Consequences of compromised zone keys in DNSSEC

HAL Id: inria-00070172

https://hal.inria.fr/inria-00070172

Submitted on 19 May 2006

HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub- lished or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers.

L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d’enseignement et de recherche français ou étrangers, des laboratoires publics ou privés.

Consequences of compromised zone keys in DNSSEC

Gilles Guette

To cite this version:

Gilles Guette. Consequences of compromised zone keys in DNSSEC. [Research Report] RR-5854, INRIA. 2006, pp.13. �inria-00070172�

ISSN 0249-6399 ISRN INRIA/RR--5854--FR+ENG

a p p o r t

d e r e c h e r c h e

INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE

Consequences of compromised zone keys in DNSSEC

Gilles Guette

N˚5854

Mars 2006

Systèmes communicants

/1032423576&/18579:9;5=<

>=?A@CBEDGFH:@IGJKFFLNMPOQI:RSMTBE@

UWV JKXCHBZY V FJ V

[ RK\N\]J V BZ^AH V H:I`_PH V I`_NHaMb7cKd7cSegfihjR V @kSl7lKmf!n:op\PRSq7H:@

rtsvu:wGxzyN{KwK| } _PH~JKF&RSOQM€RSFH>A?=@‚BƒH:F„OQ@pR…^NOQ@‚B V O‡†PLABƒHˆ^‰B V HGHGŠ3†]RK@ƒH:^‹^NRSBERK†PRK@ƒHKŒ } _NH~€>

\ VJKBƒJAIJ7ŽOQ@Ž‘R V qKH:Ž‡?…LP@‚Hˆ^’BƒJ“B V RSM]@‚Ž‘RzBEHR“_=LNF&RKM V H:R7^NRS†PŽ‡HF&RKI`_NOQMNH&MPRKFH&O‡MTBƒJ1RKMg” U R7^N^ V H:@E@GŒ

} _PH•~€>–@‚HˆIL V O—BC?’H˜=BƒH:MP@ƒO‡J7MP@&™š~€>N>A›œ%_]RK@ž†ŸHGHGM‹^NH:@ƒO‡q7MNH:^’BƒJ1\ V JKBƒH:IBBƒ_NH~€>g\ V JKBƒJAIJ7Ž4Œ

~€>P>=›œ L]@‚Hˆ@\NLN†PŽ‡O‘It¡7HG?‰I V ?=\ABƒJ7q V RS\N_=?gRSMP^‹^NO‡q7O—B`RSŽ%@‚OQqKMPRSBƒL V H:@:Œ’Y¢@‚HˆIL V H~€>‹£GJ7MNHtJz¤MP@

RSBtŽQH:RK@‚BtR‰¡7HG?¥\]RSOV ™¦\NLP†NŽ‡O‘Iˆ§z\ V O‡¨zRzBEHˆpBEJ‹\ V Jz¨=OQ^AHBC¤J¥@ƒH:IL V O‡BC?@ƒH V ¨=OQIGH:@:©…^NRzB`R–O‡MTBEHGq V O‡BC?RSM]^

RKLABƒ_PHGMTBƒO‘IGRSBƒOQJKMªŒ } JB V LP@‚B@ƒJKFH&~€>’^NRzB`RN«R~€>gIŽQO‡H:M7B_PR7@BƒJ“¨KH V O‡¬¦?“Bƒ_NH&@ƒO‡q7MPRzBEL V HJK¬­Bƒ_POQ@

^PRzBERt¤O—BE_jBE_NH V OQqK_TB£:JKMNH¡KHG?7Œ } _NOQ@¨KH V O‡®]I:RzBƒOQJKM1O‘@†PRK@ƒH:^jJKMjBE_NHpH:@‚BERS†PŽ‡O‘@‚_PFpH:MTBJS¬RtI`_PRKO‡MjJK¬

B V L]@CBž†]HGBC¤H:HGM–@‚HˆIL V Hp£GJKMPH:@:Œ } J†NLNOQŽ‘^…BE_NO‘@I`_PRSOQM…JK¬WB V LP@‚B:«R~€>N>=›œIŽQOQHGMTBMNHGHˆ^N@R@ƒH:IGL V H

H:MTB V ?\ŸJKOQMTB:©R•£:JKMNH¡7HG?“IJ7MA®PqKL VHˆ^1RK@B V L]@CBEH:^1OQM1Bƒ_PHIŽQOQHGMTB:Œ¯Y¯MP^1BE_NHGM«]BE_NHIGŽ‡OQHGMTBFLP@‚B¯®PM]^

Rp@ƒH:IL V H\PRzBE_•¬V JKFRp@‚HˆIL V H¯H:M7B V ?&\ŸJKOQMTBBEJpBƒ_NHž°TLNH V O‡Hˆ^t~€> V Hˆ@‚J7L V IHKŒW±ŸJ7MNH¯¡7HG?A@R V HžI V O‡BƒO‘IGRSŽ

OQM‹~€>N>=›%œ²RSMP^–R V H&LP@ƒH:^gOQM‰HG¨KH V ?’@CBEHG\P@JS¬R“MPRSFH V H:@ƒJKŽQLABƒOQJKMŒ•”³M–Bƒ_NO‘@ V HG\ŸJ V B:«¤Ht\ V Hˆ@‚H:MTB

R@‚BƒLP^N?tJKM1IGJKMP@ƒH:°TLNH:MPIHˆ@%JS¬vR&IGJKF\

V

JKFO‘@‚Hˆ^t¡7HG?•OQM1~€>N>=›œŒ]´’H^NH:@EI

V

O‡†ŸHIJKF\

V

JKFO‘@‚Hˆ^t¡7HG?

RSB‚B`RKI`¡A@%RSMP^¤H\

V

Hˆ@‚H:M7BZIGL

VƒV

HGMTB^AH¬¦H:MP@ƒH:@:Œ

µ1¶T·¹¸Eº» xz¼vuK| ~€>P>=›œ«P¡7HG?tIGJKF\ V JKFO‘@ƒ@ƒO‡J7Mª«=MNHBC¤J V ¡•@ƒH:IL VO‡BC?

½‘¾À¿ƒÁÃÂ:Ä%¿ÅvÆQÁÃÇ3ÈÉ

ÊWËÍÌÏÎÏÎÏЂтÒËÍÓ;гÔ4Ô4ЃÕvÌÏÖ4ÌÏÑ3׈ÒØQÖ

Unité de recherche INRIA Rennes

IRISA, Campus universitaire de Beaulieu, 35042 RENNES Cedex (France) Téléphone : 02 99 84 71 00 - International : +33 2 99 84 71 00

Télécopie : 02 99 84 71 71 - International : +33 2 99 84 71 71

'*),++&-.

u | Hž@ƒ?7BEDGFHž^AHMPJKF&@^NHž^NJKF&RSOQMNH¯Hˆ@CB%LNMNH†PR7@‚H^AH^AJKMNMGH^NOQ@‚B V O‡†PLGH†PRK@GH@‚L V LPM

FJA^AD:Ž‡HR V †]J VHˆ@ƒIGHGMTB:Œ Hp\ V JSBƒJAIGJKŽQH~€>jHˆ@CBžŽ‘R V qKHGFH:M7BLABƒOQŽ‡O‘@\ŸJKL V HŸHˆIÍBƒLPH V H:@E@‚H:M7BEO‡H:Ž‡ŽQHGFH:M7B

Ž‘RIGJ VEV Hˆ@‚\ŸJKMP^PRSMPIGHHGMTB V H¯LNMtMNJKF ^AHFR7I`_NOQMNHZHB@ƒJKM•RK^ V Hˆ@ƒ@ƒHZ”U Œ H:@H˜=BƒH:MP@ƒO‡J7MP@­^AH@ˆIL V O‡B^NL

~€>–™4~€>N>=›œ%¯JKMTBGBIGJKMGLNH:@%\ŸJKL V \ V JSB:qKH V IGH\ V JSBEJ=IGJKŽQHKŒ U J7L V IH:ŽQRP«]~€>N>A›œ LABƒOQŽ‡O‘@ƒHŽQR

I V ?=\ABEJKq V RK\N_NOQH•IGŽ\PLN†NŽQOQ°TLNHRKO‡M]@‚Ov°7LPH^AH:@@‚OQqKMPRSBƒL V H:@%M=LNF V O‘°TLNH:@:Œ¯MNH£GJ7MNH~€>N>=›%œ \]JT@CŠ

@ƒD:^NHpRKL…FJKOQMP@LNMNHp\PRSOV Hp^AHIŽ:@™š\NLN†NŽQOQ°TLNHz§;\ V OQ¨GH;Z\ŸJKL V @ƒOQqKMNH V @ƒH:@ž^AJ7MNMGHˆ@ž~€>jHGB¬¦J7L V MNOV

