From d065b145081387316501f67c0983c89cfc0c930d Mon Sep 17 00:00:00 2001
From: Tobias Frauenschlaeger <tobias@wolfssl.com>
Date: Tue, 25 Aug 2026 08:04:28 +0000
Subject: [PATCH] Give the sniffer's X25519 static ephemeral key an RNG

curve25519 blinding is enabled by default for the C implementation, in
settings.h, and draws from the private key's own RNG on every shared secret.
The sniffer built its key with wc_curve25519_init_ex() followed by
wc_Curve25519PrivateKeyDecode(), and neither sets one, so the shared secret
reached wc_RNG_GenerateBlock() with a NULL RNG and came back BAD_FUNC_ARG
while every argument it was given was valid. SetupKeys() then reported a
server and client key mismatch and no X25519 session could be read at all.

The library's own static ephemeral path already calls
wc_curve25519_set_rng() under the same guard, and the sniffer already calls
wc_ecc_set_rng() for the ECC key a few lines above. Only X25519 was missed.

Regenerate the two X25519 captures. Both were committed as a bare 24 byte
pcap header with no packets in them, so those legs had never tested anything;
they now hold real traffic and fail against the unfixed sniffer.

Drop the has_packets guard added earlier in this branch. It existed to skip
the empty captures, and with every capture holding packets it is dead code.
Removing it is also the better behaviour: snifftest already fails a capture
that yields no plaintext, so an empty file now fails the suite loudly instead
of being skipped, which is what a missing fixture deserves.
---
 ChangeLog.md                             |  28 ++++++++++-------
 scripts/sniffer-testsuite.test           |  38 ++++++-----------------
 scripts/sniffer-tls13-x25519-resume.pcap | Bin 24 -> 24838 bytes
 scripts/sniffer-tls13-x25519.pcap        | Bin 24 -> 16169 bytes
 src/sniffer.c                            |   7 +++++
 5 files changed, 33 insertions(+), 40 deletions(-)

diff --git a/ChangeLog.md b/ChangeLog.md
index 947b8a8414..0c9f959591 100644
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -172,18 +172,22 @@
 
 ## Fixes
 
-* **Fix (sniffer could not decrypt Encrypt-Then-MAC sessions)**: the sniffer
-  never handled the `encrypt_then_mac` extension (RFC 7366) in the ServerHello,
-  so for a CBC suite it passed the trailing MAC to the block decrypt along with
-  the ciphertext, the length was not a multiple of the block size, and every
-  record failed.  Since wolfSSL peers negotiate it by default, this covered
-  most TLS 1.2 CBC captures.  A build without Encrypt-Then-MAC support now
-  reports that, once the negotiated suite is known to be a block cipher, rather
-  than failing every record with a generic decrypt error.  Both the
-  `client_key_exchange` handler and the TLS 1.3 ServerHello path also overwrote
-  a specific error with "Server Client Key Mismatch", which hid the reason a
-  session could not be decrypted; they now keep an error that has already been
-  described.
+* **Fix (sniffer could not decrypt Encrypt-Then-MAC or X25519 sessions)**: the
+  sniffer never handled the `encrypt_then_mac` extension (RFC 7366) in the
+  ServerHello, so for a CBC suite it passed the trailing MAC to the block
+  decrypt along with the ciphertext, the length was not a multiple of the block
+  size, and every record failed.  Since wolfSSL peers negotiate it by default,
+  this covered most TLS 1.2 CBC captures.  Separately, curve25519 blinding
+  draws from the private key's own RNG, which the sniffer's static ephemeral
+  key never had, so every X25519 shared secret failed with `BAD_FUNC_ARG` and
+  no X25519 traffic could be read; the key now gets `wc_curve25519_set_rng()`,
+  as the library's own static ephemeral path already did.  A build without
+  Encrypt-Then-MAC support now reports that, once the negotiated suite is known
+  to be a block cipher, rather than failing every record with a generic decrypt
+  error.  Both the `client_key_exchange` handler and the TLS 1.3 ServerHello
+  path also overwrote a specific error with "Server Client Key Mismatch", which
+  hid the reason a session could not be decrypted; they now keep an error that
+  has already been described.
 
 * **Fix (sniffer reported plaintext lengths that included the MAC or AEAD
   tag)**: the length returned to the caller was taken from the record size
diff --git a/scripts/sniffer-testsuite.test b/scripts/sniffer-testsuite.test
index 8ef48e06ad..727d53e9e1 100755
--- a/scripts/sniffer-testsuite.test
+++ b/scripts/sniffer-testsuite.test
@@ -104,24 +104,8 @@ fi
 
 RESULT=0
 
-# A capture file holding only the 24 byte pcap header has no packets in it and
-# cannot test anything. Report it and skip the leg rather than passing silently.
-# Regenerate missing captures with scripts/sniffer-gen.sh.
-has_packets() {
-    local pcap=$1
-    if [ ! -s "$pcap" ]; then
-        echo -e "\nWARNING: $pcap is missing, skipping\n"
-        return 1
-    fi
-    if [ "$(wc -c < "$pcap")" -le 24 ]; then
-        echo -e "\nWARNING: $pcap holds no packets, skipping. Regenerate it with scripts/sniffer-gen.sh\n"
-        return 1
-    fi
-    return 0
-}
-
 # TLS v1.2 Static RSA Test
-if test $RESULT -eq 0 && test $has_rsa == yes && test $has_tlsv12 == yes && test $has_static_rsa == yes && has_packets ./scripts/sniffer-static-rsa.pcap
+if test $RESULT -eq 0 && test $has_rsa == yes && test $has_tlsv12 == yes && test $has_static_rsa == yes
 then
     echo -e "\nStarting snifftest on sniffer-static-rsa.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-static-rsa.pcap -key ./certs/server-key.pem -server 127.0.0.1 -port 11111
@@ -133,7 +117,7 @@ fi
 # TLS v1.2 CBC Encrypt-Then-MAC Test (RFC 7366). The decrypted lengths are
 # compared against known good output, since Encrypt-Then-MAC changes how much
 # of a record is payload and a wrong length still decrypts.
-if test $RESULT -eq 0 && test $has_rsa == yes && test $has_tlsv12 == yes && test $has_static_rsa == yes && test $has_etm == yes && has_packets ./scripts/sniffer-tls12-etm.pcap
+if test $RESULT -eq 0 && test $has_rsa == yes && test $has_tlsv12 == yes && test $has_static_rsa == yes && test $has_etm == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls12-etm.pcap...\n"
 
@@ -160,7 +144,7 @@ then
 fi
 
 # TLS v1.2 Static RSA Test (IPv6)
-if test $RESULT -eq 0 && test $has_rsa == yes && test $has_tlsv12 == yes && test $has_static_rsa == yes && has_packets ./scripts/sniffer-ipv6.pcap
+if test $RESULT -eq 0 && test $has_rsa == yes && test $has_tlsv12 == yes && test $has_static_rsa == yes
 then
     echo -e "\nStarting snifftest on sniffer-ipv6.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-ipv6.pcap -key ./certs/server-key.pem -server ::1 -port 11111
@@ -207,8 +191,6 @@ then
         [[ $tlsver == "tls12" && $has_tlsv12 == "no" ]] && continue
         [[ $tlsver == "tls13" && $has_tlsv13 == "no" ]] && continue
 
-        has_packets ./scripts/sniffer-$tlsver-keylog.pcap || continue
-
         echo -e "\nStarting snifftest on sniffer-$tlsver-keylog.pcap...\n"
 
         TMPFILE=$(mktemp)
@@ -235,7 +217,7 @@ then
 fi
 
 # TLS v1.3 sniffer test ECC
-if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_ecc == yes && has_packets ./scripts/sniffer-tls13-ecc.pcap
+if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_ecc == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls13-ecc.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-tls13-ecc.pcap -key ./certs/statickeys/ecc-secp256r1.pem -server 127.0.0.1 -port 11111
@@ -245,7 +227,7 @@ then
 fi
 
 # TLS v1.3 sniffer test DH
-if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_dh == yes && has_packets ./scripts/sniffer-tls13-dh.pcap
+if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_dh == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls13-dh.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-tls13-dh.pcap -key ./certs/statickeys/dh-ffdhe2048.pem -server 127.0.0.1 -port 11111
@@ -255,7 +237,7 @@ then
 fi
 
 # TLS v1.3 sniffer test X25519
-if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_x25519 == yes && has_packets ./scripts/sniffer-tls13-x25519.pcap
+if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_x25519 == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls13-x25519.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-tls13-x25519.pcap -key ./certs/statickeys/x25519.pem -server 127.0.0.1 -port 11111
@@ -265,7 +247,7 @@ then
 fi
 
 # TLS v1.3 sniffer test ECC resumption
-if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_ecc == yes && test $session_ticket == yes && has_packets ./scripts/sniffer-tls13-ecc-resume.pcap
+if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_ecc == yes && test $session_ticket == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls13-ecc-resume.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-tls13-ecc-resume.pcap -key ./certs/statickeys/ecc-secp256r1.pem -server 127.0.0.1 -port 11111
@@ -275,7 +257,7 @@ then
 fi
 
 # TLS v1.3 sniffer test DH
-if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_dh == yes && test $session_ticket == yes && has_packets ./scripts/sniffer-tls13-dh-resume.pcap
+if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_dh == yes && test $session_ticket == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls13-dh-resume.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-tls13-dh-resume.pcap -key ./certs/statickeys/dh-ffdhe2048.pem -server 127.0.0.1 -port 11111
@@ -285,7 +267,7 @@ then
 fi
 
 # TLS v1.3 sniffer test X25519
-if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_x25519 == yes && test $session_ticket == yes && has_packets ./scripts/sniffer-tls13-x25519-resume.pcap
+if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_x25519 == yes && test $session_ticket == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls13-x25519-resume.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-tls13-x25519-resume.pcap -key ./certs/statickeys/x25519.pem -server 127.0.0.1 -port 11111
@@ -295,7 +277,7 @@ then
 fi
 
