<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px"><div id="yui_3_16_0_ym19_1_1490204227696_3435">Good evening everybody,</div><div id="yui_3_16_0_ym19_1_1490204227696_3434" dir="ltr">I need help about to transform public key (unsigned char *) retrieved from IEEE cert in EVP_PKEY o EC_KEY. The public key is an ecdsaNistP256 in compressed form (compressedy1). <br></div><div id="yui_3_16_0_ym19_1_1490204227696_4905" dir="ltr">The public key form in hex = <br></div><div id="yui_3_16_0_ym19_1_1490204227696_4903" dir="ltr">|00|80|83|x point (32 bytes)|</div><div id="yui_3_16_0_ym19_1_1490204227696_4825" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1490204227696_4826" dir="ltr">Thanks,</div><div id="yui_3_16_0_ym19_1_1490204227696_4827" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1490204227696_4828" dir="ltr">Best Regards<br></div><div id="yui_3_16_0_ym19_1_1490204227696_3362"><span></span></div> <div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 14px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font face="Arial" size="2"> Il Mercoledì 15 Marzo 2017 22:23, "openssl-users-request@openssl.org" <openssl-users-request@openssl.org> ha scritto:<br></font></div> <br><br> <div class="y_msg_container"><div dir="ltr">Send openssl-users mailing list submissions to<br></div><div dir="ltr"> <a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br></div><div dir="ltr"><br></div><div dir="ltr">To subscribe or unsubscribe via the World Wide Web, visit<br></div><div dir="ltr"> <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-users</a><br></div><div dir="ltr">or, via email, send a message with subject or body 'help' to<br></div><div dir="ltr"> <a ymailto="mailto:openssl-users-request@openssl.org" href="mailto:openssl-users-request@openssl.org">openssl-users-request@openssl.org</a><br></div><div dir="ltr"><br></div><div dir="ltr">You can reach the person managing the list at<br></div><div dir="ltr"> <a ymailto="mailto:openssl-users-owner@openssl.org" href="mailto:openssl-users-owner@openssl.org">openssl-users-owner@openssl.org</a><br></div><div dir="ltr"><br></div><div dir="ltr">When replying, please edit your Subject line so it is more specific<br></div><div dir="ltr">than "Re: Contents of openssl-users digest..."<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">Today's Topics:<br></div><div dir="ltr"><br></div><div dir="ltr"> 1. Request for adding new ciphers (Christian Adja)<br></div><div dir="ltr"> 2. Re: Request for adding new ciphers (Matt Caswell)<br></div><div dir="ltr"> 3. Generating dh parameters multithreaded? (Joseph Southwell)<br></div><div dir="ltr"> 4. Re: Generating dh parameters multithreaded? (Salz, Rich)<br></div><div dir="ltr"> 5. OpenSSL Certificate Cross Signing (Moritz Wirth)<br></div><div dir="ltr"> 6. Re: PKCS#7 (val?ry)<br></div><div dir="ltr"> 7. Re: Generating dh parameters multithreaded? (Joseph Southwell)<br></div><div dir="ltr"> 8. Re: Generating dh parameters multithreaded? (Salz, Rich)<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">----------------------------------------------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 1<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 18:03:44 +0000 (UTC)<br></div><div dir="ltr">From: Christian Adja <<a ymailto="mailto:christian_adja@yahoo.it" href="mailto:christian_adja@yahoo.it">christian_adja@yahoo.it</a>><br></div><div dir="ltr">To: "<a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br></div><div dir="ltr">Subject: [openssl-users] Request for adding new ciphers<br></div><div dir="ltr">Message-ID: <<a ymailto="mailto:1576557894.1332584.1489601024241@mail.yahoo.com" href="mailto:1576557894.1332584.1489601024241@mail.yahoo.com">1576557894.1332584.1489601024241@mail.yahoo.com</a>><br></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br></div><div dir="ltr"><br></div><div dir="ltr">Hi everyone,<br></div><div dir="ltr">Someone can help for adding the ciphersuite " ECDHE_ECDSA_WITH_AES_128_CCM " and "ECDHE_ECDSA_WITH_AES_256_CCM " in openssl? <br></div><div dir="ltr">I tried adding in the file tls1.h??? # define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM??????????? 0x0300C0AC<br></div><div dir="ltr">??? # define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM??????????? 0x0300C0AD<br></div><div dir="ltr">And modifing the file? ssl_ciph.c the functions??? ssl_load_ciphers() ... And modifing the file evp_cipher.c and sssl_locl.cand finaly ssl_algs.c.