RKO‡M]@‚OP^NHGLA˜&@‚H V ¨=O‘IHˆ@W^AH¯@:IGL V O‡BHˆ@ƒ@ƒHGMTBEO‡H:ŽQ@©Ž! OQMTBGq V O‡BHGB­Ž! RKLABƒ_NH:MTBƒO‘IO‡B^NH:@W^AJ7MNM:H:@:Œ U JKL V ¬šRSOV H

IGJKMA®ŸRSMPIGH"&^NH:@Z^AJ7MNM:H:@Z~€>¹«]LNMjIŽQOQHGMTB¯~€>N>=›œ ^NJKO‡BZHGM1¨ V O‡®PH V Ž‡Hˆ@Z@‚OQqKM]RzBƒL V Hˆ@%MTLPF# V O‘°TLNH:@

R;¨7H:IŽQR&IGŽ^NH£GJKMPHžRK\N\

V

JK\

V

OGHKŒ­œHGB‚BƒH¨$

V

O—®ŸIGRzBEO‡J7MHˆ@CB†PR7@:H@‚L

V

Ž% B`RS†NŽQOQ@E@ƒHGFHGMTBZ^& LNMNHI`_PR('‘MPH

^NHIGJKMA®]RKMPIHHGMTB

V

H^AH:@%£:JKMNHˆ@@:IGL

V

O‘@GH:@:Œ

U

J7L

V

IJ7MP@CB

V

LPO

V

HIGHB‚BEHI`_PR)'MNHK«=ŽQHIGŽ‡OQHGMTBR†ŸH:@ƒJKOQM^* LNM

\ŸJKOQMTB^& H:MTB

V

GH&@ˆIL

V

O‘@W©žLNMPHIGŽ•^NHp£:JKMNH&IGJKMA®Pq7L

V

GH^NRSMP@žŽQH&IŽQO‡H:MTBIJKFFH&IŽ&^AH•IJ7MA®]RSM]IHKŒ

U

LNOQ@:«ŸŽ‡HpIŽQO‡H:M7B^AJKO‡B¯B

V

J7LN¨KH

V

LNM…I`_NH:FO‡Mj@:IGL

V

O‘@\PR

V

BERKMTB¯^AHIGH\]J7O‡MTBXCLP@ƒ°TL* RSLN˜“^AJ7MNM:H:@¯~€>

^NHGF&RSMP^GH:@:Œ H:@¯IŽ:@¯^NH£GJ7MNH:@Z@ƒJKMTBZHˆ@ƒ@ƒHGMTBƒOQHGŽQŽQH:@ZRKL¬¦J7MPIÍBEO‡J7MNMNH:FpH:MTB^AH~€>N>A›œ HB@ƒJKMTB¯LNBƒOQŽ—Š

O‘@GH:@^NRSM]@ZBEJKLABEH:@ZŽQH:@+B`RS\ŸH:@^& LNMNH

V

:@ƒJKŽQLABEO‡J7Mj^AHMNJ7F“Œ¯~RKMP@IH\]RS\NOQH

V

«]MPJKLP@¯\

V

ˆ@‚H:MTBƒJKM]@ZLNMNH

GBƒLP^NHž^NH:@%IJ7MP@ˆ°TLNHGMPIGH:@^& LNMNHIŽIGJKF\ V JKFO‘@‚Hž@‚L V ŽQHž\ V JKBƒJAIJ7Ž‡H~€>N>=›œŒ]€ZJKL]@^:I V OQ¨KJKM]@­ŽQH:@

RSB‚B`RK°TLNH:@\]J7LN¨zRSMTB-,GB V HtFHGMPH V q V/. IH0…LNMNHIŽIJ7F\ V J7FOQ@ƒH•HBpMNJKL]@\ V :@ƒHGMTBEJKMP@ŽQH:@p^1G¬¦HGMP@ƒH:@

\ŸJ7@E@ƒO‡†NŽQH:@:Œ

2»

wˆu

¸

{3

| ~€>P>=›œ«]IGJKF\

V

JKFO‘@ƒ@ƒO‡J7M^AHIGŽ7«P@‚HˆIL

V

O‡B

V

ˆ@‚HˆRSL

& '

)(&*(

} _PH~JKF&RSOQM €¯RSFH1>=?A@CBEHGF ™4~€>N,+h1JAIGd.-SR=«Wh1JAIGd/-;†À«WY l7k10ZO‘@R…_PO‡H V R V I`_NO‘IGRKŽ^NOQ@‚BV O‡†PLABƒHˆ^

^PRzBERK†PRK@ƒHFJ7@‚BƒŽQ?jLP@ƒH:^’BƒJ“B V RKMP@‚Ž‘RzBEH&_NJ7@‚BMPRSFHˆ@O‡MTBEJ1” U RK^N^ V H:@E@ƒH:@:Œ } _PH•~€>g\ V JKBƒJAIJ7ŽW^AJ=H:@

MPJSB%O‡MPIGŽ‡L]^AHRSM=?•@‚HˆIL V O‡BC?@ƒH V ¨=OQIGH:@@‚L]I`_RK@%^NRSBERO‡MTBEHGq V O‡BC?RKMP^RSLABE_NHGMTBƒO‘IGRSBƒOQJKMª«=¤_NO‘I`_tŽQHB`@@‚J7FH

¨=LNŽQMNH V RK†NO‡ŽQO‡BƒOQH:@OQM‰BE_NHt\ V JSBEJAIJKŽ2+3HGŽ47cA«>AI`_54Ko=«Y¯Y¯lKe0Ì } _NH V HG¬¦J V HK«Bƒ_NH”³M7BEH V MNHBp›WMNq7O‡MNH:H V O‡MPq

} RK@ƒ¡76PJ V IH™¦”³› } 6%_PR7@^AHG¨7HGŽQJK\ŸH:^tBƒ_NH~€>@ƒH:IGL V O‡BC?•HG˜TBEHGMP@ƒOQJKMP@™4~€>N>=›œ%Œ

~€>N>A›œ8+›RK@494A«:LPMPlKoA«TY¯Y <; l7cKRA«KYY <; lTcSIz«TY¯Y <; l7cS†/0PLP@ƒH:@\PLN†NŽQOQIŠ3¡7HG?I V ?=\ABEJKq V RK\N_=?

BEJž\ V Jz¨=O‘^AH~€>p^NRSBEROQM7BEHGq VO‡BC?RSMP^RSLABE_NHGMTBEOQI:RzBƒOQJKMŒ›­R7I`_MNJA^AH%JK¬PBƒ_PHZ~€>B V H:HK«SI:RSŽQŽ‡Hˆ^R£GJ7MNHK«

Jz¤M]@RSBŽ‡HˆRK@‚BR¡7HG?1\PRKOV LP@ƒH:^…BƒJ“q7HGMNH V RSBƒH^AO‡q7O—B`RSŽW@ƒO‡q7MPRzBEL V H:@JS¬Bƒ_NH•~€>’£GJ7MNHO‡MN¬¦J V FRSBƒOQJKMªŒ

}

_PH¯†PR7@‚O‘I¯^NRSBERLPMNO—B%JS¬ÀBE_NO‘@­OQMA¬¦J

V

F&RzBEO‡J7M•OQ@R

V

H:@ƒJKL

V

IGH

V

HˆIJ

V

^1™

[¯[

ÍŒ=›­R7I`_

[Z[

_PR7@R\PR

V

BƒO‘ILNŽ‘R

V

BC?=\ŸH¯BE_PRzB%OQMP^AO‘IGRzBEH:@¤_NO‘I`_t¡=OQMP^tJK¬^NRSBERO‡BZIJ7M7B`RSOQMP@:Œ=6PJ

V

H˜NRSF\NŽQHK«ARp~€>$>ž›@?

[Z[

IJKMTB`RSOQMP@R

£:JKMNHž¡7HG?K«NR

[Z[

>=”A:

[¯[

IGJKMTBERKO‡M]@Rp@ƒOQqKMPRSBƒL

V

HRKMP^RSM1Y

[Z[

IJKMTB`RSOQMP@RSM”

U

¨=e•RK^N^

V

Hˆ@ƒ@:Œ

”³M’J

V

^AH

V

BƒJB

V

LP@‚Bž~€>’^NRzB`RN«ÀR

V

H:@ƒJKŽQ¨KH

V

™¦Bƒ_NH&~€>jIGŽ‡OQHGMTB͝¯†PLNO‡Ž‘^N@žRtI`_]RSOQM…JS¬­B

V

LP@CB+B:O‡HˆlNnC0

†=?–¤%RSŽQ¡TOQMNq1BE_

V

JKLNq7_‰Bƒ_NH“~€>–B

V

H:Ht¬

V

JKF„R’@‚HˆIL

V

HtH:M7B

V

?g\ŸJKOQM7B+>> lKe0ž™AEDFDQ«%R1B

V

L]@CBEH:^‹¡7HG?