 # TLS v1.3 sniffer test hello_retry_request (HRR) with ECDHE
-if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_ecc == yes && has_packets ./scripts/sniffer-tls13-hrr.pcap
+if test $RESULT -eq 0 && test $has_tlsv13 == yes && test $has_ecc == yes
 then
     echo -e "\nStarting snifftest on sniffer-tls13-hrr.pcap...\n"
     ./sslSniffer/sslSnifferTest/snifftest -expectdata -pcap ./scripts/sniffer-tls13-hrr.pcap -key ./certs/statickeys/ecc-secp256r1.pem -server 127.0.0.1 -port 11111
diff --git a/scripts/sniffer-tls13-x25519-resume.pcap b/scripts/sniffer-tls13-x25519-resume.pcap
index 348ba487622c24dc5ef8a5804cddf48abb91f02f..bd6b135243e1c178c781e8c6f87247649dd686a1 100644
GIT binary patch
literal 24838
zcmbVU2RN4f_kZk_z4wfeoxOJ?L{>7Ak%*AJx2)`)QL++ckI2YOMu-x!S0owP|NDM;
zyidLHzkct1UH5f)UEa_6oX`1w&-dKtKHUS&C0U3NWXL}kG6Vtm4=c%tyE_jsA<Dqd
z;0=GFL*yY4F`5u5h!iRfuQvpO0Nw?i>=x|H@oeB<W+EOA9dJV+h{%US$cX5eszf`4
z;O`NTkT5~y0mrkDArKH*tOkb6Zc)(rDE#tc0G&OP;P4$hvaj<@Du@n4o&=C(088Kv
ze?d84qIn4AEDS?F=FASDr~BYRqz*0s91)KAg2*7(7AH)|H~<CS@D~)Zk0umEq)z=S
zA{l_#a)L+%B9b5>L6QK0<B*WPn)k+b?(l8Z&#v5i|JLctx9VT#&a+&<B<bGxu;S)+
zBp@Fl0`RAn5Do|uA`lfm2s4BULJgtQ*!$r<df(TA4pmSgDYE>4*J(4j^i{TI2O_nD
zsj415gdO-FkdPtR5Hbh}IvP4EIu<$#Iwm?YItD5N3IZ|$5&{Gh2s$DFMgoBxB7h-h
zJPP^*;O^-H64!(7vLM6UJq}Ge5Sn&)0RdOjfUppO0_HhmLb3qmz#IO83K&cL21I1e
z{wpFVVDOQEFho$m8;B5yHWHGIReULj<Cd*}NRjGv^*8-_i#i<>;za3DAsH!8jjsX_
zLclFfKsKmo#o31Sw;BtrGp!XWs2_CxYGd7r(m{DIH;2c57%o160*D4^1`_T92%jzi
zO&Ca+Mi55$cn!4!YiJ){0?>VsG>B;Gf(bDMd<Sp%3o3y+aRXF>Ss3E6sQXY+K?&r3
zmw*(IfHa<ebk~S2*dnFehM#(=OP@eYR^`iG9MIYwz}gx7!=d~IVAlTOuS9+te+K~3
z9Uu<g@E4T-J>o_v|8^MS5q~A}6aKgU&Hqx*+ZE2dQQla4<5g_w{h)vc+8=)OeVJz8
z`07GWZClbFK^x;vKyR&YT@#hf(ed5A$Zstebk6B)=OUoa@x!RVIj3=&b8!Ho9|{C|
z|LGjc1L7tSk-h<jc<h`8%sC{>e>sODdc`H_7Lh)U|C8hks_l#&D@pZjDb&x}mC5r%
zQ5U|h@Ko{1X*Nw?7dL#5%N~49Ue&UnxP0?-uYg0pF3R2^9yRh*wYgqlJh{HHX><VV
z$b6;b#y!p6s5_$*GKA9HqJc%jb&Iqq2m@pC9QLVSK3#X$pdYCh;EWS=KWD2~zoT9}
zzC7hOow$VLtVqk~{eU|<w@=`Ch4}WvK*kVnS#xLS=R)$k<-F#``aXkEc-|Vw^byz{
z>UW!z)Ng)g#t!r{zo<=Nwo^9r9Z^-xp0&GaN9C%L7;hrOr`qLGO#UK{!9j!@=t6qk
zcF#Wc(si+awED&IgKLM&{>5hQz4Yzt&jp@eTdkUwyG89<g#62n;+Lxu*ZrH#FW9Sy
zhn0zv#DBa_?GkyEA9l`_qD<CIyX;z8kWjY!g3mWfj+{#_J+*g-c1IsYZF5{WuTV_s
z|3$;c_t`D#+77W!F1$tw%ys*gddZ(55R!2shldKJFD02K@_&67XV=&!`|9Xa==QBu
zbi49vK9UlnhJfq6&?bwfnT#BVhltLDW%cL3%%Co7y?w=bp<R94IQs^R%f9ot8Glu6
zSJQLv*5$d`YY#AEIBL#o=2193o-Xc6Dq1yD8Nu41=crfoP!Yi^ui=kV4kMW3{H%4k
zE+7o)l{Aw0E6iAX1(V8!CqZ8s&EMKQ`aEi1%X2?DJl}h9{(RdOXWMxP7KWY#Da6iY
z+4uV*vNc3=j@r#X{kp9;#NE#4wKEc0UF)XWnr`AOxL0X#{eZygJ<Sh&R+T}_9!sKy
ztZvDW4ntyY)w-`F@_CEb(-;-X(3}tLa__U#Vd;{5?!9YlPhn&_g7Awlm~S0fis!DV
zfo{ZVOK}kkI{ho{m%K?;wboK4zBr{giHb9Ro9%+DJ2U(V^(L)Mhwkw<i`;yYF)Z&Y
zw%jE`m0L!P-Y}?5WJNGKERq)o?Om-HS3&DkX|c9ASV1UZ`_y7TuCI6gV+>E9)O3>w
z3rl(&z4*J=c+!?_4d-d7jlO$gGtZ6h3+C-7af`LA2~FyAbnLJz#V}gTh58xiy>X)o
z=(xB^DQiR;Fi8@eD>l)2Q&;01xx`Hgp~!xlfsbRvOSF*O*p44zH#+CO$~lEJqE@jA
zeI)aye3-$BXWaV5k%jDHSO7Zq^6-LX@gDlmB+lB@D(Ah>yeO8t>cWnYN0uXo7zGU)
z1#jCdJ3YfDt;#8B`__k?Eg6)8x(N@E=--K(2k}aa_mIXWi*!td=KQ?mowfBCqgto<
zvUp22^&!PtsyX-Q_hdB!9{P5)aC*-3ro4@k{vlHAcWW$+RR<GDIX~Wwuq&%iQrRD~
zN1}YUr<wnuS}`TY$o+=^w|X|Gjjv@?K`d)!N)ZIIt;5`){H~@oXx!~(+&C}pBSXnA
ztuI5!qu$>aybv-GCOTK^(`-?fW{%BOgP{9he|JXdVY6+v<n250S?9j5zg{U*V7%k7
zz5ll0Q9?frr1xHS*+sO3QoN)aB1T^@+ja$Xst?`m69*n)5iAT^K9X+Ao^-8H45((u
z-1mHw<2PI)TJCs|d06a+uU#ydCN^a=+y0pEfl1Ka0*!Dc|FTdlac7Q-3!#vE0mYSm
z6M4dwRP7<N1Euc~#$wi%K2%E>$&1lnZmtpU(RO}puyE^>>X2}u!}<$HgBfWtyNQT5
z+M^2OmUWui8lw}xQe9v6QHVub+TpC~$jxU&8YQf6U)Q~*Ht(yYFz;?NG{GXml%S#Y
zn37Q}`FpvJX&!}%Yzdz*2l3{#7$*xYxeyumqY)3!NYvY4j!!r{$45eQ{3TdM{wK$)
z#sE296|RUoIe@<ah?zig2XFWbdVs|cH$xAwEEwWZj#rI=<@kf3f8}_HUS06ku!Jwu
z+F;cB3w*+-%LF_esMk`vZWm;xKHYZN2`eAC!dXH8;v0{$kC-=ABH?!#dwb+5<yO6k
z43))4o8d{s>PE)eF5M9``niG!@rZ}_^BH=VFHqBf3XGqvz$2&vd@#On3ap-{z!re$
z0k{s{@E2488{)T61>V9Cj}=%wQNZNi3h<{9n-sovewO?3E9pE|g5A$b{!qz)o0k?S
zkwgN@y4QCFSj@LX?^oP;cdhwKNbt359GM7Ze4uyRXL}a~_3qCH3!uPKV>`{eOKzAD
zEZ`{yyx}j<JEVP@Xb_R&4$QlM^a2pcAgTy!N8SM?8!=e20R<M)+s9~aIA0Ly8_sR|
zJ)J0!M=$*GfwlBb_1A_NA_uD?Q+qm{>ymWNFO&-BVx@PGGCPol^6{yhJ`T@z^-@;(
z6^(YHWD1jW5>P27P8-OYKiIAN_>Fa%((aX_@+Fd3=7uqD#^(m(m%jzeK0poZ7yneI
z!dv}L<AwOp51;clcE}LI97~>0d`qlV5?l9J-F)KES`i=6@<U72LWwGC-nTX)4DZ5M
z<AfK@Y4^6t&h>YHqVe-s%d)~!Q`SW)&ipL&;;G8ed)c-XK5u)vJ=wqnsj#c4AJ8S5
z6IvHLX7*&~2xTki*`ka*-#1%!q^w+}9qX5O=_nRZ>MGStcb(nnimMpwXS=MVmav9&
zi>}NxCS`7%;erI`IbGSyhat*sWYnUxqZ{lRUIX|}kdJsx{BOq^hg((=Qbuk$8uj_D
zWGalTi{JN8qil{!62K_fF$w&J!X_hAoY{LJd%=k75^;rXrke!CIf$p25vtNB7gRES
zWkp-&P_}0QNPY*=R<Uyu3EY{9R37bQWH*sRiWci`eNj}kRVlNcxvkzlQ}cLHmw+sN
zE{~y~u3n~M_-7b8LGU~64<iXvpI9?kA6x6(S;1j`|6NM5O4;~VDsxy6<q!=wuXXis
zV^QQIWZ`R@q&-|;MEs}?U#Y%FrDkp*rT%&Cnz)er!sLU-_-RYQ=9Ua|jy8<f`1hsa
z4Umj3wmpkP#}>tK=_G9}_ef_!x!K$=I?+O6n}PW`E*Ec)j&D%-Vh<mo^&>(2$X()6
z-&}WMEAAH4dm2%5xw$duo;sgGHELMem$WIRu}s;sFBG`i&(k(uwXrp@{K_k!tkte%
zi&W6s3o+1Tj9cdwQ4C0C6}j9kuOunC=$7~jXZD3^^W=f}hs+r=p%nQnucz;f@Ttl;
zo67W%<q^%M#s^o+#qH?(zt*$8)%y(j+4stfKOE7%<$&Byjwq{)V3GrEe5C>>VKT8?
zi1BBI1@Qor(#L&KhgsPn;;rSdO_J+53$~$@;goN~m~qpEOOoGoiZgw><xKisf2oA_
z{MKWmnTzF*l6AF7p0W7!<R@}PD^J?UXb0GGxUYST&DiJqjOSV{TlkWROgO^Tg#U8@
z;g5C|)_u9i?ZwZy2J;2Afq0|)%GXx4)qgJTU3uBN5SR7EAbxB<muJE7kw8SvuiSd`
zC5HtTB6FSi!Pi;4@0HCrx!%_N!nu2wCD@SkUU?1rYT7UcDwYVZGcqOjqvxoZO=KB&
zJ>xk!Bb#Gv6k>IrrA4!_aX-=Py79xi{>H5Jt>vKktJbSvvWWvyLne?Dz#INLO8qo3
zU}~WL@Ox@Vj)o>1AT_{JKU`{n=-E%&_g%Y<J*#CkQ_lDrrERYY*-({gz)jdsJ%uNs
zu~5z<0NKIY9&&Di<p3d*(z@M&`6i+EFKu)doq4A5`<&TNas|>dt3K%QK={*AQl<HV
zRn+D<?HcnyzR3XJ)1TgmTcC-0AIA46QLC}BFDHKolA|2#@B`A=V~{h5m<u4Dp89EG
