_hash(const unsigned char *sig, unsigned long siglen, if ((err = hash_is_valid(hash_idx)) != CRYPT_OK) { return err; } - - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } /* get modulus len in bits */ modulus_bitlen = mp_count_bits(&(key->N)); @@ -58,13 +68,13 @@ int rsa_verify_hash(const unsigned char *sig, unsigned long siglen, /* RSA decode it */ x = siglen; - if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, prng, prng_idx, key)) != CRYPT_OK) { + if ((err = rsa_exptmod(sig, siglen, tmpbuf, &x, PK_PUBLIC, key)) != CRYPT_OK) { XFREE(tmpbuf); return err; } /* PSS decode it */ - err = pkcs_1_pss_decode(msghash, msghashlen, tmpbuf, x, saltlen, hash_idx, modulus_bitlen, stat); + err = pkcs_1_pss_decode(hash, hashlen, tmpbuf, x, saltlen, hash_idx, modulus_bitlen, stat); XFREE(tmpbuf); return err; } diff --git a/fortuna.c b/src/prngs/fortuna.c similarity index 74% rename from fortuna.c rename to src/prngs/fortuna.c index 5d81255..fc054ee 100644 --- a/fortuna.c +++ b/src/prngs/fortuna.c @@ -8,15 +8,19 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" +/** + @file fortuna.c + Fortuna PRNG, Tom St Denis +*/ + /* Implementation of Fortuna by Tom St Denis We deviate slightly here for reasons of simplicity [and to fit in the API]. First all "sources" in the AddEntropy function are fixed to 0. Second since no reliable timer is provided we reseed automatically when len(pool0) >= 64 or every FORTUNA_WD calls to the read function */ -#include "mycrypt.h" - #ifdef FORTUNA /* requries SHA256 and AES */ @@ -33,7 +37,7 @@ we reseed automatically when len(pool0) >= 64 or every FORTUNA_WD calls to the r #error FORTUNA_POOLS must be in [4..32] #endif -const struct _prng_descriptor fortuna_desc = { +const struct ltc_prng_descriptor fortuna_desc = { "fortuna", 1024, &fortuna_start, &fortuna_add_entropy, @@ -104,7 +108,7 @@ static int fortuna_reseed(prng_state *prng) prng->fortuna.wd = 0; -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(&md, sizeof(md)); zeromem(tmp, sizeof(tmp)); #endif @@ -112,11 +116,16 @@ static int fortuna_reseed(prng_state *prng) return CRYPT_OK; } +/** + Start the PRNG + @param prng [out] The PRNG state to initialize + @return CRYPT_OK if successful +*/ int fortuna_start(prng_state *prng) { int err, x; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* initialize the pools */ for (x = 0; x < FORTUNA_POOLS; x++) { @@ -135,30 +144,37 @@ int fortuna_start(prng_state *prng) return CRYPT_OK; } -int fortuna_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng) +/** + Add entropy to the PRNG state + @param in The data to add + @param inlen Length of the data to add + @param prng PRNG state to update + @return CRYPT_OK if successful +*/ +int fortuna_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng) { unsigned char tmp[2]; int err; - _ARGCHK(buf != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); - /* ensure len <= 32 */ - if (len > 32) { + /* ensure inlen <= 32 */ + if (inlen > 32) { return CRYPT_INVALID_ARG; } - /* add s || length(buf) || buf to pool[pool_idx] */ + /* add s || length(in) || in to pool[pool_idx] */ tmp[0] = 0; - tmp[1] = len; + tmp[1] = inlen; if ((err = sha256_process(&prng->fortuna.pool[prng->fortuna.pool_idx], tmp, 2)) != CRYPT_OK) { return err; } - if ((err = sha256_process(&prng->fortuna.pool[prng->fortuna.pool_idx], buf, len)) != CRYPT_OK) { + if ((err = sha256_process(&prng->fortuna.pool[prng->fortuna.pool_idx], in, inlen)) != CRYPT_OK) { return err; } if (prng->fortuna.pool_idx == 0) { - prng->fortuna.pool0_len += len; + prng->fortuna.pool0_len += inlen; } if (++(prng->fortuna.pool_idx) == FORTUNA_POOLS) { prng->fortuna.pool_idx = 0; @@ -167,19 +183,31 @@ int fortuna_add_entropy(const unsigned char *buf, unsigned long len, prng_state return CRYPT_OK; } +/** + Make the PRNG ready to read from + @param prng The PRNG to make active + @return CRYPT_OK if successful +*/ int fortuna_ready(prng_state *prng) { return fortuna_reseed(prng); } -unsigned long fortuna_read(unsigned char *dst, unsigned long len, prng_state *prng) +/** + Read from the PRNG + @param out Destination + @param outlen Length of output + @param prng The active PRNG to read from + @return Number of octets read +*/ +unsigned long fortuna_read(unsigned char *out, unsigned long outlen, prng_state *prng) { unsigned char tmp[16]; int err; unsigned long tlen; - _ARGCHK(dst != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(prng != NULL); /* do we have to reseed? */ if (++prng->fortuna.wd == FORTUNA_WD || prng->fortuna.pool0_len >= 64) { @@ -189,21 +217,21 @@ unsigned long fortuna_read(unsigned char *dst, unsigned long len, prng_state *pr } /* now generate the blocks required */ - tlen = len; + tlen = outlen; /* handle whole blocks without the extra memcpy */ - while (len >= 16) { + while (outlen >= 16) { /* encrypt the IV and store it */ - rijndael_ecb_encrypt(prng->fortuna.IV, dst, &prng->fortuna.skey); - dst += 16; - len -= 16; + rijndael_ecb_encrypt(prng->fortuna.IV, out, &prng->fortuna.skey); + out += 16; + outlen -= 16; fortuna_update_iv(prng); } /* left over bytes? */ - if (len > 0) { + if (outlen > 0) { rijndael_ecb_encrypt(prng->fortuna.IV, tmp, &prng->fortuna.skey); - XMEMCPY(dst, tmp, len); + XMEMCPY(out, tmp, outlen); fortuna_update_iv(prng); } @@ -214,18 +242,23 @@ unsigned long fortuna_read(unsigned char *dst, unsigned long len, prng_state *pr return 0; } -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(tmp, sizeof(tmp)); #endif return tlen; } +/** + Terminate the PRNG + @param prng The PRNG to terminate + @return CRYPT_OK if successful +*/ int fortuna_done(prng_state *prng) { int err, x; unsigned char tmp[32]; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* terminate all the hashes */ for (x = 0; x < FORTUNA_POOLS; x++) { @@ -235,21 +268,28 @@ int fortuna_done(prng_state *prng) } /* call cipher done when we invent one ;-) */ -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(tmp, sizeof(tmp)); #endif return CRYPT_OK; } +/** + Export the PRNG state + @param out [out] Destination + @param outlen [in/out] Max size and resulting size of the state + @param prng The PRNG to export + @return CRYPT_OK if successful +*/ int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng) { int x, err; hash_state *md; - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(prng != NULL); /* we'll write bytes for s&g's */ if (*outlen < 32*FORTUNA_POOLS) { @@ -270,37 +310,44 @@ int fortuna_export(unsigned char *out, unsigned long *outlen, prng_state *prng) /* terminate it */ if ((err = sha256_done(md, out+x*32)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } /* now hash it */ if ((err = sha256_init(md)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = sha256_process(md, out+x*32, 32)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } if ((err = sha256_done(md, out+x*32)) != CRYPT_OK) { - goto __ERR; + goto LBL_ERR; } } *outlen = 32*FORTUNA_POOLS; err = CRYPT_OK; -__ERR: -#ifdef CLEAN_STACK +LBL_ERR: +#ifdef LTC_CLEAN_STACK zeromem(md, sizeof(*md)); #endif XFREE(md); return err; } +/** + Import a PRNG state + @param in The PRNG state + @param inlen Size of the state + @param prng The PRNG to import + @return CRYPT_OK if successful +*/ int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prng) { int err, x; - _ARGCHK(in != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); if (inlen != 32*FORTUNA_POOLS) { return CRYPT_INVALID_ARG; @@ -317,6 +364,10 @@ int fortuna_import(const unsigned char *in, unsigned long inlen, prng_state *prn return err; } +/** + PRNG self-test + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled +*/ int fortuna_test(void) { #ifndef LTC_TEST diff --git a/rc4.c b/src/prngs/rc4.c similarity index 63% rename from rc4.c rename to src/prngs/rc4.c index e8139ad..63a4c55 100644 --- a/rc4.c +++ b/src/prngs/rc4.c @@ -8,11 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file rc4.c + RC4 PRNG, Tom St Denis +*/ #ifdef RC4 -const struct _prng_descriptor rc4_desc = +const struct ltc_prng_descriptor rc4_desc = { "rc4", 32, &rc4_start, @@ -25,9 +30,14 @@ const struct _prng_descriptor rc4_desc = &rc4_test }; +/** + Start the PRNG + @param prng [out] The PRNG state to initialize + @return CRYPT_OK if successful +*/ int rc4_start(prng_state *prng) { - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* set keysize to zero */ prng->rc4.x = 0; @@ -35,36 +45,48 @@ int rc4_start(prng_state *prng) return CRYPT_OK; } -int rc4_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng) +/** + Add entropy to the PRNG state + @param in The data to add + @param inlen Length of the data to add + @param prng PRNG state to update + @return CRYPT_OK if successful +*/ +int rc4_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng) { - _ARGCHK(buf != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); /* trim as required */ - if (prng->rc4.x + len > 256) { + if (prng->rc4.x + inlen > 256) { if (prng->rc4.x == 256) { /* I can't possibly accept another byte, ok maybe a mint wafer... */ return CRYPT_OK; } else { /* only accept part of it */ - len = 256 - prng->rc4.x; + inlen = 256 - prng->rc4.x; } } - while (len--) { - prng->rc4.buf[prng->rc4.x++] = *buf++; + while (inlen--) { + prng->rc4.buf[prng->rc4.x++] = *in++; } return CRYPT_OK; } +/** + Make the PRNG ready to read from + @param prng The PRNG to make active + @return CRYPT_OK if successful +*/ int rc4_ready(prng_state *prng) { unsigned char key[256], tmp, *s; int keylen, x, y, j; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* extract the key */ s = prng->rc4.buf; @@ -86,48 +108,67 @@ int rc4_ready(prng_state *prng) prng->rc4.x = 0; prng->rc4.y = 0; -#ifdef CLEAN_STACK +#ifdef LTC_CLEAN_STACK zeromem(key, sizeof(key)); #endif return CRYPT_OK; } -unsigned long rc4_read(unsigned char *buf, unsigned long len, prng_state *prng) +/** + Read from the PRNG + @param out Destination + @param outlen Length of output + @param prng The active PRNG to read from + @return Number of octets read +*/ +unsigned long rc4_read(unsigned char *out, unsigned long outlen, prng_state *prng) { unsigned char x, y, *s, tmp; unsigned long n; - _ARGCHK(buf != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(prng != NULL); - n = len; + n = outlen; x = prng->rc4.x; y = prng->rc4.y; s = prng->rc4.buf; - while (len--) { + while (outlen--) { x = (x + 1) & 255; y = (y + s[x]) & 255; tmp = s[x]; s[x] = s[y]; s[y] = tmp; tmp = (s[x] + s[y]) & 255; - *buf++ ^= s[tmp]; + *out++ ^= s[tmp]; } prng->rc4.x = x; prng->rc4.y = y; return n; } +/** + Terminate the PRNG + @param prng The PRNG to terminate + @return CRYPT_OK if successful +*/ int rc4_done(prng_state *prng) { - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); return CRYPT_OK; } +/** + Export the PRNG state + @param out [out] Destination + @param outlen [in/out] Max size and resulting size of the state + @param prng The PRNG to export + @return CRYPT_OK if successful +*/ int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng) { - _ARGCHK(outlen != NULL); - _ARGCHK(out != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(prng != NULL); if (*outlen < 32) { return CRYPT_BUFFER_OVERFLOW; @@ -141,11 +182,18 @@ int rc4_export(unsigned char *out, unsigned long *outlen, prng_state *prng) return CRYPT_OK; } +/** + Import a PRNG state + @param in The PRNG state + @param inlen Size of the state + @param prng The PRNG to import + @return CRYPT_OK if successful +*/ int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng) { int err; - _ARGCHK(in != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); if (inlen != 32) { return CRYPT_INVALID_ARG; @@ -157,6 +205,10 @@ int rc4_import(const unsigned char *in, unsigned long inlen, prng_state *prng) return rc4_add_entropy(in, 32, prng); } +/** + PRNG self-test + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled +*/ int rc4_test(void) { #ifndef LTC_TEST diff --git a/rng_get_bytes.c b/src/prngs/rng_get_bytes.c similarity index 79% rename from rng_get_bytes.c rename to src/prngs/rng_get_bytes.c index f3027cd..cac4acf 100644 --- a/rng_get_bytes.c +++ b/src/prngs/rng_get_bytes.c @@ -8,15 +8,19 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* portable way to get secure random bits to feed a PRNG */ -#include "mycrypt.h" +#include "tomcrypt.h" + +/** + @file rng_get_bytes.c + portable way to get secure random bits to feed a PRNG (Tom St Denis) +*/ #ifdef DEVRANDOM /* on *NIX read /dev/random */ static unsigned long rng_nix(unsigned char *buf, unsigned long len, void (*callback)(void)) { -#ifdef NO_FILE +#ifdef LTC_NO_FILE return 0; #else FILE *f; @@ -40,7 +44,7 @@ static unsigned long rng_nix(unsigned char *buf, unsigned long len, x = (unsigned long)fread(buf, 1, (size_t)len, f); fclose(f); return x; -#endif /* NO_FILE */ +#endif /* LTC_NO_FILE */ } #endif /* DEVRANDOM */ @@ -109,21 +113,28 @@ static unsigned long rng_win32(unsigned char *buf, unsigned long len, #endif /* WIN32 */ -unsigned long rng_get_bytes(unsigned char *buf, unsigned long len, +/** + Read the system RNG + @param out Destination + @param outlen Length desired (octets) + @param callback Pointer to void function to act as "callback" when RNG is slow. This can be NULL + @return Number of octets read +*/ +unsigned long rng_get_bytes(unsigned char *out, unsigned long outlen, void (*callback)(void)) { unsigned long x; - _ARGCHK(buf != NULL); + LTC_ARGCHK(out != NULL); #if defined(DEVRANDOM) - x = rng_nix(buf, len, callback); if (x != 0) { return x; } + x = rng_nix(out, outlen, callback); if (x != 0) { return x; } #endif #ifdef WIN32 - x = rng_win32(buf, len, callback); if (x != 0) { return x; } + x = rng_win32(out, outlen, callback); if (x != 0) { return x; } #endif #ifdef ANSI_RNG - x = rng_ansic(buf, len, callback); if (x != 0) { return x; } + x = rng_ansic(out, outlen, callback); if (x != 0) { return x; } #endif return 0; } diff --git a/rng_make_prng.c b/src/prngs/rng_make_prng.c similarity index 70% rename from rng_make_prng.c rename to src/prngs/rng_make_prng.c index 4c30e69..49195d3 100644 --- a/rng_make_prng.c +++ b/src/prngs/rng_make_prng.c @@ -8,16 +8,28 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -/* portable way to get secure random bits to feed a PRNG */ -#include "mycrypt.h" +#include "tomcrypt.h" +/** + @file rng_make_prng.c + portable way to get secure random bits to feed a PRNG (Tom St Denis) +*/ + +/** + Create a PRNG from a RNG + @param bits Number of bits of entropy desired (64 ... 1024) + @param wprng Index of which PRNG to setup + @param prng [out] PRNG state to initialize + @param callback A pointer to a void function for when the RNG is slow, this can be NULL + @return CRYPT_OK if successful +*/ int rng_make_prng(int bits, int wprng, prng_state *prng, void (*callback)(void)) { unsigned char buf[256]; int err; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* check parameter */ if ((err = prng_is_valid(wprng)) != CRYPT_OK) { @@ -45,7 +57,7 @@ int rng_make_prng(int bits, int wprng, prng_state *prng, return err; } - #ifdef CLEAN_STACK + #ifdef LTC_CLEAN_STACK zeromem(buf, sizeof(buf)); #endif return CRYPT_OK; diff --git a/sober128.c b/src/prngs/sober128.c similarity index 74% rename from sober128.c rename to src/prngs/sober128.c index bc00748..715742d 100644 --- a/sober128.c +++ b/src/prngs/sober128.c @@ -8,17 +8,19 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ -#include "mycrypt.h" +#include "tomcrypt.h" -/* Implementation of SOBER-128 by Tom St Denis. - * Based on s128fast.c reference code supplied by Greg Rose of QUALCOMM. - */ +/** + @file sober128.c + Implementation of SOBER-128 by Tom St Denis. + Based on s128fast.c reference code supplied by Greg Rose of QUALCOMM. +*/ #ifdef SOBER128 #include "sober128tab.c" -const struct _prng_descriptor sober128_desc = +const struct ltc_prng_descriptor sober128_desc = { "sober128", 64, &sober128_start, @@ -86,7 +88,7 @@ static void cycle(ulong32 *R) { \ t = c->R[OFF(z,0)] + c->R[OFF(z,16)]; \ t ^= Sbox[(t >> 24) & 0xFF]; \ - t = ROR(t, 8); \ + t = RORc(t, 8); \ t = ((t + c->R[OFF(z,1)]) ^ c->konst) + c->R[OFF(z,6)]; \ t ^= Sbox[(t >> 24) & 0xFF]; \ t = t + c->R[OFF(z,13)]; \ @@ -99,14 +101,17 @@ static ulong32 nltap(struct sober128_prng *c) return t; } -/* initialise to known state - */ +/** + Start the PRNG + @param prng [out] The PRNG state to initialize + @return CRYPT_OK if successful +*/ int sober128_start(prng_state *prng) { int i; struct sober128_prng *c; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); c = &(prng->sober128); @@ -192,31 +197,38 @@ static void s128_diffuse(struct sober128_prng *c) DROUND(16); } -int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng) +/** + Add entropy to the PRNG state + @param in The data to add + @param inlen Length of the data to add + @param prng PRNG state to update + @return CRYPT_OK if successful +*/ +int sober128_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng) { struct sober128_prng *c; ulong32 i, k; - _ARGCHK(buf != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); c = &(prng->sober128); if (c->flag == 1) { /* this is the first call to the add_entropy so this input is the key */ - /* len must be multiple of 4 bytes */ - if ((len & 3) != 0) { + /* inlen must be multiple of 4 bytes */ + if ((inlen & 3) != 0) { return CRYPT_INVALID_KEYSIZE; } - for (i = 0; i < len; i += 4) { - k = BYTE2WORD((unsigned char *)&buf[i]); + for (i = 0; i < inlen; i += 4) { + k = BYTE2WORD((unsigned char *)&in[i]); ADDKEY(k); cycle(c->R); XORNL(nltap(c)); } /* also fold in the length of the key */ - ADDKEY(len); + ADDKEY(inlen); /* now diffuse */ s128_diffuse(c); @@ -230,20 +242,20 @@ int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state /* ok we are adding an IV then... */ s128_reloadstate(c); - /* len must be multiple of 4 bytes */ - if ((len & 3) != 0) { + /* inlen must be multiple of 4 bytes */ + if ((inlen & 3) != 0) { return CRYPT_INVALID_KEYSIZE; } - for (i = 0; i < len; i += 4) { - k = BYTE2WORD((unsigned char *)&buf[i]); + for (i = 0; i < inlen; i += 4) { + k = BYTE2WORD((unsigned char *)&in[i]); ADDKEY(k); cycle(c->R); XORNL(nltap(c)); } /* also fold in the length of the key */ - ADDKEY(len); + ADDKEY(inlen); /* now diffuse */ s128_diffuse(c); @@ -253,6 +265,11 @@ int sober128_add_entropy(const unsigned char *buf, unsigned long len, prng_state return CRYPT_OK; } +/** + Make the PRNG ready to read from + @param prng The PRNG to make active + @return CRYPT_OK if successful +*/ int sober128_ready(prng_state *prng) { return prng->sober128.set == 1 ? CRYPT_OK : CRYPT_ERROR; @@ -260,31 +277,38 @@ int sober128_ready(prng_state *prng) /* XOR pseudo-random bytes into buffer */ -#define SROUND(z) STEP(c->R,z); NLFUNC(c,(z+1)); XORWORD(t, buf+(z*4)); +#define SROUND(z) STEP(c->R,z); NLFUNC(c,(z+1)); XORWORD(t, out+(z*4)); -unsigned long sober128_read(unsigned char *buf, unsigned long nbytes, prng_state *prng) +/** + Read from the PRNG + @param out Destination + @param outlen Length of output + @param prng The active PRNG to read from + @return Number of octets read +*/ +unsigned long sober128_read(unsigned char *out, unsigned long outlen, prng_state *prng) { struct sober128_prng *c; ulong32 t, tlen; - _ARGCHK(buf != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(prng != NULL); c = &(prng->sober128); t = 0; - tlen = nbytes; + tlen = outlen; /* handle any previously buffered bytes */ - while (c->nbuf != 0 && nbytes != 0) { - *buf++ ^= c->sbuf & 0xFF; + while (c->nbuf != 0 && outlen != 0) { + *out++ ^= c->sbuf & 0xFF; c->sbuf >>= 8; c->nbuf -= 8; - --nbytes; + --outlen; } -#ifndef SMALL_CODE +#ifndef LTC_SMALL_CODE /* do lots at a time, if there's enough to do */ - while (nbytes >= N*4) { + while (outlen >= N*4) { SROUND(0); SROUND(1); SROUND(2); @@ -302,47 +326,59 @@ unsigned long sober128_read(unsigned char *buf, unsigned long nbytes, prng_state SROUND(14); SROUND(15); SROUND(16); - buf += 4*N; - nbytes -= 4*N; + out += 4*N; + outlen -= 4*N; } #endif /* do small or odd size buffers the slow way */ - while (4 <= nbytes) { + while (4 <= outlen) { cycle(c->R); t = nltap(c); - XORWORD(t, buf); - buf += 