@‚BERSBƒO‘IGRKŽ‡ŽQ? IJKMN®PqKL V H:^ O‡M Bƒ_NH V H:@ƒJKŽQ¨KH V «BC?=\NO‘IGRKŽ‡ŽQ? R‹BEJK\ ŽQHG¨7HGŽž£GJ7MNHˆ•BƒJBƒ_PHg°TLNH V OQH:^ V Hˆ@‚J7L V IGH

V H:IGJ V ^ÀŒY V Hˆ@‚J7Ž‡¨7H V O‘@WRS†NŽQHBEJ†NLNOQŽQ^•RI`_]RSOQM&JS¬ŸB V LP@CBO—¬ÀO‡BJz¤MP@WR@ƒH:IGL V HHGMTB V ?\ŸJKOQMTBRSMP^O‡¬¹Bƒ_NH V H

R V HJKMPŽ‡?t@ƒH:IGL V H£:JKMNHˆ@%JKMBƒ_NH\]RzBƒ_¬V JKF BE_NH@ƒH:IL V HžHGMTB V?•\ŸJKOQMTB%BƒJBƒ_PH°7LPH V O‡Hˆ^t£:JKMNH7Œ

”³MBE_NO‘@ª\PRK\]H V «ˆ¤H^AH:@EI V O‡†ŸHWOQM>=H:IBƒOQJKMkN«ˆ~€>N>A›œg\ V O‡M]IOQ\NŽ‡Hˆ@G«;^AOŸH VH:MTBBC?=\]Hˆ@ªJK¬=¡7HG?A@ªRKMP^Bƒ_NH

@ƒOQqKMPRSBƒL V Hž¨KH V O‡®]IGRSBƒOQJKMt\ V JAIHˆ@ƒ@:Œ } _NH:Mª«NOQM…>=H:IBƒOQJKM1op¤H@‚BƒL]^A?IGJKMP@ƒH:°TLNH:MPIHˆ@JS¬R&IJKF\ V JKFO‘@‚Hˆ^

¡7HG?OQM&~€>N>=›œŒ96vOQMPRSŽQŽQ?K«SOQM•>=H:IBƒOQJKMpe¤H\ V Hˆ@‚H:MTBIGL VEV H:M7B^AHG¬¦HGMP@ƒH:@RS¬BƒH V R¡KH:?IJ7F\ V J7FOQ@E@‚OQJKMŒ

G

'*),++&-. =HI(*(v !t 7(

} _PH•~¯J7FRKO‡M‹€RSFHt>=?A@‚BƒHGF™š~€>PžOQ@R1^AO‘@CBV OQ†NLABEH:^gB V HGHGŠ3†]RK@ƒH:^g^NRzB`RS†PR7@‚H7Œ } _NHt~€>’B V H:H&OQ@

^NO‡¨=O‘^AH:^OQM7BEJ&^AJKF&RSOQMP@RKMP^t£:JKMNHˆ@GŒ

JLKAM NPO*QSRUT V2WXR@VY[Z\O*V]<W

Y ^AJKF&RKO‡MjO‘@Rt@ƒLN†AB

V

HGHJS¬BE_NHp~€>1B

V

HGH7Œ } _NHpMPRSFHJS¬­Rt^NJKF&RSOQM1OQ@BE_NHIGJKMPI:RzBƒH:MPRzBEO‡J7M1JS¬­RKŽ‡Ž

MPJ=^NH @Ž‘RS†ŸHGŽ¬

V

J7F#Bƒ_NH

V

J=JSBpJS¬BE_NH@ƒLN†AB

V

H:H•BƒJ…Bƒ_NH

V

JTJKBJS¬BE_NH“~€>–B

V

HGH7Œg>=OQMPIGHtBC¤JjMNJA^AHˆ@G«

_]R;¨TOQMNqBƒ_NH@ERSFH\PR V HGMTB%MNJA^AHK«A_PR;¨7HR^AOŸH V H:MTB%Ž‘RS†ŸHGŽ3«ALNMNO‘IO‡BC?•JK¬^AJKF&RKO‡MMPRSFHˆ@O‘@%HGM]@‚L V H:^ªŒY

^NJKF&RSOQMI:RSMt†ŸHO‡MPIGŽ‡L]^AHžO‡M“RSMNJKBƒ_NH V ^NJKF&RSOQMª«T¬¦J V H˜NRKFp\PŽ‡HBƒ_NH^_^`9a*bdc._ebž^AJKF&RKO‡MOQ@OQMPIŽQLP^AHžOQM

BE_NHc._fb^NJKF&RSOQMª«PR7@@ƒ_NJz¤MJKM6vO‡q7L V Hn7Œ

›­R7I`_1^AJKF&RSOQMOQ@ZIGJKMP@‚BƒO‡BƒLNBƒH:^“JK¬J7MNHJ V @ƒHG¨7H V RSŽ¹£GJ7MNH:@:Œ } _NH£GJ7MNHžOQ@Bƒ_NHR7^AFO‡MPOQ@‚BV RzBEO‡¨7HLNMPO—B

JK¬­BE_NH•~€>–RSMP^’O‘@ V H:\ V H:@ƒHGMTBƒHˆ^j†=?’RMNJA^AH&OQMgBƒ_NH•~€>…B V HGH7Œ•Y £GJ7MNHOQ@F&RKMPRSq7H:^j†=?’JKMNHJ V

@ƒHG¨7H V RSŽªM]RSFH@ƒH V ¨KH V @%BE_PRzBž@CBEJ V HBƒ_PH£:JKMNHOQMA¬¦J V F&RzBEO‡J7MjOQM…R•£:JKMNH®]Ž‡H7Œ } _NO‘@£GJKMPH®PŽQHIGJKMTBERKO‡MP@

RKŽ‡Ž¹BE_NH£GJ7MNH V Hˆ@‚J7L V IH V HˆIJ V ^N@:Œ

ghgji@kFlCmClIn

domain domain

zone

zone domain

"."

mil gov

arpa fr

idsa

prd irisa

mil. fr.

fr.

irisa.fr.

irisa.fr.

6vOQqKL V HnK©~€>“^AJKF&RKO‡MP@RKMP^~€>t£:JKMNHˆ@GŒ

JLKJ N ]<V T Td]hW

} _ V H:HH:M7BEO—BEO‡Hˆ@¤O—BE_ ^AOQ@‚BƒOQMPIB V J7Ž‡Hˆ@R V H\ V H:@ƒHGMTB&O‡MBƒ_NH1~€>R V I`_NO‡BƒHˆIÍBƒL V H7©tBE_NH1RSLABE_NJ V O—B`RzBEO‡¨7H

M]RSFH@‚H

V

¨7H

V

«7BE_NHIGR7I`_NHž@‚H

V

¨7H

V

RSMP^BE_NH

V

Hˆ@‚J7Ž‡¨7H

V

™š@ƒHGH+Y lTk10¦ÍŒ

¶

y w

» x¦wˆyAw

¶ y

¶ u ¶ x

¶ x

} _PHMPRSFH@ƒH V ¨KH V OQ@ZRKLABƒ_PJ V O—B`RzBƒOQ¨KHJ7M1R&~€>“£GJ7MNHKŒ”ÃB@‚BƒJ V H:@ V H:@ƒJKL V IGH V H:IGJ V ^N@%OQM1O—B`@Z£GJ7MNHž®PŽQHKŒ

›­¨KH V ? V H:@ƒJKL V IH V HˆIJ V ^tOQ@ZR7@ƒ@ƒJAIO‘RzBEH:^&BEJ&Rp~€>M]RSFHKŒ } _NHMPRKFHž@ƒH V ¨KH V%VHˆIHGOQ¨KHˆ@~€>“°TLNH V OQH:@

RK†]J7LABZR~€>MPRSFHRSMP^ V HG\NŽQOQH:@%¤O‡Bƒ_ V Hˆ@‚J7L V IH V H:IGJ V ^N@%IJ7M7B`RSOQMNH:^OQMO‡BE@%£:JKMNHž®]Ž‡H7Œ

¶ {KyN{ ¶ u ¶ x ¶ x

Y IGR7I`_NH@ƒH V ¨KH V OQ@MNJKBRSLNBƒ_NJ V O‡BERSBƒOQ¨KHJ7M…RSM=?£GJKMPHKŒ¯”ÃBžO‘@¯q7HGMNH V RKŽ‡ŽQ?tŽQJAIGRzBEH:^1J7M…R•ŽQJAIGRKŽMNHGBC¤J V ¡

BEJ V H:IH:O‡¨7H…°TLNH V OQH:@¬V JKFŽQJ=I:RSŽ V Hˆ@‚J7Ž‡¨7H V @GŒ.Y I:RKI`_NH…@ƒH V ¨KH V @‚H:MP^N@ V Hˆ@‚\ŸJKM]@‚Hˆ@BƒJ‰BE_NH:@ƒH’°TLNH V OQH:@

L]@‚OQMNq V H:@ƒJKL V IH V H:IJ V ^P@%O—B¯\ V H:¨TOQJKL]@‚ŽQ? V H:IGHGOQ¨KH:^ªŒ­”ìBƒ_NHIGRKI`_PH@‚H V¨7H V ^AJ=H:@ZMNJSB¯_]R;¨KHBƒ_NHRSMP@ƒ¤H V «