zp$crk5RZ~$^7j)3j#K}!0*}F`Pkz;$d|#4*vSp*6O`_KNGntq@287nKKTEGrZ$BQa
zQ@Z~3ycK;R-BkYK*6r*Ksn=emNmB)mAeUi)i#ZSm@P@yj(a@!d1G&&({>~+Z^@NMc
zZ;2Yph1S7m-k@0iz5x=BqkKlIDkf(f`JI=n*zS!S>Vdnh4?(Lb?wAlVpcw$(@E2$m
z0h72Dswp$f>OY#MTm_B?xr2j~!w;${s6byId8_^P(4M4tM>}js^vnBgIoIe7WrkMz
zHN$_>ahTA5r8eMYk6p>-wZo%+o|RgRr~#R&k?GAQnc!1-{~^*LtG_4d0><N)mrU;v
zVy#MjipmLVONysm@}6T69GVhOLMqc_Cfc>>=vY`^wi)gyy7kdU5_yeRy8Ok1vK#Ee
zxZ!;04FcCf84O|{Hi+{t5!Rp@XoUEh=U<+F+x}cp&7Q%NS{f_f^)8v~54JSJ(2!k(
z3ab9kO;7L@WDrxsF)IVDtv?4Ey-uVezh7n?`EAYy)QQ9c6Ji4h1m5r$G&;t_ZBU(h
ze%DDI!oGa0)AfJr#M1Np@S#{J@<gTkQ`3gq$SmhK8r!cr8JD>cO<={FvDI7fCFrKB
zMuXOA0P8mZv)~PXL9MG0w?nN@{$c&%iFK)eTPH*^6kHFwYZAq<Q$ksY87<o;@g20p
z4p=&4k99yTZU13O4r&Si?|ba}ncQjOK|~s27~;_$OS$?eTwNY4Kn{+%!|yS|SizjT
z<M%rPa_St}JY1gT>mTfc+${l10)RZ=4SzvZ0{WMrC9!UprK7d1E)V{tI#3+#em-jR
z)c`2U!0*5t{(_>2?Q(%A(xEVvf^K$;CMK;~@Gt-D?G78ay##*`>%eAso`rnO55BkC
z&8CS+0HDAAv$rc}X1EEW!;o_U<kO?J%MIlm{RijQ06HO%8Bcn<AR>qiYI)HM6Y>Sf
z3E&NXfhr($@A80%lAC`;1p0D^O-CyZKzs!v0<B4ec%YXWjf507IWMJ7+ZoBGW-Pj?
za^75<tRuD^(Q^v7$djxiIo6EsBX()>j|E6VqN&qf=x+2Ac<a!gp}k)Og@5&aN3qnS
zlRI-PY-l9e4I8n>FF(h&EgXHI-eS~UHic-V_g{Oz5LU=1NExJvhO9x_UbH>6Xzj5`
z{u7K}g{D-g6)Id8)$s0;NYZ8HLag0VNg5VB-i@XdgoHPG?vn{}BSj94rAzo--xP3P
z(nj*Zu^YL&K`a*@7u9vUcAUB5mPK!^W$lN#ZOp8VD)pX@T}-owqhZm^94~Pt<rEbk
zQYsnB;!=r375uE0F4QO~dp&7)eu(Va4NW1=|4%0K^L|qhdO8AEDn66N^25Eg+QmuN
zp<Tx`rGyXmRNP!ez8tuwgQ{Sx<$ze9zIsS+fw4Y+3l?i&-+=3qu!%`W8-Dcwaoz&s
z4I;J!h;2Zyz#IO8?xAW@6A+PU<gbWeSNFxy>VYAGjcp%9-~kN@X(`um5Y4PtCU`IN
zJmZhIesYNqo3CH++iHGbRT@A+#Pa{H9<cF!35X~F_rJHlC(aaVmlt$P`Vq{nqtu|I
z4TzNlFVyj-*aC%e@II^kO?n$dJTD7FJeEEQDm`5L8zvOA{mrT=Od6v0Wz$1gJ<MLb
zUaDV-y-CiD0kjqdSUWw?yL?dokuYm;{L4<`p9>(KUO<tWLisbn5Rdtno$xpLJ<!ks
zDiDi=l;+}e<*TgQk|aB$OPu-gL`ELoosI4(Hd`{J_e_Lr{ahR&A~)lLbA<-1A4qa_
zU4W*n+Oxg81obWg#s$v1mD9Y#^*PJCU4AH{#$OS^=p1_oi#OCeN%o`)Y;l_X5c6;8
zL<*Oix-6@Auk;nt%S$=mCvu1)aOqgoyVjQd%dXc@re_+ng5FEBvJ{M+8NdZ-s6+36
zZ7Ka-0Vo&KKe$8zYi|WOMx_qaeoM$(AQuL$op#0>82AMKW=Rxr&H~8k&obCm&o{<6
zye8h1sdUv`tN;yX0ESPm5J}BI!%V?2!^a_B0YY2}HGEtl!Y|Rj0wnUypc$M+PEt+G
zAG)4S?T>ae)+LSB=F`d*IE=5-5nSMz4b>)r(5iW{+c`Go1&J|ECBM%}qg|r4iu?5t
znN5xdwSx|oOz+owp*x`yJ)b>Q4s#y#h6LOHs=Fv{&3EBZnN$92$ylz5_vbD1g1m<{
z9$xH>XvM}}o_}cb#<)r0<D&)b5KXn%aJhsUe$<)Z?~dc=5~x3wj&;`>v(zDIQP+##
z?T?86LH9i|JT)A{D)0i|-OW}?ncb?DmcsFzZM_?BrE4OXZ}p;VcRwk8&IRf;3g~ot
zg-B`+>U5s_cb$;lp6GO3A;Rm#!YcDD)MopO)XTtY8&09lmv_!1P}(`+O9VPQdi7Rc
z5xe~KRvZ}~HfVhYuzq@lNNNGK{zoD~T0OBY_3w>HDBZSCR4KDE!jBZ0h^;EC6=bmt
zT3QAyosmQYp$qYk`bejeO%n-hz`@rVU}XSJf~#jDlHP%Gzwx_r$mme+`2Qfnlmj{L
zovFsI5R{`G4DmP>034AqplkM64fu^q7^C~DC9eMdxRMP7A*6f#QM3uPA&c(&Kh~VU
z*@=t+ZeXzHd;vVQSp$51MUU#uzt^1W=pf(AuTJ=WV7FLwb=e0|{;WCQsH*sYzXvNr
z5c!e#S;!Cwi2U0;!3Phick=-H!JjoJ>f;x0Ky(;#K7f4sI#|bma<2M=^8tXq0KX0Z
zL|+gY<eDyVG)piJIskV;tA@UHOeiA7UlG9+*K)LmVTfSWkOZ9ez&wHbBE@v`TeZT)
zI0>U4GfS)KT*ij8BA0k738!mEs=0w89gz?b_|t#S6O;#kemaKF%J;O!VQF+<u7r#2
z&eChvUEil)-$toaSTOz9ni6!k0C4wo0V$!U3;oG?1teB5Gz*KauBq?>9*4yjM0Aln
znkC4B6A%0mDqt)n^o*eAfC=~;A}C<+k$^BnP{8APf>GH+woUDnlKZosX|`&;V=_C!
zS10Du-N_zX+<I&hF%Ka`{GaCuK*GrY;nO8p$AU(@0!Fw1y6#<5J*2uW!%F~*IEY9f
zbu>$0_%{jEDWTbk-WG;<Bth3@sHmU>a=%LeEvOiS);?|H=}eO2A@lEj<qm8jCO7k@
z?gXuo0M^dne-6sO9A*uUzv*fGX#vF3=LsmGnT!4!4Dp!1=?VW^|K@+`z$Nf%U*v6q
zhiqE29NRov)IS$P3x^7V4axCYT7_QGB8Lsy#4}QcmXWV+me6W!3eG+>1f63z+c|8g
zb7e3paLzqG%{eIm@$`8DN?{O@N(qK|?A&9RbFg^=*!l#5gCd&a=%oM7KrI!=a3X8H
zEIUgvn5NqI#`+URS^{-_zpXhthF{k;hSVY}Bwlv3wCO)+?HaOe+-hSfycE1z;8mD%
zITe-F{c}|rPPNRTmW-n=y=AdvGp7sQhLljLMC<m8A4MpwT<XsEuu*+44+N=K4N)iO
zZ?luoqe;|x^<igUX=`Dx-c)#5HFoP)c<0(@O3aJzU4rH+r7ZG4R$Op;80;UZK$evj
z_r`6>;r<>yj*PR?P|ilLMt=&2%r)D+FH)%8%wJk@2}1|RlD5i6+p?2I=q52FzVYtK
zCDv@#u?XDnAC0N5S9TVpGwgodJmUW>Gu1D`iWB3(sQTxvXLHStF_RaKX%X%7TWrjF
zV#VnMFFk2)D@hkPKl^m(J>O!g>Eyo9HG)uzZrMpPgC$1!(s)&$pUAx*TW^>1WjYs)
ze&Jyqn22~dS@Yb#by75L{>^~US42;$pH6F<-DtyXsEe2M-VG=6Z3!EzR4cgH@oHW0
zZ2D@bL9089Z^@_DLq(dh&f;Jn^^C{T??)2eG6{OZ=ogi1=MS5^>+bEQ6;~^Ys##9*
z>wA}&p7)_8#mm&OL2;`6GTMNAp;YIB$ixO8Q9Y9}i=VosOSII}tgtZyCe;41{;TSb
zRkk3eO|-H&c;BVH##ap})e#(VO<l--R^76tsFZ(Z3b7AemSdZAbHn?tkafU9pl&$$
z5no+S?bCy2*>`l(o=Xc^QYGXdTt%4}a}qdw6Xzv1x$lHASz|(3Dom@y7I`VmX<F6r
z65`f}+RZH4_{X=}<a1U&MoGC@4qC-s7DRc!Kt8<ik&m;<)#@BdQa6T#NQ2n-o+pCj
zTeVr-UMY;{Suj&sX}J5O$@ZTz+>Xb|za+0!_>9SNDH8W)w&(VHTkrCa2o9W=W$#Gi
zmbb`zCT>XU=@?ZQzN6W$&A@6%)~<aPx~BFi-yd6MZRR00&LTc4E=h!P_P1~3i;=rM
z{`?_rhjcpY(lKK>>}yfF<1Ax!ly@k%SfW|m&!c8r$j3YMN+UI)vB>ec2y^|!n6gou
zHN=UKR9Cvxf<R%&9KnZAFuGE!9x<QJ%vIM<sJ~r=z>D98ROR8|Hf+!=|5$j&d-ro#
zw9GBPZyCb{ChW8;N+UyC7@tyK9=Hg$UoF8G)ki`Wz7&k8DeR3+M9vd;AoSI0<PDj+
zJXfp5dM1uR<D^kr6dO01t_a56;Xo9(_y#K-6%)*X*xGy4K|Uo`v}=)bL-G2lkuS^-
zZLU7h=?J{+xtZKFmc207?;WXE%zzo)&fb@YKXPL>6q{|!G+-++=)p$^p_S?Qt|ia+
zdFJX-ki$HVie;OP^w$0X8J{05ZzLoUQLlzz#dCYR*M(Z+nt$!o)Ykf_m5Y()kaOFZ
zYUW3wX_}pw@xek{Sn1N|z+8I`Z<3#^>E1l;3QM;gv;BLsnz1E>a}}f)@pD6^=q(vh
zKG{PeAsLd9hU~8d8S=SIs1NqPBMW@HO6)i&NkFjesDY`AL0(=N%II<jhnOnHm`ScN
z*?I2UEx$phC03D6%q|0i@`2)s{41|3ua~AcRH7zRRY>w@&JS$hKAC+Une5MTA+sx`
zZUK#V#-*>|3+uBfOv+zEZ<uQW^tR))d7|qx&&%DsP?eJ<U%Q2uB(IF^-@M`z%|vWJ
zB;z2fg0uF-_(q2_^DUzFyKn3HJlS2k=t}CIN36sUTomS7e}qhjZnBW%&v3XFBq>EV
zd`--rG3Zj@dE#?p9Hi}eGE`=woU|A0%{9tJGDWJaY(J>oL7zZlO!ijx+Hn;DbG*#i
zIUWa^<4a)~`JWu$HwxtVlX(L812_ag%!HiwQi)OoM5JefAs*%UzEN0?hrLvS%kdDs
zL~fBGnWEh!RkGLzdkD_yExHUcu>sM$-)MGtQ_xMZ`nOe@c*v2HA1<cxFb->my-s4M
zC5@YR{mDdKLRDYWZaM5-V@B2V`W^OGGC@P1gp$x`Xp8+DKNC=a(6bf5g(^@2<NJ>S
zA4E@6pa4J&2NVEr_zPNvc~Oc&6%dCZ9x3oa^h5#slOwzV)D<j2<SP{}@i|hxBGC>X
zl1?N?R;mjee)VZ1H2IumGsg4XJE1(U7{k4UB1tfCCeI^Vl_5xEQi~bvzM)ihh)c@f
zx*u3vs>Ssd^!A0+nFR|T)Z0HEG{A!EL*O6Y`T-GY01>5Sk7f)0K3}ko4<gFV!Mugj