4; - nbytes -= 4; + XORWORD(t, out); + out += 4; + outlen -= 4; } /* handle any trailing bytes */ - if (nbytes != 0) { + if (outlen != 0) { cycle(c->R); c->sbuf = nltap(c); c->nbuf = 32; - while (c->nbuf != 0 && nbytes != 0) { - *buf++ ^= c->sbuf & 0xFF; + while (c->nbuf != 0 && outlen != 0) { + *out++ ^= c->sbuf & 0xFF; c->sbuf >>= 8; c->nbuf -= 8; - --nbytes; + --outlen; } } return tlen; } +/** + Terminate the PRNG + @param prng The PRNG to terminate + @return CRYPT_OK if successful +*/ int sober128_done(prng_state *prng) { - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); return CRYPT_OK; } +/** + Export the PRNG state + @param out [out] Destination + @param outlen [in/out] Max size and resulting size of the state + @param prng The PRNG to export + @return CRYPT_OK if successful +*/ int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng) { - _ARGCHK(outlen != NULL); - _ARGCHK(out != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(prng != NULL); if (*outlen < 64) { return CRYPT_BUFFER_OVERFLOW; @@ -356,11 +392,18 @@ int sober128_export(unsigned char *out, unsigned long *outlen, prng_state *prng) return CRYPT_OK; } +/** + Import a PRNG state + @param in The PRNG state + @param inlen Size of the state + @param prng The PRNG to import + @return CRYPT_OK if successful +*/ int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *prng) { int err; - _ARGCHK(in != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); if (inlen != 64) { return CRYPT_INVALID_ARG; @@ -375,6 +418,10 @@ int sober128_import(const unsigned char *in, unsigned long inlen, prng_state *pr return sober128_ready(prng); } +/** + PRNG self-test + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled +*/ int sober128_test(void) { #ifndef LTC_TEST diff --git a/sober128tab.c b/src/prngs/sober128tab.c similarity index 98% rename from sober128tab.c rename to src/prngs/sober128tab.c index 49b0bb3..e25e271 100644 --- a/sober128tab.c +++ b/src/prngs/sober128tab.c @@ -1,5 +1,9 @@ +/** + @file sober128tab.c + SOBER-128 Tables +*/ /* $ID$ */ -/* @(#)TuringMultab.h 1.3 (QUALCOMM) 02/09/03 */ +/* @(#)TuringMultab.h 1.3 (QUALCOMM) 02/09/03 */ /* Multiplication table for Turing using 0xD02B4367 */ static const ulong32 Multab[256] = { 0x00000000, 0xD02B4367, 0xED5686CE, 0x3D7DC5A9, diff --git a/src/prngs/sprng.c b/src/prngs/sprng.c new file mode 100644 index 0000000..e45d674 --- /dev/null +++ b/src/prngs/sprng.c @@ -0,0 +1,132 @@ +/* LibTomCrypt, modular cryptographic library -- Tom St Denis + * + * LibTomCrypt is a library that provides various cryptographic + * algorithms in a highly modular and flexible manner. + * + * The library is free for all purposes without any express + * guarantee it works. + * + * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org + */ +#include "tomcrypt.h" + +/** + @file sprng.c + Secure PRNG, Tom St Denis +*/ + +/* A secure PRNG using the RNG functions. Basically this is a + * wrapper that allows you to use a secure RNG as a PRNG + * in the various other functions. + */ + +#ifdef SPRNG + +const struct ltc_prng_descriptor sprng_desc = +{ + "sprng", 0, + &sprng_start, + &sprng_add_entropy, + &sprng_ready, + &sprng_read, + &sprng_done, + &sprng_export, + &sprng_import, + &sprng_test +}; + +/** + Start the PRNG + @param prng [out] The PRNG state to initialize + @return CRYPT_OK if successful +*/ +int sprng_start(prng_state *prng) +{ + return CRYPT_OK; +} + +/** + Add entropy to the PRNG state + @param in The data to add + @param inlen Length of the data to add + @param prng PRNG state to update + @return CRYPT_OK if successful +*/ +int sprng_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng) +{ + return CRYPT_OK; +} + +/** + Make the PRNG ready to read from + @param prng The PRNG to make active + @return CRYPT_OK if successful +*/ +int sprng_ready(prng_state *prng) +{ + return CRYPT_OK; +} + +/** + Read from the PRNG + @param out Destination + @param outlen Length of output + @param prng The active PRNG to read from + @return Number of