O‡B•¬¦J V ¤%R V ^N@pBƒ_PH…°TLNH V ?‹BEJ‰Bƒ_NH…FpJT@CBRS\N\ V JK\ V O‘RzBEH:^RSLABE_NJ V O—B`RzBEO‡¨7Hj@‚H V ¨7H V O‡Bt¡=MNJz¤Z@GŒ } _NH:Mª«O—B

V H:IGHGOQ¨KHˆ@R…~€> VHˆ@‚\ŸJKMP@ƒH:@:«¡KH:HG\P@R…IJ7\=?’OQM¥FHGFJ V ?–RSMP^¥@‚H:MP^N@O—BpBƒJ…Bƒ_NH V Hˆ@‚J7Ž‡¨7H V BE_PRzB_PRK@

\ VH:¨TOQJKL]@‚ŽQ?Ž‘RSLNMPI`_PH:^Bƒ_NHZM]RSFH V Hˆ@‚J7Ž‡LNBƒOQJKMªŒ¯@ƒO‡MNqI:RKI`_NHZ@ƒH V ¨KH V @RKŽ‡ŽQJz¤Z@vBƒJFOQMNO‡FOQ£GH%BE_NHZ†NL V ^AH:M

J7MRKLABƒ_PJ V O—B`RzBƒOQ¨KHž@ƒH V ¨KH V @ +>AO—B`lKlA«"!=>$3%hjlPnS«]œf>lNnC0Ì

$#

¶ x ¶ u » 3 ¶ x

} _PH V Hˆ@‚J7Ž‡¨7H V O‘@&BE_NH…ŽQJAIGRSŽ¯HGMTBƒO‡BC?Bƒ_PRSB V HˆIH:O‡¨7H:@ V H:°TLNHˆ@CB`@¬V J7FRK\N\NŽQOQI:RzBEO‡J7MP@•RSM]^ @‚H:MP^N@t~€>

°TLNH V OQH:@ZBƒJ•M]RSFH@ƒH V ¨KH V @%J V IGR7I`_NH@ƒH V ¨KH V @:ŒY¬BƒH V _]R;¨TOQMNq•\ŸH V ¬¦J V FH:^BE_NHMPRKFH V Hˆ@‚J7Ž‡LNBƒOQJKMª«]Bƒ_NH

V H:@ƒJKŽQ¨KH VV HBEL V MP@Bƒ_NHRKMP@ƒ¤H V BEJpBƒ_NHRK\N\NŽQOQI:RzBƒOQJKMŒ

%'&=g%(

JLK N R@TAVjO2W

~€>¥@‚HˆIL V O‡BC?’HG˜TBEHGMP@ƒOQJKMP@LP@‚H\NLN†NŽQO‘I•¡KH:?‰I V ?T\NBƒJKq V RK\N_=?…RSM]^‹^AH®]MNHtMNH:¤ V H:@ƒJKL V IH V H:IGJ V ^N@žBƒJ

@‚BƒJ V H¡KH:?=@RSM]^t@ƒO‡q7MPRzBEL V Hˆ@GŒv›­R7I`_@ƒH:IL V H£GJKMPHJz¤MP@JKMPHJ V @ƒHG¨7H V RSŽŸ£GJKMPH¯¡KH:?A@GŒ } _NH\NLN†NŽQO‘I¯\PR VB

JK¬vHˆRKI`_¡KH:?tO‘@Z@CBEJ V H:^O‡M1R&~€>$>ž›? V Hˆ@‚J7L V IH V HˆIJ V ^ÀŒ } _PH\ V OQ¨zRzBEH\PR VBJS¬R£GJKMPH¡KHG?tOQ@¡7HG\AB

@ƒH:I V HGBRSMP^¥@‚_NJ7LNŽ‘^–†]H@CBEJ V H:^gO‡MRj@‚HˆIL V H&ŽQJ=I:RzBEO‡J7MªŒ } _NO‘@\ V O‡¨zRSBƒH•\PR V BOQ@LP@ƒH:^gBƒJ…qKHGMPH V RzBƒH•R

^NO‡q7O—B`RSŽ@‚OQqKMPRSBƒL V HJK¬WH:RKI`_ V H:@ƒJKL V IGH V HˆIJ V ^OQMjBƒ_PH£GJ7MNH®]Ž‡H7Œ } _NH:Mª«¹H:R7I`_j@‚OQqKMPRSBƒL V HO‘@@‚BƒJ V Hˆ^1OQM

R [¯[ >=”A: V H:@ƒJKL V IH V H:IJ V ^ªŒ } J1B V LP@‚BR V Hˆ@‚J7L V IH V H:IJ V ^ª«R V H:@ƒJKŽQ¨KH V FLP@‚B¨KH V O‡¬¦?’RSBŽ‡HˆRK@‚BJKMNH

@ƒOQqKMPRSBƒL

V

HJK¬BE_NO‘@

V

Hˆ@‚J7L

V

IH

V

H:IGJ

V

^•¤O‡Bƒ_1RpB

V

LP@‚BƒHˆ^t£:JKMNHž¡KH:?KŒ

$# º» w ·¶ u » ]¶T· u

} _PH V HtO‘@BC¤Jj¤%R;?…¬¦J V R VHˆ@‚J7Ž‡¨7H V BEJjBV LP@‚BRj£GJKMPHt¡KH:?KŒg›WO‡Bƒ_NH V BE_NOQ@p¡7HG?–OQ@pIJ7MA®Pq7L V Hˆ^–O‡M¥Bƒ_NH

V H:@ƒJKŽQ¨KH V «]Bƒ_POQ@žO‘@R / I ™šRKŽQ@ƒJI:RSŽQŽ‡Hˆ^…R "!$ 7 C "J V Bƒ_NH V H:@ƒJKŽQ¨KH V B V LP@‚BE@žR~>

V H:@ƒJKL V IGH V HˆIJ V ^X+B:LNMPl7o0Bƒ_]RzBRSLABE_NHGMTBƒO‘IGRSBƒHˆ@¯BE_NO‘@¡7HG?7ŒY ~ž> [Z[ O‘@žR V H:@ƒJKL V IGH V HˆIJ V ^j@‚BƒJ V Hˆ^

OQM“Bƒ_PH\PR V H:M7BZ£:JKMNHžBE_PRzBžRSLABE_NHGMTBEOQI:RzBƒHˆ@ZR&¡7HG?tJK¬Bƒ_NHI`_PO‡Ž‘^1£GJ7MNHKŒ 3%RK@ƒOQI:RSŽQŽ‡?7«PR•~ž> [Z[ IGJKMTBERKO‡MP@

Rp¡7HG?•O‘^AHGMTBEO—®PH V RSM]^R_PR7@‚_JS¬RI`_NOQŽQ^£GJ7MNHž\NLN†NŽQO‘I¡KH:?KŒ } _NH~ž> [Z[ OQ@Z@ƒOQqKMNHˆ^t†=?•\PR V H:MTB%£:JKMNH

¡7HG?A@:Œ

Y ~> V Hˆ@‚J7L V IH V H:IJ V ^‰I V HˆRzBEH:@R’@‚HˆIL V HtŽQOQMN¡–†]HGBC¤H:HGM¥R…\PR V HGMTB£:JKMNHRSMP^¥O—B`@I`_NOQŽ‘^‰£GJ7MNHK«

BEJKq7HBƒ_PH V ¤O‡Bƒ_–Rt^NHG\ŸHGMP^AH:MPI?7Œž”³MP^AHGHˆ^À«À¤_NH:M’R•¡7HG?“O‘@ V HGMNH:¤Hˆ^1OQMjBƒ_PHpI`_NOQŽ‘^j£GJ7MNHK«]Bƒ_PHp~ž> [¯[

FLP@‚BZ†]H

V

HGMNH:¤Hˆ^•OQMBƒ_NH\PR

V

H:MTB%£:JKMNH7Œ

}

_NO‘@%O‡F\NŽQO‡Hˆ@ZRIJ7FpFLNMNO‘IGRSBƒOQJKM†]HGBC¤H:HGMBƒ_NHI`_PO‡Ž‘^t£:JKMNH

RKMP^1BE_NHp\PR

V

HGMTBž£GJKMPHKŒ

}

JFOQMNO‡FOQ£GHpBƒ_PH†NL

V

^AH:M’^ALPHBEJtBE_NO‘@RK^N^AO‡BƒOQJKM]RSŽ^NRzB`RtHG˜AI`_]RSMNq7HK«À@‚J7FH

¡7HG?A@p^AJ’MPJSB_PR;¨KHRSMR7@ƒ@ƒJAIO‘RzBEH:^‰~ž>

[Z[

Π}

_PH“~HGŽQHGqTRzBEO‡J7M>=OQqKMNH

V

™4~>NpFJA^AH:ŽOQMTB

V

JA^ALPIHˆ@R

^NOQ@‚BƒOQMPIÍBEO‡J7Mj†ŸHBC¤HGHGM“BC¤J&BC?=\ŸH:@JS¬¡KH:?=@:©Bƒ_NH>žHG?1>=O‡q7MNOQMNq >žH:?=@™E>>$>¯RSMP^BE_NH±ŸJ7MNH>=OQqKMPO‡MNq

>žH:?A@™Ã±À>$>ŒNY >>$> _PR7@%RSM“RK@E@‚JAIO‘RzBEH:^~>

[Z[

O‡MBE_NHž\PR

V

HGMTB£GJ7MNHRKMP^“@‚OQqKM]@J7MNŽQ?t~€>$>ž›@?