zFA!|+!{!SBPoao_w@7c_%(9le#TWD`+4Ak0H7(Pq7A>~5tE+taLa1a)OIFePG1c6y
z0Kw$d(G=PNGsaCGgiW?{&Dx(dvClgX-b+TC5VBpq5TR%BMFVv`(2kT;TTw(W-Ia_h
z);irhFlmazo;p2NqKF)$`%ooWWhJZR#~6iP7864{PPrsMl}UV<Jf)PB;Ai|bo-GLe
zeCTB*j%=f0%MsG+y|t7mom+j@EF%jDPhB-}tzt*;P(-Z@eU-VqY!_?E1qdEkXp~YW
zP@{fO&`e2mGRJrl8*-TI^z>%8{=~}(MftL|(gAr9d`^=l2k+WcmM~0C!<9$H8gwy`
zO|E;2`rG6IxUZT0@g06VRlM*1?a_trdL#Tqh7{k>?A~P?%szE(d&Jmpe+8M@#;=uF
zpioRB1$odqZCFsIr+cn0Tm%=vIV1K~&^3DAedLV6JoZ;g{VKfMvRZzR8a{`L9Ijk&
z_}X{3M~{!vyQ#%>|D$p4R4z*CV8iU3618A-sivI?hM~7s&*pXHT@?NZpV78K>wa{P
zmkU)obeS2EI?saE)=VCT>|ms%zrFqoiI0hU;x#f8r@T&>p_Z-;s#tg|iJ`7x5pmSl
z2nQs`J;w^!a|83p4yhPvuC}s2^h1BVAitshv&Z9CUv>hWWJ#{~HSNkx)ZQVEZ3+XP
zoog$(o}##HBg4A_Q-xEqPq43-P6wRpYa`TYF}QohIb$Z(QW*JbTG<7Z;3sRbiax6~
z({0$K-x4@B@*^H&HonOB_2ghAPok@PB^bq^fOz}eo9<mT#fR-^!x!IpmprcZy`g9C
zQ@-QbF=6mCRl!O`OdVqRfZQ$cW46yMq8Euc(hKb#8q*|Y{i}-$`nmdhB%Xxt-xf2b
zczzJWeva4HE~e&XcfejE;w;ec@D`Hc^Dlz@+9umpMN8>RU#k0=_AT7vQ<(-0It7Tm
zwvdS3M=FtH>hvoGox`7``(e^t_iC~a4HT~yQ<Ac7UE}C%i@`GL@a7=AE$_@26Zxjh
z`NIx(RGfNilncgG+pGHJCUfCFgLmOyOt!DQtb~wYXSw>y&umLgYHqepVWA<U=c49n
zCYqx;Z#p|pB~&P`T0eBMkknC?X)apDc8t5a;VrBYoweBL9%GNqi;Ldby&)_T%8SO#
z_0hEirNr!VI6Yb?zhp#=bY*%k9ZUT6CiOMVLs4c%74OyH`V4~+c1CiYteFTDoL$fT
zd80Y=+JHRwCp9YW?>JX3UdCX0_?pa{=#hUCL!uV;LyFroGo_fuLl!IfUm$l(5cWBi
zP&%=#UD3hR@D)f6nLq{vZ}<zE2xHcPM>U|Uaq=v4lo~uup~(hrz5p&YK=iaOy=)QS
z`1GQksb{bEV=<LrN9vd%#LWKX-TT+od*t{e2a?77)2KeBA=<pZh9f2>Jbmy%-^FYR
zp>}VG1&bt&KH!y%Cvo%|U&BSltQ)%5d;+TQ0?Rf;%0Rwz0N>M}<|xIWi8~0E%8nCv
z;G(N%6ObHF<_o~Y2yzAyk%8yQ(~p96LZ|}&G;N{Jx1LQW3LGB=@CwL(JbyC^tFKUj
z$!5Y~!6j`k${!a;Z*C_+nkn|WIpUpi4+-mdcXSK<wGW;5aZAU51~#RA@~{9szTTiI
z4aBu4^p!5bGmx7G!0q&TgLNV(w}&uqkD}vs?u47l(J=+jjaJHa%CO;kUn=fLF5%sG
zMFV)8^4d?yVpM#qBUAJ5qe0gMVD<EFGNm|Zm97|O^&gGBxPjy1WZnSKxDm7r9*%wd
zzi?uI#YyKeiP`&dz3qMMyh>MxtCLlK#hvJbbx4NHH($wW(qSC~C1M`UG}1%v!8g}S
zqXe#ZH*!8E<>kX=HRWXAGPZH_824wRe>7)fxBB_rfKcjtqc2{XzHAagxyY_&a$~oQ
z>Cpr*!t=^iN|EPBw4Wb-e$JjnAn{G$=e?l>nYKcw?7m2%lr_bJZTu;^iulP!H7E2+
z;mt&ZuIRLfPg1!(M|rFq3*+3hzje7F(h%t^p|6nRvg1n=jW-!E331mW-B8o<qA=#N
zs!xvxbz+b|nl<?QyaA;IbS>)su2aAMqU*6v$K7Ojomd)|+1=hYH|Bf!drnsQvkr+#
zrm~JiVHp)N+t7-vvRBh$-(qs5-v+I-0@hFOCR0j6ty}$JJ@~}B)JX|*5+y=a)7S@P
zRda$-hy&`cBz*O*<_?0EE&-O#*mFR~04Nvz{;-q*wFEbB0P_<>)IXE^Ix&cNISz(+
zyso)Dr1~?#f&?~i0IV*55EWcugyjWNb5kP~QpJ23cYDPXa&SLGyFadgrT=N(0BGR#
zXM&j!?EQu{AN78x0Ti(B`}f|j<~NY<{QDEWpV=*pTQIUgls|jF7mN9!on=^ucI8ZD
z2n0m_t@rzRv3=SBK!5gU?^jH<t`bCtA#Vc6r$<e58OnL!56;g3^antuJb4EIB7(?Z
z)It;>kZ(W>7QEpv@T@=>(_8@&=UD%W2=wg^KOC(%7$P`t@C=wY$U;JjSQo@?|EZa=
ze{Ss@q_XrP2AgI-lG2+Z%hu?)0Gkmzy2n4ap9y5Vn(P%yth-i%PX})u`ZKgQjG+Cm
zd4mQ~DXz+M(e%EGt}QtA{Azs2{5SHNrMtCW<amv!uVMbz-Z1cXdI6j_7>Zp`EkfoI
zE98H5fZ6Ln6k4a3@-TO<S9ASqBKb{zPl$B`_qXK;sbNJ$OeY$vL+a=6?$DEB1D%+f
z%E9lWEYBpkR24$f{3{p?<|QOEkX^@B_gQgy@kLvbQTg%I*a<vzUoG317p;#c)G^=5
zF?o7f!?<<ydlss>omRMjG$b-KD%F6K^4FrtEtUhS|4*j5CXYS{4>#WOMt!`zjcEGN
z2c6AcZq4zv)i<NL@wm(qpV%%D8QQjU%@?t7py%MVQdfr`p2GoSUjfAa^wmU?55}IE
z92R@vOaRyE1LGDfHTcy8TcaT26~&|3gTK!okN{6;z`MBEzaoNN;N$rN7$V&KfhP&8
zur`H%4*}M~g|zjC%&Ny2x^j8>BfEpF!9!giwf^7L1UAb5)BFMGmKEUE=|X9Khi<!n
z1~#Fo0!s}LYa3oD*d_rH-vfwXtNicna+2pzp?3ceY8xs&T)P}56qqbY-xs904TUde
zGf1js<Pgiu6>XWgB;h54)_Tw8zY68w2eVdi!heSNH2y09;^_qzNg<Sf7Yy-e>C6zH
z@INlF;Q7m6F_n0G`^QiQyEZGWs|g)lTP5G>?EvjXF?wB}Hw@#uLFTi`>m`!WNbPS*
zjAM<2aDFWLJs%Rvyun&IKj`kyoL~PXWDfLp^=xl{K)vmSaf9>L=rnKHE}!MC<{A_+
z@UMtqw2r-n#UG58eEt0%in1&80`nP(GPh8~#|>@YP==rkJs?phQM%A*<g!aA<Vfkn
zky-!Fej}tS;QN>SCqJ1|@I=?E7dGY_?BB$YR3d%?y}b``vjkQWc*9@NVqahLCzM<6
zAKa1`+h>fRuUwDk6X3ZqV0;po7*nKQ-uktF59{Un0A~X)d!|L_=Kx8{xZ5O=b@Ozf
zVQ;|j=@lgj(D4BFx+Ki-@e(ismOum4@WIi^0W5(k&^WZBbQNWfXJMUvHqz}d|1;KY
z|Ej+2SLGK3%%6LAiMqWzxW3kIQsQA+KBJo|n>X8!>B{&p5S`<Cm8H%pgHUwb+kRJ!
z=X(G2i!K)1XTpjFp7%n7QJM4_U6MqJdi5uR=?FFDiu)3u7ljmFobMH<Br4w&WVjgm
z8MpiZ&#$<OsWEj*{dsLJ>Q`xg<7d4?+CMYNE0#9G2i&Ckq6(x9%|2>O-~VZt%D~Og
zJdZ0tBb~4_GSGcPNPHpwk=(1VnA`cQS!-^dD<hmfdgOCE+Pkp{mY_~0fKFgF`S*&F
zqzJ0h{O>x=@}KB*Tv5X7#BwRh*FK*0;$@L&F%bn9!6sqU=id|MTMO=DHwjLej_4*N
zBeRZg8G+WT0qdt%lqAJa>whGg*;^;prT!fy!uu?2V=^Od_haZ7=Mn8f!#%i3K}(H*
zrPGrn$xF}@Gr=Ezx<W0%O%uTU1QEN=<gU36BF_KwmhUKSH7vHzx<OaiF?V2fVS=d8
ziZX$Bs*4(X(h+fp*y)}Cjz-^OchJ%pVCjFVD1no3)(zZlU`2_kcT`c@Dx#cGQJOk}
ze23*=3KUGTTZG)z5CT#DtSAE}lcvDm!|J~H%V!}&ARzK@73HLBB*7~HUHH$6lJYTW
zAczh_eg+_)9yL=ZDCaAGa25v8OW>0whzKHsT3RWgobh!6Q)duy=*3?V!DQKTwBlfh
zaMJ{ONFOM&Y^~?!h0`iBeAtoay5uicP3UXqZy1c?q<{SdP7?s15%|kAL8|!om!Y?7
zZuYosxJ!$>*)3h%<kG`466V`GL^d~Fu>7wTBj|1<;O^-H7U6;JMxJzbfiwt)rUVGh
zM|c5YVF3{>lu^$3IzbV%vm1HRzWEIi6fpQmKmaia6cKKkK!Cd4`&x@s_FAP=fv{lG
zb4PhiMY|i521pmoEy#nM@F0Xp|7n^a0w8?41g0*~HFWZN`FP!bbd4m$hnD~#I}MTs
zC1AROaz=Sn1npo&!q<_2sD$`XQQ^v?V+p3A<<WwTE<}Lv@;YKS&HWhFk`KtQwOmCO
z`ao;4fVDIDyF&S2{$s_0{5ekJe;q(PeVU*M+JB04gdrY<kdWhq|M4^dJpW7BX3A|D
zD8KFuJu@jHqwFJ-A=yP~;Zqs9{7}d%k!wY+!}R_Gv&uRWH!9Ue_wfbWt{dmFLFaVO
zcFqmzoFa@0TyV@!bIut+Jbjv=hzLY{cn^kn?3_8wIoLD-oO39mPljF}d_U}Q)+sw@
z{haGY9PdGy1-;HH-}L4_RnYqpx>Ps*mn23s?7A|7_edpt^NHe{i!wG2b%YS=4D3CP
z2zT>MiyTu`m^=6A8?LrVbKKr*ByTDl@_*dlY@}Et9sB+ZueijgoxQm|mx-DP`Y_vc
z0k?SS5XCG~s(r%cdFfdNFG3HryFERfgHNeN9vIzIf4pgxQ}Y#HW=zM0b6L>4LpEa?
z%k`q2RU1z~W^6}gA+9=lj*D<JR{U$H^UZsvC1eNe&Q}u?n66Y~=W#3GG39!)7Che+
z3NKb5OVr#|-3amW|42Ca)TH=4^SJU(?i>GxiXL(O>_a;pnS=GVD>4*RB%2~_uQs*a
zFMVp<{U-W&z{97x^j=q$){CCab5;S(N&K`3vJ(ddH!k*l8P<v-?`!pr@_XV#uT?CX
zxJ8}ReHVFh(P&yFoba|2&O1)>y*XZ<(y@!VuSWPbc~BGA`Gm^N`A|6wW^KJRzUM#Q
zi8OJgeMsKWDZ+5Qutr=2W3<I*D4J^7w&}(F$!nI<nvYtQKd4>)6|72mF7GNHvLR88
zmv1?Zw(|hPr_>kXwO?g~BMauy3fn6b3%%#xsoJl9^qsEdX1)FSz~!0!!U~-n0l&j%
zlqi`ycs@(IevG_P>rZmtyvl0G{W7sZ#)i17-V>EKTf}5~AZTVKa7|QKodNG=`~x{2