octets read +*/ +unsigned long sprng_read(unsigned char *out, unsigned long outlen, prng_state *prng) +{ + LTC_ARGCHK(out != NULL); + return rng_get_bytes(out, outlen, NULL); +} + +/** + Terminate the PRNG + @param prng The PRNG to terminate + @return CRYPT_OK if successful +*/ +int sprng_done(prng_state *prng) +{ + return CRYPT_OK; +} + +/** + Export the PRNG state + @param out [out] Destination + @param outlen [in/out] Max size and resulting size of the state + @param prng The PRNG to export + @return CRYPT_OK if successful +*/ +int sprng_export(unsigned char *out, unsigned long *outlen, prng_state *prng) +{ + LTC_ARGCHK(outlen != NULL); + + *outlen = 0; + return CRYPT_OK; +} + +/** + Import a PRNG state + @param in The PRNG state + @param inlen Size of the state + @param prng The PRNG to import + @return CRYPT_OK if successful +*/ +int sprng_import(const unsigned char *in, unsigned long inlen, prng_state *prng) +{ + return CRYPT_OK; +} + +/** + PRNG self-test + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled +*/ +int sprng_test(void) +{ + return CRYPT_OK; +} + +#endif + + + diff --git a/yarrow.c b/src/prngs/yarrow.c similarity index 73% rename from yarrow.c rename to src/prngs/yarrow.c index 333892e..cf5458a 100644 --- a/yarrow.c +++ b/src/prngs/yarrow.c @@ -8,12 +8,16 @@ * * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org */ +#include "tomcrypt.h" -#include "mycrypt.h" +/** + @file yarrow.c + Yarrow PRNG, Tom St Denis +*/ #ifdef YARROW -const struct _prng_descriptor yarrow_desc = +const struct ltc_prng_descriptor yarrow_desc = { "yarrow", 64, &yarrow_start, @@ -26,11 +30,16 @@ const struct _prng_descriptor yarrow_desc = &yarrow_test }; +/** + Start the PRNG + @param prng [out] The PRNG state to initialize + @return CRYPT_OK if successful +*/ int yarrow_start(prng_state *prng) { int err; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* these are the default hash/cipher combo used */ #ifdef RIJNDAEL @@ -105,13 +114,20 @@ int yarrow_start(prng_state *prng) return CRYPT_OK; } -int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state *prng) +/** + Add entropy to the PRNG state + @param in The data to add + @param inlen Length of the data to add + @param prng PRNG state to update + @return CRYPT_OK if successful +*/ +int yarrow_add_entropy(const unsigned char *in, unsigned long inlen, prng_state *prng) { hash_state md; int err; - _ARGCHK(buf != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); if ((err = hash_is_valid(prng->yarrow.hash)) != CRYPT_OK) { return err; @@ -129,7 +145,7 @@ int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state * } /* add the new entropy */ - if ((err = hash_descriptor[prng->yarrow.hash].process(&md, buf, len)) != CRYPT_OK) { + if ((err = hash_descriptor[prng->yarrow.hash].process(&md, in, inlen)) != CRYPT_OK) { return err; } @@ -141,11 +157,16 @@ int yarrow_add_entropy(const unsigned char *buf, unsigned long len, prng_state * return CRYPT_OK; } +/** + Make the PRNG ready to read from + @param prng The PRNG to make active + @return CRYPT_OK if successful +*/ int yarrow_ready(prng_state *prng) { int ks, err; - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); if ((err = hash_is_valid(prng->yarrow.hash)) != CRYPT_OK) { return err; @@ -171,34 +192,53 @@ int yarrow_ready(prng_state *prng) return CRYPT_OK; } -unsigned long yarrow_read(unsigned char *buf, unsigned long len, prng_state *prng) +/** + Read from the PRNG + @param out Destination + @param outlen Length of output + @param prng The active PRNG to read from + @return Number of octets read +*/ +unsigned long yarrow_read(unsigned char *out, unsigned long outlen, prng_state *prng) { - _ARGCHK(buf != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(prng != NULL); - /* put buf in predictable state first */ - zeromem(buf, len); + /* put out in predictable state first */ + zeromem(out, outlen); /* now randomize it */ - if (ctr_encrypt(buf, buf, len, &prng->yarrow.ctr) != CRYPT_OK) { + if (ctr_encrypt(out, out, outlen, &prng->yarrow.ctr) != CRYPT_OK) { return 0; } - return len; + return outlen; } +/** + Terminate the PRNG + @param prng The PRNG to terminate + @return CRYPT_OK if successful +*/ int yarrow_done(prng_state *prng) { - _ARGCHK(prng != NULL); + LTC_ARGCHK(prng != NULL); /* call cipher done when we invent one ;-) */ return CRYPT_OK; } +/** + Export the PRNG state + @param out [out] Destination + @param outlen [in/out] Max size and resulting size of the state + @param prng The PRNG to export + @return CRYPT_OK if successful +*/ int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng) { - _ARGCHK(out != NULL); - _ARGCHK(outlen != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(out != NULL); + LTC_ARGCHK(outlen != NULL); + LTC_ARGCHK(prng != NULL); /* we'll write 64 bytes for s&g's */ if (*outlen < 64) { @@ -213,12 +253,19 @@ int yarrow_export(unsigned char *out, unsigned long *outlen, prng_state *prng) return CRYPT_OK; } +/** + Import a PRNG state + @param in The PRNG state + @param inlen Size of the state + @param prng The PRNG to import + @return CRYPT_OK if successful +*/ int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng) { int err; - _ARGCHK(in != NULL); - _ARGCHK(prng != NULL); + LTC_ARGCHK(in != NULL); + LTC_ARGCHK(prng != NULL); if (inlen != 64) { return CRYPT_INVALID_ARG; @@ -230,6 +277,10 @@ int yarrow_import(const unsigned char *in, unsigned long inlen, prng_state *prng return yarrow_add_entropy(in, 64, prng); } +/** + PRNG self-test + @return CRYPT_OK if successful, CRYPT_NOP if self-testing has been disabled +*/ int yarrow_test(void) { #ifndef LTC_TEST diff --git a/tim_exptmod.c b/tim_exptmod.c deleted file mode 100644 index 67fe445..0000000 --- a/tim_exptmod.c +++ /dev/null @@ -1,77 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ - -/* RSA Code by Tom St Denis */ -#include "mycrypt.h" - -#ifdef RSA_TIMING - -/* decrypts c into m */ -int tim_exptmod(prng_state *prng, int prng_idx, - mp_int *c, mp_int *e, mp_int *d, mp_int *n, mp_int *m) -{ - int err; - mp_int r, tmp, tmp2; - unsigned char *rtmp; - unsigned long rlen; - - _ARGCHK(c != NULL); - _ARGCHK(e != NULL); - _ARGCHK(d != NULL); - _ARGCHK(n != NULL); - _ARGCHK(m != NULL); - - if ((err = prng_is_valid(prng_idx)) != CRYPT_OK) { - return err; - } - - /* pick random r */ - rlen = mp_unsigned_bin_size(n); - rtmp = XMALLOC(rlen); - if (rtmp == NULL) { - return CRYPT_MEM; - } - - /* read in random value "r" */ - if (prng_descriptor[prng_idx].read(rtmp, rlen, prng) != rlen) { - XFREE(rtmp); - return CRYPT_ERROR_READPRNG; - } - - if ((err = mp_init_multi(&r, &tmp, &tmp2, NULL)) != MP_OKAY) { - XFREE(rtmp); - return mpi_to_ltc_error(err); - } - - /* read in r */ - if ((err = mp_read_unsigned_bin(&r, rtmp, rlen)) != MP_OKAY) { goto __ERR; } - - /* compute tmp = r^e */ - if ((err = mp_exptmod(&r, e, n, &tmp)) != MP_OKAY) { goto __ERR; } - - /* multiply C into the mix */ - if ((err = mp_mulmod(c, &tmp, n, &tmp)) != MP_OKAY) { goto __ERR; } - - /* raise to d */ - if ((err = mp_exptmod(&tmp, d, n, &tmp)) != MP_OKAY) { goto __ERR; } - - /* invert r and multiply */ - if ((err = mp_invmod(&r, n, &tmp2)) != MP_OKAY) { goto __ERR; } - - /* multiply and we are totally set */ - if ((err = mp_mulmod(&tmp, &tmp2, n, m)) != MP_OKAY) { goto __ERR; } - -__ERR: mp_clear_multi(&r, &tmp, &tmp2, NULL); - XFREE(rtmp); - return mpi_to_ltc_error(err); -} - -#endif diff --git a/zeromem.c b/zeromem.c deleted file mode 100644 index 15181ac..0000000 --- a/zeromem.c +++ /dev/null @@ -1,19 +0,0 @@ -/* LibTomCrypt, modular cryptographic library -- Tom St Denis - * - * LibTomCrypt is a library that provides various cryptographic - * algorithms in a highly modular and flexible manner. - * - * The library is free for all purposes without any express - * guarantee it works. - * - * Tom St Denis, tomstdenis@iahu.ca, http://libtomcrypt.org - */ -#include "mycrypt.h" - -void zeromem(void *dst, size_t len) -{ - unsigned char *mem = (unsigned char *)dst; - _ARGCHK(dst != NULL); - while (len-- > 0) - *mem++ = 0; -}