V H:@ƒJKL V IGH V H:IGJ V ^N@:ŒvY ±ª>$>a^AJ=H:@­MNJSB­_]R;¨KH¯RKMT?pRK@E@‚JAIGOQRSBƒH:^&~ž> [Z[ RSMP^&@ƒO‡q7MP@­RKŽ‡Ž V Hˆ@‚J7L V IH V H:IJ V ^P@

OQMBƒ_NH£:JKMNH®PŽQHKŒ

›W¨7HGM‰BE_NJKLPqK_¥~ž>–O‘^AHGMTBƒO‡®PHˆ@BC¤J V J7Ž‡Hˆ@¬¦J V ¡KH:?A@G«@>>$> RSM]^¥±À>$>«ªBE_NH V HtO‘@MNJ V H:°TLNOV H:FpH:MTB

BE_PRzB£GJ7MNHLP@ƒH:@ZBC¤Jt^NO¹H V HGMTB¯¡7HG?A@¬¦J V Bƒ_PH:@ƒH V J7Ž‡Hˆ@GŒ”ÃBOQ@¯H˜A\ŸH:IÍBEH:^“BE_PRzBF&RSM=?@ƒF&RSŽQŽ£:JKMNHˆ@Z¤OQŽ‡Ž

J7MNŽQ?•LP@ƒHJ7MNHž¡KH:?K«A¤_NOQŽ‡HŽ‘R V qKH V £GJKMPH:@%¤OQŽ‡ŽÀFJ V HžŽ‡OQ¡KH:Ž‡?tLP@‚HFLNŽ‡BƒOQ\NŽ‡H¡7HG?A@ +:LPMPlKo03Œ

$#

#$%& u (' yNw x ¶ ¶ x()v{7yAw» * x » { ¶ uˆu

} J^NH:I

V

H:R7@‚H“BE_NH–@‚OQ£GH’JS¬Bƒ_PH’£:JKMNH1®]Ž‡H7«

V

H:@ƒJKL

V

IH

V

H:IGJ

V ^ RK@E@‚JAIO‘RzBEH:^BEJ‹Bƒ_PHg@ERSFHjMPRKFH’RSM]^

_]R;¨TOQMNq&BE_NH@ERSFHBC?T\ŸHR

V

Hq

V

JKLN\ŸH:^1RKMP^j@ƒO‡q7MNH:^1BƒJKq7HBE_NH

V

Œ6PJ

V

HG˜NRSF\NŽQHK«¹O—¬­Rt£GJ7MNHJz¤MP@ZBƒ_

V

HGH

~€> >ž›@? [¯[ @G«ZBƒ_NHˆ@‚H…Bƒ_ V HGH [Z[ @R V Hjq V JKLN\ŸH:^ OQM R~€>$>ž›@? [Z[ @ƒHBg™šJ V ¡KHG?A@ƒHB͌͝ } _PHGMª«

HˆRKI`_j¡7HG?1q7HGMNH V RSBƒH:@R@‚OQqKMPRSBƒL V H¬¦J V Bƒ_NO‘@~€>$>ž›@? [Z[ @‚HGB:Œ,+¯HGMPIGHK«ª¤H_]R;¨KHBE_ V HGH@‚OQqKMPRSBƒL V H:@

R7@ƒ@ƒJAIO‘RzBEH:^’BƒJ…Bƒ_NH~€>$>ž›@? [¯[ @‚HGB:Œ } _NH•¨KH V O‡®]I:RzBƒOQJKM–JK¬ZJKMNŽQ?’J7MNHt@ƒO‡q7MPRzBEL V H•OQ@@‚L.-&IGO‡H:MTBBƒJ

B V L]@CB%Bƒ_PH~€>$>ž›@? [Z[ @‚HGB¯RSMP^_NHGM]IHžBƒ_PHžBƒ_ V HGHž¡KH:?A@%O—B¯IGJKMTBERKO‡MP@:Œ

~L V O‡MNqR@‚HˆIL V H%MPRSFH V H:@ƒJKŽQLABƒOQJKMª«TR V Hˆ@‚J7Ž‡¨7H V †NLNOQŽ‘^N@­RI`_PRKO‡MpJS¬¹B VLP@‚B:«KBƒ_PRSB­O‘@BƒJ@ER;?O‡B@‚BER V BE@

¬V JKFRgB V LP@‚BƒH:^ ¡7HG?RSMP^¬¦J7Ž‡ŽQJz¤Z@pBƒ_NH’\PRzBE_BƒJ‰BE_NH…°TLNH V OQH:^ V Hˆ@‚J7L V IH V HˆIJ V ^N@¤_PO‡ŽQHj¨KH V O‡¬¦?=O‡MPq

@ƒOQqKMPRSBƒL V H:@JS¬ V Hˆ@‚J7L V IH V HˆIJ V ^N@%RSM]^@ƒH:IGL V HžŽQO‡MP¡ V HG\ V H:@ƒHGMTBƒHˆ^•†=?t~ž>TŠ³~€>$>ž›@? V H:IGJ V ^N@GŒ

6vOQqKL V H%k@ƒ_NJz¤Z@^AO¹H V HGMTB@CBEHG\P@Rž~€>N>=›%œ‰IŽQOQHGMTB:«S_]R;¨TOQMNqJKMNŽQ?žBƒ_PH V J=JSBv£GJKMPH¡7HG?IJ7MA®Pq7L V Hˆ^

R7@@‚HˆIL V HHGMTB V ?•\ŸJKOQM7B™3>=› U «N¬¦J7Ž‡ŽQJz¤Z@BƒJpB V LP@‚B¯R V Hˆ@‚J7L V IGH V H:IGJ V ^•JK¬Bƒ_PH ^1_^.`9a*b c._fb£:JKMNH7Œ

ghgji@kFlCmClIn

SEP DNSKEY RRset DS

DNSKEY

DNSKEY DNSKEY RRset

DNSKEY RRset DS

RR : authenticates

: verifies

RRSIG RRSIG

RRSIG RRSIG

RRSIG RRSIG

rootzone

fr. zone

zone irisa.fr.

6OQqKL V HkA©œ_PRKO‡MJS¬vB V LP@‚BH:@‚BERS†PŽ‡O‘@‚_PFpH:MTB:Œ

YB¯HˆRKI`_j@‚BƒH:\ª«P¤H_PR;¨KHžBE_NH@ERSFH@EI`_NHGFHK©R•~ž> V Hˆ@‚J7L V IGH V HˆIJ V ^“RSŽQŽ‡Jz¤Z@BEJ&B V LP@‚BR >>$>«PR

>> > RKŽ‡ŽQJz¤Z@BEJB

V

LP@‚BRKŽ‡Ž]Bƒ_NH£GJ7MNHZ¡KH:?™>>$>aRSM]^±À>$>RKMP^±À> > RKŽ‡ŽQJz¤BƒJB

V

LP@CBJSBE_NH

VV Hˆ@‚J7L

V

IGH

V

H:IGJ

V

^N@JS¬Bƒ_NH£:JKMNH7Œ

YZ¬BƒH

V

_PR;¨=OQMNq‹\

V

H:@ƒHGMTBEH:^Bƒ_PH’\

V

OQMPIOQ\NŽQH:@JS¬~€> @ƒH:IGL

V

O—BC?H˜=BƒH:MP@ƒO‡J7MP@G«¤H’RKMPRSŽQ?=£GH…IGJKMP@ƒHŠ

°TLNH:MPIHˆ@JS¬RIJKF\

V

JKFO‘@‚Hˆ^&¡KH:?&O‡M~€>N>=›œ RSM]^&Bƒ_

V

HˆRzBE@OQMP^ALPIGH:^t†T?BE_NH~€>N>=›œ B V

HGHGŠ3†PR7@‚Hˆ^

R V I`_PO—BEH:IÍBEL

V

HKŒ

"%$

>žH:?