zx<h5#DeoKM$|AP5)lORN@gwODeubB#&zaoFc}kJ)t%hum@?oz`tcTBQTv)YbO{2^k
z!M~`)8FlNbjt+t2p|cpP$UE&Xuk|*TF%t^I4vV+?B75{PcSx%ov#~yyH}{MyH5ats
zzKQA^Y}hj?DBCkcu^2<=GAdrpWgj5>sD8)0!)qifb{eTgZRXqPOP@R=EB86H@hof%
znwu1jtq)m{_<7geQX3o_tRgd%2{M^=KBTx6*j4uAFw%Lw&)ATTAZ&3#4~ZMKOWl%F
zIrxD+u(Ke*A)43WF!Go?d`=7btI1&+<c(j7-IW*(vyazttgp8`u@Qa};q5ANSPIct
zW#iqPA@wMq*&iIiDh;%x5-LpkOdn+$#KfBtVf`#^V9cK~w>3(Xb9QBHQmcPpeX?mX
zIAlb5*{?iWzS@q?a0;7;wn?esdHV)B@ItKl?stpz5*rR456@q%M8pK7R#ac^jD%wE
zA=l2%^7CCBjVayO#u>Y2i&hoTLh$~4jpzlwTLkB4>^+v&)t@!W)cDtUgo($Ti<31P
z6n1~%HX5fEZ?2oLOv~Acp}tWeTbr5{u2ot(Y(v9i9mpT4G}7HI^zzem<1J?S8jav&
zii%4n;a?cb@j|givBJd}GI#3A--X{n8;Yil9CO8zaykzQa(;=a^tuZ5wT?MHxrazz
znL3&qt6LINRte4Hp;G@Y8z0N6d&_=(v_Yv9W>*h)O<9H=Eb*Rm5d1KrSU?$Md-ikd
zvd&#%vEn*EEy=qk%B|mY?tg}mKa1+6i*#9Yw9RmP*YK(<#Sr^NeVkigS~LA!ydNeC
z*T&Z08!$BP@)6dqvK4r!<c-X(%D<$pb#g4qt*QG$>SC);zfG~2Tsxt(tw|iIfpB$e
zsnH{ZGW`}>E7$e~fq?LDJ5oQty?rkCJd`-S<^|r3oG2P2wv@=33lBIHI=>rJuHv}8
zG_wi|<V5TlR(|^Eoa1&phpw;O<sV%PQ}dbfcYQIRFuY3_ZcBrdZzixUJ{(t>dvdd%
z>JIA!&EysR*r-dJi4jY9o`plnh+P3&wNyNOb&y|1Ys+spF%lQe$<V&o&P0}Sl;eXr
zKJx4w?+(rJ3b2g)PmU+c0doAwGy(hpOs0YY$pi~i;D*1BULh4ho4JvyFvO!APnHAA
z@vvzExEv4BtC4nF98MbC=yb-8;Rt^^dv3_}JulLQr=L1qx}sj7>EWZhBy}3!BKls3
zw^vIzjn(XXV6_$OFr;55*p1WnF{i@$rzZazYT<nN7xHF<y_=@ap9{I8Z@;_<D!>5n
zJ>v-XfGQvl<NJ>S<jAKfpa~$J{x2+wfC)sPuCs$79w|VMe4>EKZ&ety1mU+V|51ng
zJ`mm9S(hrIz_yV42T3@oEPGy)@J^$f@12`Mh+7q`K4F9(s>)wUKSE98!^$d11ijNc
z+dEIFcYi)u00j!U#A)6sTtzwK>jb7=AmV@<%sV)}B*11pY<d8;Vt@h*>Fqn#XerIQ
zppMcPlRVix5oPyXE9|8nKMGD*M_J_PP3Bb;i_d&=&-1?WrmIhmJ{oRP;v^r$G@sC9
zitlL}s@Z$P%QS1R+O6Ntv~sdf-kI|6+gL=dn7rC(0y*5%vq2g6vXd?4ymQfuu#bB&
z0Tru4q1W)X4x3mm|LqNr+VaZ|d4k`c*1SH460;S=QH{OMbYWr2II8v?GUCY9Eh%<U
z#^8c)_-_oXW6WYv_$^6qvc=zU6p)yDV(m2bI<+`QTYtTNi~OnAit{aJ=|S`-Sv$PT
za`to2IVFqh^X5l#K4(|DcIue;64Q<rr{^!~&-JXz^0f}M?Cd?sIY<5C4aO_cYWw^q
zvFO3&SscAY8Ryq~&f_9x%Cq=U=b9eveJ`cAz#BuMKfHv=<f@-k7KZN;vN$K{oh;*r
z{c)+tT|8LqdzzXWnmF(4*NbC&n_FV;q5~hFn5PS@mHRH<^wm|^aCwj1TGr=(&rMy&
zb1y4T=>mSvOyH-nFrTSn|7eolD@Z(^O-~24jPqJ~^b8pf?jei`sd<U{30yKT=9$>J
z;u{!RqeAlT^(@y+0(W3r>GZ6R_yr9epHSt1jb=yrHH50Gx6apup0Dh;$CNXAL@QcV
zr<fy)^NGkOaei(?Og%d`PqRb;J-%a(bD}XbgiW~fh7#=|-axo@!IQ0l@}5LFZW{bM
zG6={lmpY4tP&jY~seg7T>pjA8@ah=6nl?|Yq}<`Q6bFgiv{#YNN4X{RVsx+O;-j$}
z2_E+Jp|h!4u1~aZWo=OLIe3%=J1CacFqAd4EGR2}k-G?CHPo-XBDP9ZTtP;BM=mWE
z*rOuxK+oc3jB&v247(Pz;Nj&$(sL7H1s;jGOS8(;o*3Hq-n~OU7w1ldscv^Db!j^=
zH5xY&(^#I0hVfj2*A3#NKB2&PIwuo_5Vhx@TVzWuikrtpeWpg4EzujBw3ByGziEa~
zZ#o1ic0Bbd#by3l&&41^Kwn7e<08>$#a``wlWK*bhWKIdOLFC&7dum425|=y+XCK#
zPqJ*R#m~`y$bUmuDR<XKH>WYaXxF-9C64cvfZ38s;kTTcUnnG_VqNCU-^Fh}scvdh
zlw>V!B;y{|>(ZM+a{N~GITj%|uBO!-o!Bnr;9b!H-MB8n!Ha=@Yu7X-C$}^q1a@iC
zuY!3JL|s?udT6RXT+ClYd;LRS)00`UvZXJ(INbxyFEV>$k_aKCvcUA}w!?T$=!(4i
zoQXzqj;44APuOb3o4aLtc~<6JlWJcY)b0#=@1{DhTH^W&6ODn%CKE^vnLy45Z}{sd
z^_zNwsbOgP_tc=B0Zle=(*tm+0itItKh=(`+d1coHZSv<6@yP843C;oHF#yG^LkCD
z(2q(o?w|KM19Rq{<Y2F}3|IxuUvA*P&S9uYyZPpIz})1FpfLkcVZ>{{dFAHewy!!x
z5<}<i+<7n?bRXpV6ySS$>MtUNCh7th-{V9r5pq`>{5Ian^Z;;F1%sSH#9{#P^we+a
z10oKi!4Qv<qxSxZ0>`NzK$`(k!KY9D>&CI3$(HL*(|GU6Q7cLt_vsn}-p($3mpIph
z%a~=x;#s7sww@5y(fs&zx&#_W^7!?j=unW$SAfgu(*mZxP%c!zbI}nz;i7WVO*!F0
zD~qn-JB+B=y)|{Uh0(4*m!UN0Ti8AE)hz3nVAeo;&}xbr${D@gA~MiwL_f^xKbq?3
z1INS3w7{{ZGoS)}FT4`81l)9md;`{2BjYqyy#;19o3GtvdmGmyoyk+2kX44{nWGol
zBv$<)NK?rB>7eH<{pGTD!7PGvmlSC8DKomglOro1a~ljAbeDNN@cJD7=8Xknw$7}Y
z(9a+4Q+9V0Aw2s$LtkyJ5ViDZde$GPG7jGvXkALS?>GA1`fcsjs}35z`H=L*x_LG+
z8J|GA3+N&4YJMs@^;={S@pPizbo!<fO$3O2bi>VMg%rk`ciz9fx&9PaMl#XRwe~zR
zYrMQMS*-BmkHZ`@yTZYG&^Z%sb(AxDyG7)nPLUqJ>qJ2ma`#xL<K8a3PAuM4mPURV
z@1OOzM`B7(n0sj@ZBy=8j+ShoMjW8V-E0{UV0J2FKmen39k70SZ?}j7YW?J&#U4e8
zLh8i2)Jcf~u6$^e2pzDJ0z4$|pe9GvnT{$U+_{Yt16r~MES<5(D4~{e{_s;5Y6)&y
z0Olu%=yE1^Q$G-Km<5J-w8wPxT_Y*<zybs|EdamA2p@jnGVh4jE}%U}kCju6m!uK9
z2wI8<Ed5WtU7(jl0d#badb^6iJ4p})>DpNxSn6qzFU`jjzANk&LJGuhL6kpxyDzKQ
zfc_4k{qesP!#xuj0s)bK>+P;Qr6kJ&&|CiO?P4*9s)Fb+WD)@R^r%tKKsk^8!MO!M
ze*$F2lW74E5kv-6r~nX8|2hHnEQm-g^H)TmF9-WN0f1-%B7)Nb$6qIK%2R4~^Ra!!
zWb@wEQWw+k6McZ3*?zA<I2WN*mEg;0x@|rETrt#N^V8c+6ju%t@<9cEyP&<_zkHoQ
zYpLo-sas3xyw?4;G$Wzu>d9+eIq5WgSoWI5%bQvT|F!oE`#M1-+sy5Y3%Q3@apq&8
z*RGo~3tb~MGxH!-R+f+S9&M_FSepwVF<jCj$1A7r&2%8!YwXmZB=ULYJdTIu9y<^x
zd#-PgNMo8G&ye?H<oj-=QVUbBbPI)mkV*+H^*fBb@kF0@tcjkx&f?3~&yqZArl8eZ
zB3by#_F|}G=jQjoYtpyn>a_6qSMrjy(R}3pKbf4REyN)7bgqL$p?<f`&y^NoKDn+r
zH4yhy7_)qfzhuNa|Hcn?IVLdH{b#No;0uI6tgBDHTMT3ua9utTQXu{9H7XEiH89>F
zVw?ub8DA&xe+VL0oeaJIh6r|bkEa7*h;Y*ZHKy5zUoZylq4}5J&ih$TL1Gzovu7hP
zz$7X1lL&6o;QzaNz{dA~o(`x2+&W{M%|W->$wwCops9h>=qV*R%OBee+!Sh{P>Pyo
zwZHvCq0&>rw%L(T<SbC>;o9FYp}^yp^nH<Kz|-jHaM2PA{LH8Mx&^jKmW;0+g4R?3
zYiIDEhw}dnvj)ds_B8(10OIKdlz$jB(0ee%WB#%y{7sGyCV2k*EXzLL^R=Scm0k0p
z*p0hA5P!OTznNVJ8p4>eN<nW2HKw^N+B<HJKP#?Cy%LPq*a->t5C^@xf3|lEQ13p$
zxWIYmd75{<XL?7y2t`c)D<T-3WABcWpc=G1^m8&`WxMoT-G{=MS&2fVYEWI{O^PW+
z4dtdeOUH|8zn_ZQOR68%OJ+)jjjxb?6L+U-U50jkh_0iY@%Ep33CiW=A6$}wwdV<a
zMSA@9AD#=tHf1%@eS@x0zNIYIY{Xei{|P$*D;&R}jHImjLczc}-Y`&BZou&AZ~y(n
zp&>Sc89olNClKP_-u}afxG#XR1Y*QkPR2qW_*m`Ha|1VO0WYTp>1$6BM$&JZE&F6E
zJ9U4RjzP#<Ko+ZUs!A}r@QU<_enrKNOeN}ib@!YvWkZ!lx|id|E_6xrVC+#gWQrdu
ziLRA++hfM(FBQxvT~()XC6kL?{>fwdjAYqKbX`s1P`jz2oZYRQwB0tbkh&l>kft-$
zju6d$EcF7a3r<8zo`wSLUfhl>xAk<IQS^DisI+mq%PJZB{`ZE0rh@u*GfAu*$pxf_
zI9p8~jwgtH{iPmuQ>_g*Fd+1!odu|qBcRjiZ~y%xK%J`5f7gjZ^F*iP3K3o>mP_cX
zKZo|rRFMkR&{|tZFeYOSujKR~b(mTIR58bWz$Zw!-Y&cV&A8rx_0uav|469yKN1Or
z_lb3>e{V#>lpt?kR0*G*J3)+^CUv@M3=eTZKYam9XC#qt(1rL%eMH*ul#;^xv~3o8
zCZhi%D0kjJluLwihnpvWDF<?lJ5vqnWhlow7~*j%068W>H_Nda@SBBjC@KZfzmGp4
mUQs1otMDGl)G!ff=?P%zf2uiwvy&nTtY^S^0_s5s<o^KZ%*3Mr