V

H:¨KJAIGRSBƒOQJKM•O‘@RSMH˜A\ŸHGMP@ƒO‡¨7H@‚H

V

¨=O‘IHZBE_PRzBZRSB%ŽQH:R7@CBJ7MNH\]R

V

BC?&¤O‡ŽQŽÀ_PR;¨KHBƒJp\PR;?¬¦J

V

Œ”³M“@‚J7FH

IGO

V

ILPF@‚BERKMPIHˆ@O‡B&F&R;?‰†]H“H:IGJKMNJ7FOQI:RSŽQŽ‡?–\

V

H¬¦H

V

RK†NŽ‡HtBƒJ‰RKI:IH:\ABBE_NH

V

O‘@ƒ¡‰JS¬¯MNJKB&_PR;¨=O‡MNqgRj®]MNHŠ

q V RKO‡MPH:^ V HG¨KJAI:RzBƒOQJKM‹@ƒH V ¨=OQIGHRKMP^‰BEJ V H:°TLNOV Ht¡KHG?–_NJ7ŽQ^NO‡MNqg\PR V BEO‡Hˆ@BEJgR7^AH:°TLPRSBƒHGŽQ?–\ V JSBƒHˆIÍBBƒ_NH:OV

\ VOQ¨zRzBƒH¡7HG?A@R V JKLNBƒHpBƒ_PRSB~€>N>=›œ \ V JSBEJ=IGJKŽ^AHˆ@‚OQqKMNH V @_PR;¨7H\PL V @ƒLNHˆ^ÀŒ } _NH V H&R V HpIGL VƒV HGMTBEŽ‡?

MPJp\ V R7IÍBƒO‘IGRKŽ V H:¨KJAIGRSBƒOQJKMt@ƒH V ¨=OQIGH:@\ V Jz¨=OQ^AHˆ^t†=?t~€>P>=›œ @‚LP\N\]J VBEO‡MPqpOQMA¬V RK@‚B V LPIÍBEL V H:@ +Ϝ_]RKlKo03Œ

} _NH V H1R V H“@‚H:¨KH V RKŽ¤%R;?–BƒJ‰IJ7F\ V J7FOQ@ƒHRg¡7HG?KŒ } _NH“® V @CB&J7MNHO‘@&I V ?=\ABERKMPRSŽQ?A@‚O‘@:ŒY F&RSŽQO—Š

IGO‡J7LP@Z\ŸH V @ƒJKMjq7HBE@¯Bƒ_PH\ V O‡¨zRSBƒH\]R V BJS¬­Rt\NLN†NŽQO‘I¡7HG?JKMNŽQ?“¤O—BE_…F&RzBE_NHGF&RzBEOQI:RSŽv¡=MNJz¤Ž‡Hˆ^AqKHˆ@ZRSM]^

I V ?=\ABEJKq V RK\N_NO‘IGRSŽ%F&RzBEH V OQRKŽqKH:MNH V RzBEH:^†=?‹Bƒ_PHj¡KH:?¥J V L]@‚OQMNq‰¨=LNŽQMNH V RS†NOQŽQO—BEO‡Hˆ@&O‡M ¡7HG?A@&J V ^AO‡q7O—B`RSŽ

@ƒOQqKMPRSBƒL V H:@%q7HGMNH V RSBƒJ V Œ } _NOQ@¯¡=O‡MP^“JK¬WRzB‚B`RKI`¡OQ@^AO-•IGLNŽ—B†]HˆIGRKLP@‚HI V ?T\NBƒJKq V RK\N_NO‘IžRSŽQqKJ V O‡Bƒ_NF&@RSM]^

\ VJKBƒJAIJ7ŽQ@¤H V H^AHˆ@‚OQqKMNHˆ^BƒJ V H:@ƒO‘@CBZBEJtI V ?=\ABERKMPRSŽQ?A@‚O‘@:Œf6PJ V OQMA¬¦J VF&RzBEO‡J7Mª«NBE_NHBE_NHGJ V HGBƒO‘IGRKŽÀBƒOQFHBƒJ

I V ?=\AB`RSMPRKŽ‡?=£:HR [ >AY.¡7HG?…™šLP@ƒLPRSŽQŽ‡?tLP@‚Hˆ^O‡M1~€>N>=›%œ BEJA^NR;?N­O‘@%qKOQ¨KH:MOQMBERK†NŽ‡Hn+^AŽ4Tc10Ì

3%RK@ƒO‘IGRSŽQŽQ?K«ˆ\ V OQ¨zRzBEHW\PR V BE@ªJS¬P~€>N>=›%œ’£GJKMPHW¡KH:?=@R V HW@CBEJ V H:^JKMR¯@‚HˆIL V HWŽQJ=I:RzBEO‡J7Mž^NOQ@EIJ7MNMNH:IBƒHˆ^

JK¬RSM=?MNHBC¤J

V

¡¹Œ”ìÀBE_NO‘@O‘@MNJSBBƒ_NHžIGR7@‚H7«TR@‚HˆIJ7MP^&¤%R;?BEJIJ7F\

V

J7FOQ@ƒH¯R¡KHG?pO‘@­BEJR7IGIHˆ@ƒ@WBƒJBƒ_NH

\ V

OQ¨zRzBƒHž¡7HG?&¬

V

JKF BE_NHMNHGBC¤J

V

¡&†=?=\PRK@E@ƒO‡MNqRSŽQŽª@ƒH:IL

V

O‡BC?KŒ

} _NHžBE_NO

V

^\]JT@ƒ@ƒOQ†NO‡ŽQO‡BC?•OQ@¯@‚OQF\NŽ‡?t¤_NHGMBƒ_PHRzB‚B`RKI`¡7H

V

_PRK@Rp\N_=?A@‚O‘IGRKŽªRKI:IH:@E@Bƒ_NH\

V

OQ¨zRzBƒHž¡7HG?A@GŒ

} _PHžRSB‚B`RKI`¡KH

V

IJKLPŽQ^†]H7«A¬¦J

V

H˜NRSF\NŽQHK«NR^AO‘@‚_PJKMNHˆ@CBJ

V

^NOQ@E@ƒRSBƒO‘@C®]H:^£GJKMPHžR7^AFO‡MPOQ@‚B

V

RzBEJ

V Œ

%'&=g%(

[

>AY.¡KH:?t@‚OQ£GH&™š†NO—B`@E h1”

U

>ÀŒ?7H:R

V

cNnˆk

-SmKd

n:lTkze

nˆkKdKl

nˆcKoKm

kSlKe7d

}

RS†NŽQH&nK©

[

>AY.¡7HG?&BE_NHGJ

V

HGBƒO‘IGRKŽªI

V

?T\NBERSM]RSŽQ?=@ƒO‘@­BEO‡FH^AH:\]H:MP^AOQMNqJKMBƒ_PH¡KHG?@‚OQ£GH7Œ

3H:I:RSLP@ƒHpJS¬­BE_NH&~€>…BV HGHŠÃ†PR7@‚Hˆ^jR V I`_NO‡BƒH:IBƒL V HK«À¤_PHGM–Rt£:JKMNHO‘@IGJKF\ V JKFO‘@‚Hˆ^À«ªRSŽQŽ£GJ7MNH:@OQM

BE_NH“@‚LN†¹^AJ7FRKO‡MJS¬Bƒ_NH“IJ7Fp\ V J7FpO‘@ƒH:^‰£:JKMNH“R V Ht\ŸJSBEHGMTBƒO‘RSŽQŽ‡?–BE_ V H:RzBEHGMNHˆ^ÀŒ¥Y¯MRzBƒBER7I`¡KH V ¤O‡Bƒ_R

IGJKF\ V JKFO‘@‚Hˆ^•£GJ7MNHž¡KH:?tIGRKMt¬¦J V q7H V H:@ƒJKL V IGH V H:IJ V ^P@I V ?=\ABEJKq V RK\N_NO‘IGRSŽQŽQ?IGJ VEV HˆIÍBˆŒ

´gH•@‚LP\N\]JT@‚HBƒ_]RzBR£GJKMPHJz¤MP@BE_NJ7@ƒHBC¤JBC?T\ŸH:@žJK¬¡7HG?A@%>>$>RSM]^g±À>$>Œ } _POQ@^AO‘@‚BƒOQMPIÍBEO‡J7M

RKŽ‡ŽQJz¤Z@BEJtHˆRK@ƒHBƒ_NH@‚BƒLP^A?“¤O‡Bƒ_NJ7LABžŽ‡JT@ƒ@¯JS¬­q7HGMNH V RKŽ‡O‡BC?KŒZ”ìJKMNH¡KHG?O‘@L]@‚Hˆ^jRK@ >>$> RSMP^g±À>$> RzB

BE_NH@ERSFHBƒOQFpH7«PRSŽQŽÀ\ V JK\ŸH V BƒOQH:@RK\N\NŽQ?&BƒJpBƒ_POQ@¡7HG?7Œ

LKAM TAW OeQ O*Q TAW.]<Y K

´ _PHGMRž±À> > OQ@IGJKF\ V JKFOQ@ƒH:^ª«:BE_NHRzBƒBERKI`¡7H V Bƒ_PRSBJz¤M]@ªBE_NH%\ V OQ¨zRzBEH\PR VBJS¬PBƒ_NH%¡KH:?IGRSMqKH:MNH V RzBEH