delta 11
QcmZoW#3(UAgoObJ01~DG3IG5A

diff --git a/scripts/sniffer-tls13-x25519.pcap b/scripts/sniffer-tls13-x25519.pcap
index 4f9600e90a64e3ed9c747268f5dcbdc29ad1a596..c7cc459c7d32a0b270cc4cb3220ad72833041428 100644
GIT binary patch
literal 16169
zcmbVz1yEJn|NW&yKoF$6LrS`lkWQsLr7S>FN=lUO4k=MWKvF<TK|oqk1f;tJN%^01
z<@)aP`(Wnx-!psW$vEq?*4q26bIy9a!IrWtL<lnEpM?xT0RF%s5oYI-hy_su{u$ix
z3mqa0frvW2mV`*6e!}sAKoG$FYM$-R{BAJ`_%|~VPltbTK_H08r^CpI=$KDv1j@mm
zBOoDRg2)U>7a>C+AhKvJ44LiDt9gQ;`dI*-H1o=7Cp<EP-p>IL9fm9bAWH$0zzx5k
zoOzuJp`5S6kk2@i0_bzTxDd%-%m7CODBrgrGRXB#G8SYIfC4xCf+Bu&DgqJPpZq5x
zF@RY6Z$v^QBuE%wa0n6-9&M_xlvTr$Pi=`)5s{<BK{b(6|0-EvzU9-c)=c#nz&?Bg
z;IA4(cp!`rdI$xCx-w<M^VGQGHgn7`-9kCE!OD`u=Y^8|N&C|qvKg<AC?ISQBt#@+
z2sVTmLWqurj*5N>9R(c|9T^=16#)eS8373af(e{9A^=7Rft(@$XANp}0yLiQ8rfq|
zBh5{i#<TO71J0um-nFx{cnc!pr(i*{0K32qzo4$gka>ZK)bsy|2)Y*h+cg*>=$bwv
z1fq?EBu7m;epgdwxVYan0UakGoXt%?rN#v!A#7Dm>5CYM3Bd;};{Ys!8dj2H++fyJ
z=#c4fvy#HOW512%Fj5EQv&;f6+i9rSGzwrC;1@`k9Uy$Z1y02v;ZOK5!e<w!kRYf*
z2HpbTD*m}Rxd5UupdH-s3u=KnnK#r_W*FjcQyXNUrh*p8{M!N|zyhKvs*w1|!WM*6
zX>H=hjRJGKE9FReZC645`4{sqf%3lsn+C_<^gRBh0HP;A9Nh2=%Kt8z50pP94DpP=
z=^y@P|I43uU*hUCT|Tp|r29tYQ>B;bXmao6OpvLi^(%MM$7_{B-L8B?KrZ5D?_wCa
zF{;ZQjv;FE5ENH_vA8!-ad<E)aN?5A6W0eIK0$#%_ut}BoXLDaL~=wJ;+eQ4m^dWc
z{}G2GLfDo=u}<;9@zdvCK6>;)Hu-mAmP+K7d?Y2U4WE3fj9*FpT37X)J><Gk6rvn(
z;IF4`7b*LALz%)<qprtm{q7AB=_`GcPcyps2(Uym=Bfi#s@Pm`bzk1?EcENhj%s1S
zM-<(DtGKI_MP}{){YTAwd#+GExwzU3$4P<b92HaxQm5B%m1<qDGh^y~9JG#&!J+g~
zSDBnbgpo)FjbO(s>bs~Jv9G@dL@H+g2J!0^aqN2P%pkP4No)=Fd_H25(zwq?e7-he
z9USpuEK=GyNU&crU6BqOoDf7%-aM+miS<dMo^)BWzGv1#|Ha;VFotuhc6yY(94BEg
zSJ%SFz%TFG@h3fOADh3>RAv+J?{~<NEf44x(WjMPe(L*Zf33<CLnM>hZ|x054#V{b
zN-Xy@nw_1ht@yp2>6itzX+-2eg`Yml0bChx_h;43oE|<P(Z5<!e@`+d@N-e=I&NGO
z@10JTP9~pgWv{cJk6mMFpDRSol3&(5S?2T@6u(<)<GQCE>f#Y@=N1%Cm7V=_okSt|
zp*mNS(+3UaV)FWVojnfecUP_nhAMG7a&gcmrD?r-R*uSe^f5G7O7**ij-$s+1dE%|
zr5D(U(j0q6Ezb@E(b;&yiaGDl;N3oaI367>c#6?usVAFSn*Y;v0?S*^Fgk9cj+W4p
z_{KFg3%bb!qaVW7OU3e%Ple1)LuV%zuPv)QPZT^}dg95FlP|Z`Z#b>K<w4dPM3Gx7
z6t+DVW?1!%=;~bZcUnBM)O~I>x^UOvKs#>b?_^{akw@{IS6AqfFB!HzJ79a_XSuV^
zVQYWFamAf9@YlRigA#kD@|%}ftQ83u4Y}zbJ^8M)R6l!0YeXdR&41NpalYMg<8^r_
zLw^hPeSt=&z1(4M$UzlSFGYYC%@Zo$dnd&*MwNc0dtV612bLX*x{D)KuFhP3WM&hi
zAaXNPWx46Pvq5)_=&DLxoNTEm1f^>fC+G-AZ#G8ScCIL5yY6-?<Al2buE`efFNu`9
zu43dyv4;+0SK_Z$W;xYM*d8p`B|W>-VHa4O;QF>w57+o*0_9Hv0a-obAv+i0%W{RA
z!mQU@H|+^pEE_Q*AGmyKklGN7V~V<UOcONY_cVc=b-W@?{c#m8qQH-m`7{Q-{Z{;#
zneVEYcQhqGrc!c*eXQ)WbYJ#}S&$-r*JBzuCn&lSpus$&k!XXUxu+>v=i!$oTPN(g
zn%;)lw9SO|)<NC#bY-gB2v>)xm8>L`{BQtCM{51Ke%#^n*Mn5L?27~S*YhV#`{pTD
z`#&^2SXSqAPLb=29doUd4pPeaDY!Lg+~48BYRTT^Z$@>9sGuiRFqPR(Qo!?#lghrA
zY3<nf7&Gtwh)s0hsm4-Tv3*zYmAX&F4rSkKhO!Es%$y5myARRK7T>?cyrv+;@+GyC
zgG_q%+fx#HWDMUFp?2@W%htz9>MJoPoN0@%Zf$X1xw;<^m{#%R##h1?ex|!y)w}De
zvxS2F4<7tD`Jm8$39VoryLF@WX*ELLhDw#fhhq}<gfJZ2ZN)j~v1ySHjM;ip?+Y$h
zzwt>tonWP3Pt0nVVKfu)h(k!##f;LDCCAqwCg>*UM#V4CUa!3O+#-VDG@2D}gk-I9
zHyt~f&{WUQ#cNJ&kSO1uBNHE~?14dXA?@nQ$Ilr73S*mv&Ofm&Yp?U~@OKAi`P@a}
z%cM6unY)F$IvJoIyTSSBifdwka{Wt_`DX;u@&P%oUI;s9#?d788RvR=U-ua?iDe?A
zNd19CrSYRJNcr7<nA1%#<7Y0;_)=)b<H8d8pNwxA1u|aszuw%~Qn4VJK)8b&enB5#
z(PVxgBJ~Um@ps0zjKVVhSJ3}tJVfu-r79e0$sn8n>pNW;?84!8R#cxKiwagM8f(fG
znU&T@Xd!qTkXSODtace&Y_s{iPI6*N8Ft=d=iorX%U^x+!n6%#QU0JMU$ua~=o{PP
z!9xtheV#<EIOr<~!1sbzkTR$PmtlPWaiCS;JO^X}#K(YiaKkUC1NX?DfQU4xFvQ;u
zv<m!j!2Ew5;FA<sLHTMkr5Vl9F|x#qe1%SnGs%L+K|^uj`Y-fDGGV<vMiF)@R##Kh
zs1gYxuc{+bY)=_bo!rIh%AxB1{+a+@uv#CUr%pEw3vvngbOAT~0@Wd%IK2fCKght;
z!TI&jml&dou>D&d@XA&JzGnh2SV*n?%S!KeF6IAnpjfDR_@MvFs*8I;*(&<>s9=VP
zA8Sy%4-R$P3}25;R7ht&!B3ffbgTJ%?1v?)#<?_$a<OPh>9}l>B&#~1QqM~)KN}J&
zEn!-1U?Hdc;L34JCg5J~MaB>%Azx7WHY4kpmspo}m-L1Gk6pnEJ@oskJEuwq21cjZ
zSNweLc_WlC(PQfS2Rq*+_)+RH4;jwDQyY2mxRrC%o&U;x8-danw;MTpDaaPzO}3qi
zDcnF?x)#ILbBtqRG}#vu@GZ$DhEK*~H^RS-OZ=zso*752<dAQH#)Er=H0BM}^SrFI
z(>`Hd2IVmY>N9rgp06jZ#3Jq9Iv}XTgm77=>WMmCrHD3&ifa5s;6C@u+hhUp+I+1f
zH7b8ZstAMpdpgU-xM|14&NmiYsb3tj;~6`bUajWy@5c{ou85N*s7|-piwLbvr)%qq
zlJ`zx|Kc!`RJB3=G4N8FU+u)egK-LjRY!(cx}b;Ewh6E3lEx03f{ZQ|byW(tt=8>>
z%FtDQk6#JVx!n2&OvGlB<IbU?6|Qt)R}XONXlN-(ZEs#3G4~BO5w~w@G4`SVDZ*wc
zlxe}UW=0$Gf^6NIqH6THT1OoDi$IRd2F4E|ad(~PFbx^U$jqwaE$zPt+(jdNqs9nX
zsuU=kX{s(mmar)GHx?aAa*T?7>Yk;qN){m4nDy#i<Sg}=w7m>o`S+%v%XK2<73uyg
zn|o6AmLJj0zl+$>MNdtM1kLB)aOn5Kc~+Zo8aAI*-DA~s7cE-lQ#)ZA$}QsL(#|Yd
z!dp-L(F5ZL{i1~rtyxH#n7Y2)r0dBRjlRr`Zn-gF9kqA&O7pARrAIge{s#0SgNKuD
z{U_xL;h4^%x@bWTAMJ$`v5XS8O}3g>{2FRH&C7$$i<OE(9Hrm$>@na!)0H3b`$&^!
zHx}=Q)ca^McR$rXLF)?T>RbQs8@ZfGA6BZL35@8Q>z&?4yH6;*-)k~!ONKl*Kygiv
z?(=7jQudW$bGKM`;x7oncp{Fg@4ulwPCz9u|HOc_{PI3intPoC!op%z>&sTXOq?$2
zuUw`)hL&;rT<GgVydIhhC#vIR-^ln81=5DUJsaxHw2llDY$gr7E!0(FyPTcjX|k<v
zvWOKeN-$1VPiJmQ+~<R<UN|=U*1;7`K0LQ=%-D}$xgx%%Y<A<04Km};>!JwU;+ChR
z?;#kg(b;w4Zj_l0gU9$EM$kT`9_6^M1x(jHnA?Ed<Fidly^Gmg5$1t|N5!Q&jzmin
z8~)kqo15-PL7?&LvO+LyN`Yv|1Tq2K@auQ<J5_+u&|duSXefIG4I3aDV9^g34G_J@
zCm~9V%bgkNV>)Ewr>6%&LNVR5ETicq%u^kXh%bV))P}o1bKUNAH!3ZBC_;Bs_%5im
z!nc>px;00=MoHMka5`cJiPEc7Wv0xcrDkwxZlj@aFg5OQ3*=h|@I62J$^4-~Edk?u
z7Ss>tcgqHVaFl^P{D2r61UZ9<Z2;o=(eG3Vb)XN1_&XfS2L3p37X4=q41!;ud}NTT
z=q0;e1PG#;p=)8?f)G=lkq`3UePp(gpQaX2B_{OX71$XX=^VMCl$GljOI(hlVs8Yw
z>;qh^fnxwS{DPi_u2U71%bzmfH<xnkKU|dm71U5JRC72g$eeyQ!*XE?n@rRdJ<KOF
zmO4%2qlP2i+4L`Vz^RfM7kU~1^;8_@z(1arbD!s_5rB9P5CCrY1=V3n76?WB^BMXt
zL}K8SZvT0lLQe_wl&MC#gCd-QdUbP2iSe-6Z&SUx_7JHw?1d1QO*Qe-;7Z<p0%mHw