^NO‡q7O—B`RSŽ@ƒO‡q7MPRzBEL V H:@¬¦J V RSM=?•¬¦J V q7H:^ V Hˆ@‚J7L V IH V HˆIJ V ^N@:Œ­´gHIGRKM“MNJSBEOQIGHžBƒ_PRSB@‚OQqKM]RzBƒL V Hˆ@%qKHGMPH V RzBƒHˆ^

†=?pBƒ_PHRzBƒBER7I`¡KH V IGRSMt†]H¨KH V O‡®PH:^¤O‡Bƒ_tBƒ_NHIJ7Fp\ VJ7FpO‘@ƒH:^t±À>$>Œ } _NO‘@%±ª>$> OQ@O‡BE@ƒHGŽ‡¬RSLABE_NHGMTBƒO‘IGRSBƒHˆ^

†=?7>> >@JK¬BE_NH£GJ7MNHž†]HˆIGRKLP@‚HžJK¬Bƒ_PHH˜AOQ@‚BƒOQMNq&I`_PRKO‡MJS¬B V LP@CBZ†ŸHBC¤HGH:MtBE_NH£GJ7MNHRSMP^O‡BE@\PR V H:MTB

£:JKMNH7Œ } _NHGMª«NBƒ_NHRSB‚BER7I`¡KH V _]RK@%MNJMNH:H:^BƒJ&IJ7F\ V J7FOQ@ƒHR>>$>JS¬vBƒ_NH£:JKMNH7Œ

LKJ TAW OeQ O*Q TAW.]<Y K

´ _PHGMR)>>$>.O‘@IGJKF\

V

JKFOQ@ƒHK«7Bƒ_PHRSB‚BER7I`¡KH

V

IGRKMtI

V

H:RSBƒH¯RKMP^t@ƒOQqKMP@~€>$>ž›@?

[Z[

ŒA€ZH:¨KH

V

BE_NHGŽQH:@E@G«

R7@ŽQO‡FO‡BƒOQMNq&Bƒ_PH@EIJK\ŸHJS¬WR£:JKMNH¡7HG?OQ@¯MNJSBR\ VJKBƒJAIJ7Ž V Hˆ°TLNOV HGFH:M7Bˆ«ABƒ_PHRzBƒBERKI`¡7H V I:RSM1LP@ƒHBƒ_POQ@

>> >BEJt@ƒO‡q7MjJSBE_NH V BC?T\ŸH:@¯JS¬ V H:@ƒJKL V IH V H:IGJ V ^N@:Œ%Y@ZBE_NO‘@>>$>²_PR7@¯RKMjRK@E@‚JAIO‘RzBEH:^1~ž> [Z[ OQMjO‡BE@

\]R V HGMTB£GJKMPHK«=Bƒ_POQ@ZIGJKF\ V JKFO‘@‚Hˆ^7>>$>OQ@RKLABƒ_NH:MTBƒO‘IGRzBEH:^†=?tRI`_PRSOQMJS¬vB V LP@CBˆŒ

LK LR@Q "!d]8O#OeQ O*Q TAW.]<Y$#]&% R $R #

Y@ƒ@ƒLNFOQMNq¥BE_NH–RzB‚B`RKI`¡7H

V

_PRK@IJ7Fp\

V

J7FpO‘@ƒH:^ R¡KH:?K«¯¤H–@‚LN\P\]JT@‚H’Bƒ_NH–q7HGMNH

V

RKŽI:RK@ƒH…¤_NH

V

H’Bƒ_NH

RSB‚B`RKI`¡KH

V

_PR7@WMNJ¤

V

O‡BƒH¯R7IGIGH:@E@BƒJBƒ_NH£GJ7MNH®PŽQHKŒWY@WBE_NHRSB‚BER7I`¡KH

V

IGRKM&MNJSB

V

HˆRKI`_Bƒ_PH@ƒJKL

V

IHZJK¬ÀBƒ_NH

~€>t^NRzB`Rt™¦Bƒ_NH£GJ7MNHZ®PŽQHˆ«AO—B`@WB`R

V

qKHGB¤OQŽ‡ŽŸ†]HBƒJp\NLAB¬¦J

V

qKHˆ^

[Z[

@OQMtIGR7I`_NH@ƒH

V

¨KH

V

@:Œ+¯HGMPIGHK«TBƒ_NHˆ@‚H

¬šRKŽQ@ƒHOQMA¬¦J

V

F&RzBEO‡J7MP@Z¤OQŽQŽv†ŸH@ƒHGMTBBƒJ

V

Hˆ@‚J7Ž‡¨7H

V

@†=?“I:RKI`_NH@‚H

V

¨7H

V

@GŒ } _POQ@IGR7I`_NH\ŸJKŽQŽ‡LNBƒOQJKMj†ŸH:IGJKFH:@

R7@¯HˆRK@ƒ?1RK@¤O—BE_…BE_NHp~€>…\

V

JSBEJ=IGJKŽ3«]†ŸH:I:RSLP@ƒHRSŽQŽBE_NHpI

V

?=\ABEJKq

V

RK\N_NO‘IF&RzBƒH

V

O‘RSŽv\

V

Jz¨=OQ^AHˆ^1†=?“Bƒ_NH

RSB‚B`RKI`¡KH V O‘@ZIGJ VEV HˆIÍB%+ hjhjhjl7lA«5:œlKo03Œ

ghgji@kFlCmClIn

”³MP^NHGH:^ª«NRI:RKI`_NH@‚H

V

¨7H

V

R7IGIGHG\AB`@~€>N>A›œ

V

H:@ƒJKL

V

IGH

V

HˆIJ

V

^N@­JKMNŽQ?&O‡¬O—BO‘@%IGRS\]RS†NŽQH¯JK¬†NLNOQŽQ^NO‡MNq

RI`_]RSOQM&JS¬¹B

V

LP@‚B­RSMP^¨7H

V

O—¬¦?=OQMNq@‚OQqKM]RzBƒL

V

Hˆ@GŒ$+ZJz¤HG¨KH

V

«SBƒ_NH¯I`_]RSOQMpJK¬¹B

V

LP@CBH˜AOQ@‚BE@RSMP^pBE_NH¯RSB‚BER7I`¡KH

V

I:RSMqKH:MNH

V

RzBEH@ƒO‡q7MPRzBEL

V

H:@JS¬v¬¦J

V

qKHˆ^

V

H:IJ

V

^P@¤O‡Bƒ_BE_NHIJ7Fp\

V

J7FpO‘@ƒH:^•¡7HG?7Œ

~€>’FH:@E@ƒRKqKHˆ@¯R V HpOQ^AH:MTBƒO‡®PH:^’†=?jR…nˆmt†NO‡BE@žO‘^AH:M7BEO—®]H V O‡M’Bƒ_PHp_PH:RK^NH V JS¬­BE_NHFH:@E@ƒRKqKHKŒ } _POQ@

O‘^AH:M7BEO—®]H V OQ@p@‚HGBOQM‰Bƒ_PH°TLNH V ?‰RSMP^gBE_NH“RK@E@‚JAIO‘RzBEH:^‰RKMP@‚¤H V _PR;¨KH&BE_NH@ERSFH7Œ [ Hˆ@‚J7Ž‡¨7H V @_PR;¨=O‡MPq

FLNŽ‡BƒOQ\NŽ‡Hp°TLNH V ?¤%RSO‡BƒOQMNqRzB¯BE_NH@ERSFHBEO‡FH7«]BE_NO‘@O‘^AH:M7BEO—®]H V RKŽ‡ŽQJz¤Z@BEJR7@ƒ@ƒJAIO‘RzBƒHRKM…RSM]@‚¤H V ¤O‡Bƒ_

Rp°TLNH V ?KŒW>=J]«=Bƒ_NHJ7MNŽQ?•^AO-•IGLNŽ—BC?•¬¦J V Bƒ_PHžRSB‚B`RKI`¡KH V O‘@BƒJp¬¦J V IGHRIGR7I`_NHBƒJ&@‚H:MP^R°TLNH V ?tRKMP^&BE_NHGM

BEJp®PMP^Bƒ_NHq7J=J=^O‘^AHGMTBƒO‡®PH V BƒJ•RSM]@‚¤H V Œ

} J¬¦J V IGHZBE_NHI:RKI`_NH@‚H V ¨7H V BƒJ@‚H:MP^•Rp°7LPH V ?K«7Bƒ_NHRzBƒBER7I`¡KH V XCLP@‚B_PR7@WBEJp@ƒHGM]^&Bƒ_POQ@%°TLNH V ?pBƒJBƒ_NH

I:RKI`_NH7Œ } _NHGMª«Bƒ_PH•IGRKI`_PHp†ŸHG_]R;¨TOQJ V O‘@žBƒJ¬¦J V ¤%R V ^1BE_NHt°TLNH V ?1BEJBE_NH•RS\P\ V J7\ V OQRSBƒHRSLABE_NJ V O—B`RzBEO‡¨7H

@ƒH V ¨KH V Œ †NBERSOQMNOQMNq&BE_NHq7JTJA^1O‘^AH:M7BEO—®]H V O‘@MNJSBžR&\ V JK†NŽQHGF †ŸH:IGRKLP@ƒHJS¬­Rt†NOV Bƒ_]^NR;?\]R V RK^AJ;˜t¤O‡Bƒ_

O‘^AH:M7BEO—®]H V @GŒ”ÃBWOQ@\ V Jz¨7H:^BE_PRzB¤O‡Bƒ_JKMPŽ‡?poKl7k¯FH:@E@ƒRKqKHˆ@ªBE_NHZRzBƒBERKI`¡7H V _PR7@FpJ V HBE_PRSM&cSl.I`_PRSM]IH:@

BEJp®PMP^Bƒ_NHq7J=J=^O‘^AHGMTBƒO‡®PH V Œ

´ O‡Bƒ_–BE_NOQ@ž¡=OQMP^gJS¬%RzB‚B`RKI`¡¹«RKMgRSB‚BER7I`¡KH

V

I:RSMg\NLABOQMgR“I:RKI`_NH&@ƒH

V

¨KH

V

¬¦J

V

qKHˆ^

V

H:IGJ

V

^N@RSMP^…¬¦J

V

HG˜NRSF\NŽQHpRSB‚B

V

OQ†NLABƒH¬šRSŽ‘@ƒH”

U

RK^N^

V

Hˆ@ƒ@ƒH:@¯BƒJ“Rt¤HG†g@‚H

V

¨7H

V

™šR†PRSMP¡TOQMNqRKIGIGJKLNMTBIJ7MP@‚LPŽ—B`RzBƒOQJKM…¤H:†

@ƒH

V

¨KH

V

ŒQŒQŒŒ

”³MBE_NHZMNHG˜TB%>=H:IBƒOQJKMª«T¤H\ V Hˆ@‚H:M7BBE_NH¯¤%R;?RKM•RK^AFOQMNOQ@‚BV RzBEJ V @ƒ_NJKLPŽQ^¬¦JKŽQŽQJz¤¥BEJ^AH¬¦H:MP^&RSqTRSOQMP@‚B

IGJKF\ V JKFO‘@‚Hˆ^•¡KH:?tRzBƒBER7I`¡ŸŒ

tv ( z \( "%$ %( ( "&

} _PH®

V

@CBBƒ_NOQMNq¤H¯IGRKM&MNJSBEOQIGHZBEJ^AH¬¦H:MP^•RKq7RSOQMP@‚B­RIGJKF\

V

JKFOQ@ƒH:^p¡7HG?pOQ@WBƒ_PRSB­Bƒ_PHRK^NFpOQMNO‘@CB

V

RSBƒJ

V

FLP@‚B­¡=MNJz¤J7MNHJS¬ÀO‡BE@­¡KHG?A@O‘@­IGJKF\

V

JKFO‘@‚Hˆ^ÀŒ } _NO‘@WO‘@WMPJSBWJK†=¨=OQJKLP@†ŸH:I:RSLP@ƒHZRK@W¤HZ_]R;¨KHZ@ƒHGHGM«SBER

VŠ

q7HB`@WJS¬ªRSB‚BER7I`¡A@WR

V

H¯IGR7I`_NHZ@ƒH

V

¨KH

V

@RSM]^&MNJSBRSLABE_NJ

V

O—B`RzBEO‡¨7HZ@‚H

V

¨7H

V

@FRKMPRSq7HZ†=?BE_NH¯R7^AFO‡MNO‘@‚B

V

RzBƒJ

V Œ

hjJ V HGJz¨KH V «7Bƒ_PHRK^AFOQMNOQ@‚B V RzBEJ V IGRKMJ7MNŽQ?tRKIB%J7MO‡BE@ZJz¤M@ƒH V ¨KH V @:«=MNJSBJKMBƒ_PH\]J7Ž‡ŽQLABƒHˆ^“IGRKI`_PHKŒ

2KAM NP]%I]<V2W.]<W RR@TAV2W R O*Q OeQST W.]<Y

´ _PHGM R‰£:JKMNH’RK^AFOQMNOQ@‚B V RzBEJ V ®]qKL V H:@tJKLABBƒ_PRSBJKMPHjJS¬O‡BE@¡KHG?O‘@IGJKF\ V JKFOQ@ƒH:^ª«_PH V HGFJz¨KHˆ@

OQFFH:^AO‘RzBEHGŽQ?’BE_NO‘@¡7HG?g¬

V

J7F O‡BE@p£:JKMNH&®]Ž‡HRSMP^À«WR7@BE_NH~€> >ž›@?

[¯[

@‚HGB“™šq

V

JKLN\‰JK¬¯~€>$>ž›@?

[¯[

@Ep_]RK@&I`_PRKMNqKHˆ^À«­_NHj@ƒOQqKMP@Bƒ_PH1£GJKMPH“®PŽ‡H7Œ €ZH:¨KH

V

Bƒ_PHGŽQH:@E@G«­Bƒ_NO‘@&O‘@MNJSBt@ƒL-•IOQHGMTBBƒJ‹@‚BƒJ7\RKM

RSB‚B`RKI`¡“†]HˆIGRKLP@‚HJS¬WBE_NHpH˜AOQ@‚BƒOQMNq“I`_PRSOQMjJK¬WB

V

LP@‚B™4~>TŠ³~€>$>ž›@?\]RSO

V

Z†]HGBC¤H:HGMjBE_NHp\PR

V

HGMTB£:JKMNH

RKMP^‹O‡BE@&I`_PO‡Ž‘^‹£:JKMNH“RK@@ƒ_NJz¤M¥J7M 6vO‡q7L V HoPŒ } _NO‘@pI`_]RSOQM¥JS¬B V LP@‚BRKŽ‡ŽQJz¤Z@BEJgRKLABƒ_PHGMTBƒO‘IGRSBƒHBƒ_NH

IGJKF\ V JKFO‘@‚Hˆ^•¡KH:?KŒ

U R V B™4R7WJS¬ÀBƒ_PHZ®Pq7L V Ho@‚_PJz¤Z@Bƒ_PH@‚BERzBEH¯JK¬ÀBƒ_NHI`_NO‡Ž‘^&£:JKMNH®]Ž‡H7«7BE_NH@‚BERSBƒHZJK¬ÀBƒ_NH\PR V HGMTB­£:JKMNH

®]Ž‡H•RKMP^gBƒ_NH@CB`RzBƒH&JK¬%Bƒ_NHtI:RKI`_NH&@ƒH V ¨KH V FpH:FJ V ?KŒ } _POQ@IGRKI`_PHpO‘@MPJSB\ŸJKŽQŽ‡LABEH:^ÀŒ } Jj\ V JSBƒHˆIÍBO‡BE@

£:JKMNH7«TBƒ_NHI`_NOQŽQ^t£GJ7MNHR7^AFO‡MPOQ@‚B V RzBEJ V _PRK@ V HGFJz¨KHˆ^Bƒ_NHIGJKF\ V JKFOQ@ƒH:^•¡KHG? >> >nRSM]^t_PR7@@ƒOQqKMNHˆ^

O‡BE@¯£GJ7MNHž®PŽQHKŒY V H:@ƒJKŽQ¨KH V @ƒHGMP^NO‡MNqR&°7LPH V ?•BƒJ•Bƒ_NO‘@¯I:RKI`_NH@ƒH V ¨KH V ¤O‡ŽQŽJ7†ABERKO‡M1R•~€>$>ž›? [Z[ @ƒHB

¤O‡Bƒ_ >>$>kRSM]^1±ª>$>np™š¡KH:?=@^NHG\NŽQJz?KHˆ^tOQMtBE_NH£GJ7MNHˆŒ

U R V Bt™¦†ŸžJS¬%Bƒ_PH&®PqKL VH&o1@ƒ_NJz¤Z@žBƒ_PH•@CB`RzBƒHtJS¬Bƒ_NHtI:RKI`_NH&@ƒH V ¨KH V ¤_NHGMgBƒ_PH•\]J7Ž‡ŽQLABEO‡J7M‹RzB‚B`RKI`¡

@ƒLPI:IHGHˆ^N@:Œ¥´gHMPJSBƒO‘IHBE_PRzB&HG¨7HGMO—¬Bƒ_NHjIGJKF\ V JKFOQ@ƒH:^‹¡KHG?‰O‘@ V HGFJz¨KHˆ^–¬VJ7F„Bƒ_PH£:JKMNH®PŽQHK«O—B

V HGF&RKO‡MP@OQMgBƒ_NH&IGR7I`_NH@‚H V ¨7H V Œ +ZH:MPIH7«H:¨KHGMgO‡¬\PR V H:M7BRKMP^’I`_PO‡Ž‘^…£:JKMNHp®PŽQH:@R V HpOQM–R“IGJKMP@ƒOQ@‚BƒH:MTB

%'&=g%(