zAgIR!n63|u1vmVHPFE%if=;LZOHbPTE}#dTF8ROH@m*NIY84Jw4M<3Lnj+rd?lz?r
z0Vh4Z*tuZnB$2-+RX``<{r7E5zL2|9HHg^01w%Z$0o=e1s01I?Fz)cT5#PBoHEu0Y
ziuc(kiK8<8Z#o{2<U#JQfl2&;J>Z64P?vyu51b_04V!d!MwQ^-R0m!o5P>t|1W@j1
zAYM>?8nS~ZQ=u@FSL<wdPUXrnL6pC%&o@;fTHw#Yf)YgTx^)rq89(^ybKQ=-$q+!#
z`n&qP#E>EdqQj6!0p#;D#E=8ZIp#0USpd2baNqw_pCBTL4064D8}Wkb(~uL22>DM$
zxat!?)CLjZs?Yu)9{2C&)bhTY2ZCR0zp!yL;T6=qp~iO^PDgSl*Lwn1pNK$@2UmTD
z5+n}fWZ;yHr#8%`I10Q;mMy<E-&+)w9rHQx<ANjU|4;P^YIFoNp6^-&J*crL4W<#e
zFW`9?oywK-z`F+MlLmEyh*DaJ7gV1S3{XU||3rkVK4FM()u%UEMzgnN(S1LKdQ_EP
z(Odb+OS-%{wk}%FggsV?D(^z@5&zHCCrH>5Abh?BhFs8Nj)D>Xec8)-02}JyEjT-7
zX%LY>8}WkbGlCInfe#Gv%+xxlsc_XN%mQfjiS3x5VU#qJJ*GQpj?B(>KQnWmg6`M{
zoW=%ByMRA8lz${_8XW(T^Y{w^i04<I5lm42W-!Dv{v&_*pH-jm{CUN%T+<O1VR4-r
z-W%fY<y$0@oMSb&KOU%Fe!y#K6jEeAWU+-vnHL@@F@<fvI?Iu%&!_~76S-L2b*Q)q
z7?pp-HRGKpP9H!#zxs?|1`%KC!4Q9oYsQ0#gH@k!;!s39jyZB^QB$s5cFOu>&4<eW
z5}&VcZ$Bhg=TY4OhPf|65+tE!*d>&72yqra>4_ndZX`YnmlY@fJ!Nd`PYrzKZYP}_
zF0HoBl)@wmw|nH{8Plg3DFrR-2s==jWb=RMHwAd}-TCY&Us}pYx#P2iHt}<*dQUJf
z%7A}dWdUMxV+-AR<$8zRz-cgDmFW;-C&6*~td-O2rMD1um2KvElSm<_C&P`tVr#>`
zhMQ&I=-rPWH=}*fcu_OaFUYWkE!`_2pR#=a^IG{TDXt!Fp5!jwRrb-SBAwTk?~f+(
zSxOUj!VuE9H|O1~ifinRc7sZ7HT?vbyoj}!-=7+ZF2ugnwz%y_D#+PiXVKK?8v5dX
z^e@`#78S2blNL`07qiWieCc=INcE&Woy3-#2}-!mM-f^}d2wxu-3+;(W*k@prd@UD
z;>50pwD*_}nHGP)fx`SM%<|=WbKg`E|MMyQecPYN=Ctokgx}hjNO(V-I%u}hAbc=V
zgYlJTd+jkh=^(agzlXLT?_eX}d)Dz$;Y^~#Pf;H3mP3_{)C8gSxf`a8Z|AKI*>@JJ
zBAPbS>m<2*(A4v%dpk00@3;&kFkfcDpWFYw<IgG+cAYs|0fAvD*K{@PWpKW^WQRGw
z{S_H9HPe%tg$DLj)0OqKZ6uVZi3C5h$L@QKvrLD|n2$H^S{wTc?=;_vOl12RLS=B{
za+jC{aru}H`gVth)pcubY(o`;^+8SI-QXRam0K3KT+_ev2BuO+r|#<Y<@VJ*dM<DA
z%AWQ|X}j_Ir9}GtkQ7WQMTf0!>n-$v!r1R`x0k<+U3RQ)5VvC#nUff;xlFfLpUS<J
z;%DN-oW$p){ob2pOmj{)e@m2zM8=~$a*t2I)`o^th}zfMB2Y$uG+IvNQ@~9#1MF7`
zwe_L=?1tohJL1_Y2)s}H2I$alD#%AvVvtDsP1P);NO?=JhAVk1D!*whvlv*>;l2F>
zx82HGIyRCtSH98Cd=tTK{yi;5{4zOX7?udNQFZ*K`cZ2Yh4OXc1m@T6C@l_#={C=0
zq6PSt&7Sg<PtsXYqlSppu}1$)Wt-KrK%`VtxULn4w!2E+=0f*AqQ58#XQ#0dse>(l
zHH*{qfiNGknv!*lU^z9j|7@z*2QqvwBKg1^m#*j74e=^N5m(q}2Agpd4L#(M6W4;4
z(wYjovQkLR>+kEbQCkLk$O!H1-3(5v=QZQ~ny@%0kBt)7+E!wo{dy54v4=$IBsZio
zzu^7N86ljR$<&NGTURyzOfGHD1I5^ErEr{C)vp#LWf}t4EK-+|qV=r2Fm+^w%@ixD
zO-xvCLlAToY}|Ie(toL?zh~_cxHL&-l-^$4bjva&?DFK%H#feMIhBAAU1BZS1T~Ve
zFE$J)A!r9zyNz!@AAPMvJpcNZv|MvK*Au^PrPFti2dkZ2v6R?f@yiU-mms(*ErShf
zIN}&X3r;`DeDPOl@i|O=Dd}FuHmJ0VbmqokFq)3t(lTG3zno9S`($;(uJRH_g5ozG
z@ubg#;cX_tl=g1}-tp~o-&?`$iB0A;r$%c>x!GcEOB?+2&94T_Ss{M;r-&^0SvS$_
zQvC`ve>jqGz9DJ6wK)>@jrEnta9)5g&;EzF0@3HQhm8b|MBxv)vz?Y!N(*i+Fg2R0
zt&6H>;l3B8`7%%-le0i2svIX_=NvMkUN681`5=oZ8k_quH|7o7c(73FBMJlU{iCmi
z6uCA?Jq-`g<cC&#4CcM3@*>M$9lh(c$02VJ4Vu|`blHn`rr^iW$Okav?_HenJkX2}
zhb8hq8Q-P>Wc;7%6aE2Q1t4aEZ==A5U(mPU=m-|*156l(_&ej<G+-GI`~HQ?c!(Yc
zudKu+dnsx<;;YO%gHu>f0&<)maD>vLiKn&Mk0C4T`Btrb>#eALN*k6_dEk+Ki=n}e
zWuYzo7LN2uU776?q0rdTDUZL?8m3N|?V&QcVh0H`WIngS6Lg^FVh4Dk4urw@!Z}cK
zo&#e5VkjUT-0%zPfOiBd)BzP3;+X>_e;jc9{j~(|fb2~+_5#!&70Kk{rc@21m*z+G
z%iZ$3(UWe?KUc;cPW~t-^(Iwr%Kf85MwakyT0`bI*(^qig(h>pzM-r0D&er*SIHv-
zQ0>=?)$&2r{`GYMzHqf2oTrvw7x98B)Q}%U{Mrmt3+LYfd=(1ZARSOKv<gKU^qRm7
zJpFN)VV%CCn``VSe#h|or(d!sNp;AqOoSTss6GfCmkAIqdwCyA*M8IxCNrIR6b<yJ
z7WbU<mdn3Z=b<&q?(I9!<iGbt#vxn&^~QTa4da&5Hg(@azB_%%-D6D6=In|7#oDTf
zc`DAdh>yuFl(CXE^^=>q*J5$>F@>INd`We6X(y#iX-RpLMIG*$Pld^(){H!s5^R%d
zj%mqCDaZXn?9(W(tPw(NBoF0w*DV!}MwhY{(ct>GSXej?#XC3B{qH6b+4WIPD-Y4R
z8X7#Ud15F{V~^pn#NVTbrYIR4SFzTRHexU0$a^aDExTBKMutH^?Lb0UMOkKyBXl+0
zk9Rf6CLEWk{>9{8<FYMfYL&D2k#6Vr)n6OTd74ix4-`%e!f{)A+$JKfHYV^2$ImnS
zK1TA(&}%r&LpJ(EkG7zOFXLTGV)(9kGFMTM;VosS8*Zc25OPYz!$dCZ_n~&nmxL%F
zu0<@<KTIl^m|T{oZk~##4z@YE<)dLLM2r_>O5rqWJxJZMU);HZ<Z|_>_lF&BL_?}Q
zy6&wMl<vzc?G8nQ-7D$Y<K`}goyD?!mRp{5Rv4c<3hYPjN)c_26|wj>Z-=i@>Qc9C
z*lZC>S4(EK;T?~o_){jZDfQQ~Z!mw%*Oq&ZXRzJ5sb>6Px>V>T_ba5M8(Lqh+!#{k
zWf!wU9SAbo@?T%QPICES6_JaA(-+->`(J?fvd?W(1ZvoVwFWF*SqW<tEpCQ7F`4a1
z{q6<vcjoCHo&KQq<RJ}7FS`E&*HhysyDs@w<m6@5<N@Ph33>Miw||UsW7rtby89RM
z8r~0;Vym`8YCEz%Vriwj#r1vfi)1+eYxl9e{n`)B?+Eo#SW#R0`w{8AS^PelmC3t0
zvalv<v+@pk;?S_o<PeBtwhLiM8NXVyZqVc!7tP6ekUI4~n|nvcke}qM2MWEB)m`0(
z3lA*GA9{B>bp_eKEB5NHiY*yiie6*bsGMNX7z@o|aj0o`AidutbC=Vie#kGL(9_r#
z??f`~nAG2W!?jCblxC;H^FjKQDy~&r&~QiHqXeNcY7S8;M@!kq#|cgjO!f`KHHS7g
zvs6h<bR=H%TQyNcFr}yknmxXg=}l1kfikU2f7996r(yFmRrzV<{Z_Y+kF)lFv`Ew9
zQs_-=Z(1LtJ~h=zt=b-^DA>2jsL+~Od^^n2<m5Qhk%{wYC0M)T_FlTJMKq-Z7f%&F
zuBWqzz+1PfVhWS~)7;*ix^lLK+nJ%Vag*#rj+H3&ujn4-fngH~L_;Q!fZ&E-zaIsL
z0?@Fz_U~w@Jcfo1Tonoz4G_K74GkrsXSW{~S|V+fml*edFYBvH8oExS73I#q{hlN8
zo&equ(T)kTgB6pKozk;X#cSogf^rF6PHf-i5P562DB1;g-mqiTR%mA5FU?Bco-!19
z@dz<*H45Y#3-CSvYc7Hf8r<<PzGuOGa4J`&4}{~NDinw@8IUuGm<b@B|0pmNggWr2
zT>Tx6Rr-G%IC~VFIUoamjml!9pI-U)k#m_u$LaZ{`0AU_BIF4kCoH0*)rSpiN;SJZ
zDQxxgMym8Pj8Yieprum5I~Dod?|s83lQb{m=36$_nQ-;;0+8EhfZO@isG$&)n<Y%`
z8MmB2+?0Pmrr^0zO>f}6cB6H*v=zxXG2Sf~mc(c`bjh8Jsx;q?(-Xc7P8|e(nd$<M
zuR%SIgH46=xcxkjHvz=+tI-H(VOC`GpNMePDD2dr)#$O33*EH+7pv#RvbrbCZ^lS+
z&BSXSZI8*{{<ffuhEkXv`D_U3q!!deXn=S@H5$PI)#Lf^>Fo@_ooR=!M&YO9&lTjB
zN#|iR9z!rs>2v$I-bz9zF#(e<a1L6D6-ECwNens(t{R0+0=X+*$lXvFdIRpm5YKKv
zyB&GEID9n<e*^Hx2$(+qNL<!>c6~DZBQ@2HP_z?p(j8#Z|EU@Us;+i%Ff+hvw1EA0
zHR>Xdc0n~t(GK#Z-2TINlkH9!gGL#M@^>{V6*NQ&{v1|diYZ)#41s{i|N5=a&9dS?
zR{*{I?`m}A(N%d69fqt3AfJC~6rZ4+5B}m@4xqaM_x(>b3L=8YpqI#sXcttY6dh1R
z>;FU~1`un1|9cA{l7WbD)o6`Y*e==0!m~s+-p-o=Ot-aP3Rj?CvnWURo>QGbXR`sT
zQQ)^Y;j7V26z90!!j<gy?Zu__tBh&iQTA$RJL5@p1+Dh>ka@iRf2&avK;!wY(a(Sy
zi6&thfs_Ex!>x=#Qx@JeK%WAr6LhT*K+FP89Nh2=`Yei}pM@gA_k#Z*g07wYRwxV+
zt{N?xYL+sf$9UclI&4=|UDLIQBPJFfD6?9tKjq<J+x-=SkM#dljkaBA0YxYDn18}7
zcm=)enzDcm!|)cI9kT*xfv^(V1=T419Mpm)7~+|!!%$N}3uJy@9GC^rYSbun&+56K
zbJ}s#IFUTZQiAkXJq)*C32>S=Fzx&!r09b3--Atq<G*tre{%rw{A!eb9?Cx(hIqz*
z=MR6g|K-oiheh*I_fhc+x+=`fSD766Uh@pMw*?ehX9qWYc(^X#%wJj&OVL)0u;NGR
z;5JPa*Bbc=y-ijZi~9@}w+o~4kGTG8=ZW(I5YMkh=@&r6D=9F<-{ShO!NkF;QMkiF
z5&2vbDQ|xIjDMY?nXGb42Yogi2fskS?FwB;<!gE*Gksxw57b1Aj9Eet*^1MOE(+=w
z8_4X7QOzQf3~4Nv;w*_r#~P}zqs0_c9vM@&4y6>&-jy;J?d=><Sb3)-_Vq}PR{ph>
z%GJfY#^Ls&p-X|vnSD-C#1>Q7My5@4a@Gu%4^LzDmktJQ&snAqlM_cLlOW*Wc(9oE
zFI$@bFiPAh)F$Izc46(I?VYPyc*nr0Mb@9Y%H7@&8}I$JZg-hUKd{f;h-QJm`lzNa
z!M^uSF3}2#AT~j}C0~jon@83mZtiX}CcF8jr%K>@WEj#dPPLpFb{afuw(1oftq2Cw
zTT?Cwi_eiJn>gFwQElr5e<@%xd~*^rXQidkHb_)jW2NAsi(ni0(_d<)Rog&g$Mh!c
z+q>(pgTgln-<N9iw><VQN^YSNtt$4Jj~Wq5itII==)<{ZX~5=9Rae=xDZ}P4PO@pF
zsM6@itv&jS?~dmECG48m34NW`mQM)x;zPT3>k)D_GIYE7SP4^-ab-|$j;IzEu7%VD
zalXkrP)e)6hL5Z<mxWb}8W~@pdLOqFrRdJ?j#uPl(1&dTi(wHyh^gY!+>9sNNX-KS
z_w<VI3y{!}S%2e68c#01%f6dqgml0q$y?UfUzkiwP!hHLRK`D#=6cWL_8L}wiEBvx
zH!3UV?cOtwv*s(Ky6t(0ECtdmPv38ur(^u~fZe}m*mE@-nO}vlQ+3q>>CM;diYVoB
zKkLk<FhSazh<7TM2`%Tga>cqCDNe?o>Uyg6PzB&TBO62F<2iYL`KlwmS?<kk%vSv|
z&+j6m3gfQ9{aJ_M2|<yI&T?ad+?!6S&0M(3mXGKaytPi4@VD;jqDhGQ=U#6Y%_^`|
ztt<VIEBi^5g-TlbJ@w>hXJ>K4oRY=Ediyn0=lF^^UAsl2F5$&{{K7b)M~v#tG!mPa
z5T?|d31+P0h>yjB<fq0CSKU9ne%0UNi9fi{Nb`{h%hmDmlinWr&NQ)^6%Oeu>#Mnv
zq`wTzLmG;MY1Hc&_1=AN#CCtJMB_gzJI=LsiKOcBrKt(zpY#Ei)EVT#`bO`ZQ|sl3
zy_72kF9*FpAfl~~#haj=TuxD5jW<b6L5mzmr}TZqzlWGN;ppaH9d!M2^K0x6JXsCm
zZ#-!;nxD(H#5{D!g~%<`$n|2inI#f=Z{Nzk@-Y9YslD$5x`}?H`z5A$t_yuDIFvZZ
zejL4wAGeWF1^i=zuJbZCTITm2Dtf+ZOn<JTsbe}L%YrHxYOkEPA;F)(^wsIs?0{LV
zMw@mFpHhn5q~4>?)PWvT`l53UoJ3Sk=+~-BO;W|SlT#njY{|*q_-wX)?7hlnl2?IG
z?=H^QDV9C2`R3k%Bvq)EZd7lp)C+Q3ubYDq&&OU2_Wlf_JO`>zroR{8G;AS^P<QaU
zzQR-c@Ye(-y<L+3UVm03TKx2GM`7<)R&`|<gquj(Y~j7lFCqjqzHie~T(p^#R2`R$
z)+(OlI`th4p-4Nq>u5-ajBDsB7A=n4;U2o@JKi(FZ-q(|ubSsiSgH9*rg9Nii6OLi
zqUY*Ky$CCb^Co>&{)E`$vFB-7oWsBJT!s!i??vETvL4k=deolGPU^0(6P$`xHDT4s
zasz=9srr}u)Ea?K&L&}bfkDC~%kkyY;?K=t_o!VL{8Zf*zg&9#Eq{|goPhh8^mY)n
zZr8O!ec66fofMV0dl+R3FAh=d^jPm9sPL0FF;DYo8nXl$9g>aBt3`Yea!rxX9aKl%
zYtcpjMlm}t3O>LRFV6UGXvY75CGtNRKkNWx{GVzR{sD}vjCR5IF#RI*0rnV%_&ei=
z9bg#`t48569-`OP-F1^H76a1cSW4N7qk@zc$4;)on0=)M;}g335L38*hhApiRvu|i
z{wQ95v0*K{BmVWRrf9BaL%KM1@0VWM=<3qlTzX~(H}(lw4F`5}VtxobP~DQo03ARB
z_+Ib`?}0k71LF(lK*xCwPyvYN|7sBZ64ZeV7~+`&9e*4!|KCSApBCEY9Z2oaiZ2t&
z_wKRbMxp_xDVdn??Q8l-O(~|VZ^sx(=#a&4WLD-R*HwMoA+1;8n4|^O(Oj&q7pm^B
zuL<x4YXtc`br2P_3#w3xJ`j=Y&;NGwk6!>H+;4@#ZVa>vMR`(_e7RC>?hBSJ+pkat
zqJ*EawRWFoN5gi=b^3)VjlVLoL^j)`X5XDKzixz8@6L-jj6b*XMpZMy%+6gGqn9&{
zi<O=<k#H|Z;2^nHX`Hhc(rGti>8z{n@wVDeU&`mQK{mTu3V+A*=y6i{{26ajW29#y
zJZ|aJsW*ZD1lagFZPH1xy+W}l!&UfU6be=v_xcsthT0)+ArX%7fIN?r#UhhyH(4g9
z@LEj1FVLD2qZc^MtRt5sF%l+*+-uOLjEijVQ7*6dEK6&_zV)nFo7wg-Ha`A^V@t=j
z^j%&m4<3UV)A7PM@>LZ%-Ly5%ZJUZ6Ps*vGLDE)n@0$zlp^iAGdD73tzhL69YU3o~
zCf+Wndoo#cAdwoQv|x=*Hd%EbJ|wQ8c(+)E;K-NsX_^t+DMnt%J<4DtSBMvCS(4VU
z(KD4NVS0jc^${Tk)ipR~i?2Pt#%`%OqEH4qXs@HzZJO?5ANNF}2dS0B$g$E49i(gv
z9OsHkI8_<kLvLk?x4m!6S==b$pNoQGVvD|MW}sDjd3)t_Bc=9ki4W_CKD5sM{+Hak
za@V&vbr~A8k={)bkIe;(7|=QT`Y15Itrk8`5l7eg(l=tdQ4)11zZCQ-*rX=3B(S>P
zsHjBZ#BaZaF2_+(G~CLd)=UYx=Quy3H;L#W`gD&o=WyYJ$JGVPIv)x9G^v@NJWcT-
z;!S;#Jz76Yl{86gsh;{dKuoJtc&qJ0X4zZOShH3{=Iv|mDMD1-s2ZlZ1{@!wZkBI!
zjZhxqVPle3ip^iCws@)PNo7fDZ)ihnj7<5U*+kJC(xDkk&-X*ylc;??i~N(3Up;w0
z!>}5**Mf9XCNjTF6JeNo<9$}fcgk4Tj!;boxkf$|<BAy~VkyxE_=L>P8Re^1Q@dUb
zA;UMPT&L@we_nx|d&G8k=C!&7fBlSk$U~i;x36h>uxuGCcep*fZ(RNHLMG*T-tE~9
zek={&2lYkTpJLUVmTh|jyM%Bas?qho=_~7h@o4Ay1nM<sYRd-#vqp~>Qx%0@Lvk<g
zKNj6MwtJ=Pupsm-(PZ>v8ttV%V&8!js{+YP((a={!nvmQLI3^8cZXZ1Ipe+$cTYNu
zzIp0!1zmq&hZh^{Ch{RaeF`ZYC$F|9epSj}%OK*1bcw{^ZM%<VX>3BCUr|)MuRhq+
zd-tZmk-(<@+2H3q?ZtZT652J44aWRAuXkgXn+&P=qa-;2lnSWZqBSoJ-`9T2h&sk;
zWG;FeZ{<BUOCE)W@A!t}ry@R|?>mR-Ei+mMFl>x~XvhS<JHZXVepjIs{m`)aQ{McJ
z25lT@*uYhxKs1np@eh7`>6NY4=8g_ILhkLpp{rF3-gi`PnoM5NlGsMFr%jygCW(7D
zL{cnAb(r*8)ANQe{u-}_lhUyj7w@hwb%xvf&AGC~yrIWTc7&|NFPXOdzOtm(G3Dqs
zig`?ce9Zv9=SM&NGBl`1{vFgK$Yl)L;KT1v6$)@w1mg@uv<DE+kA8{)r~?%+#4`sR
z{y1<J{bvp+f)4N*Ev4-B6RG3a4zOGHB`+;>lXOyiiOxQ$nh?wtFvkw;bda`Ty1Vv*
z2@_A=Su6R8o=G1!Imjg$;BtQTNihiJ((xCUygyvds!w<>RI$M&PeKSr2OgfdIUv0h
zBHB7Y@OLp6LEct$4eH7i0jDafUg+rx)YD<u)ZY(3sHfoL^lwk0I*b6s^Q%w#RVd=C
z|3rkVKF>~x9Q2fFMML)%t>P-%ewYt!)Wm(fwF9}FtAkBK0W1`a0l)OSu6<ED?s=U9
z>UjiA*9R^$xZxM{PAk)|L8sUMHJuB%BOUP7C;W8$lSe#LS>`UG#CZ4Zj)n`-#rUwm
zNq!eQw+@{&_}3(P=p?x66E+D%Ot_Fc#TO8f@(T>{>^61)H$VZt`h>p$_=}KmN`Vcr
mOUcA-K?9g_B|J1J;G}(E(*LRY1d68-1<+5h`cw~xK>i<bKTtFP

delta 5
McmZ2kCow?+00znd=l}o!

diff --git a/src/sniffer.c b/src/sniffer.c
index 84eeec76e1..05afd85671 100644
--- a/src/sniffer.c
+++ b/src/sniffer.c
@@ -2958,6 +2958,13 @@ static int SetupKeys(const byte* input, int* sslBytes, SnifferSession* session,
                 #endif
                 }
             }
+        #ifdef WOLFSSL_CURVE25519_BLINDING
+            /* Blinding draws from the key's RNG on every shared secret. */
+            if (ret == 0) {
+                ret = wc_curve25519_set_rng(&args->key->priv.x25519,
+                    session->sslServer->rng);
+            }
+        #endif
             if (ret == 0) {
                 idx = 0;
                 ret = wc_Curve25519PrivateKeyDecode(args->keyBuf->buffer, &idx,