<br></div><div dir="ltr">There are no way to make it works. It continue to give me? error: ssl3_get_client_hello:no shared cipher:s3_srvr.c:1420<br></div><div dir="ltr">thanks.<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">-------------- next part --------------<br></div><div dir="ltr">An HTML attachment was scrubbed...<br></div><div dir="ltr">URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/5ea926a1/attachment-0001.html" target="_blank">http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/5ea926a1/attachment-0001.html</a>><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 2<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 18:18:52 +0000<br></div><div dir="ltr">From: Matt Caswell <<a ymailto="mailto:matt@openssl.org" href="mailto:matt@openssl.org">matt@openssl.org</a>><br></div><div dir="ltr">To: <a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br></div><div dir="ltr">Subject: Re: [openssl-users] Request for adding new ciphers<br></div><div dir="ltr">Message-ID: <<a ymailto="mailto:e507eba7-b0c6-d85a-78aa-2af36c2e487e@openssl.org" href="mailto:e507eba7-b0c6-d85a-78aa-2af36c2e487e@openssl.org">e507eba7-b0c6-d85a-78aa-2af36c2e487e@openssl.org</a>><br></div><div dir="ltr">Content-Type: text/plain; charset=windows-1252<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">On 15/03/17 18:03, Christian Adja via openssl-users wrote:<br></div><div dir="ltr">> Hi everyone,<br></div><div dir="ltr">> <br></div><div dir="ltr">> Someone can help for adding the ciphersuite "<br></div><div dir="ltr">> ECDHE_ECDSA_WITH_AES_128_CCM " and "ECDHE_ECDSA_WITH_AES_256_CCM " in<br></div><div dir="ltr">> openssl?<br></div><div dir="ltr">> I tried adding in the file tls1.h<br></div><div dir="ltr">> # define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM 0x0300C0AC<br></div><div dir="ltr">> # define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM 0x0300C0AD<br></div><div dir="ltr">> <br></div><div dir="ltr">> And modifing the file ssl_ciph.c the functions<br></div><div dir="ltr">> ssl_load_ciphers() ...<br></div><div dir="ltr">> And modifing the file evp_cipher.c and sssl_locl.c<br></div><div dir="ltr">> and finaly ssl_algs.c.<br></div><div dir="ltr">> <br></div><div dir="ltr">> There are no way to make it works. It continue to give me error:<br></div><div dir="ltr">> ssl3_get_client_hello:no shared cipher:s3_srvr.c:1420<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">These ciphersuites already exist in OpenSSL (from version 1.1.0).<br></div><div dir="ltr"><br></div><div dir="ltr">Matt<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 3<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 14:18:38 -0400<br></div><div dir="ltr">From: Joseph Southwell <<a ymailto="mailto:jsouthwell@serengeti.com" href="mailto:jsouthwell@serengeti.com">jsouthwell@serengeti.com</a>><br></div><div dir="ltr">To: <a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br></div><div dir="ltr">Subject: [openssl-users] Generating dh parameters multithreaded?<br></div><div dir="ltr">Message-ID: <<a ymailto="mailto:56015584-6EDC-4BD6-AA21-F27835281A99@serengeti.com" href="mailto:56015584-6EDC-4BD6-AA21-F27835281A99@serengeti.com">56015584-6EDC-4BD6-AA21-F27835281A99@serengeti.com</a>><br></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br></div><div dir="ltr"><br></div><div dir="ltr">On any new install of our software we generate new dh parameters as follows?<br></div><div dir="ltr"><br></div><div dir="ltr">DH *dh = DH_new();<br></div><div dir="ltr">!DH_generate_parameters_ex(dh, 2048, 2, NULL);<br></div><div dir="ltr">int codes = 0;<br></div><div dir="ltr">DH_check(dh, &codes);<br></div><div dir="ltr">DH_generate_key(dh);<br></div><div dir="ltr"><br></div><div dir="ltr">It takes a long time. Is there some way to have it use all available cores instead of just the one?<br></div><div dir="ltr">-------------- next part --------------<br></div><div dir="ltr">An HTML attachment was scrubbed...<br></div><div dir="ltr">URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/abdcfd11/attachment-0001.html" target="_blank">http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/abdcfd11/attachment-0001.html</a>><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 4<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 18:21:05 +0000<br></div><div dir="ltr">From: "Salz, Rich" <<a ymailto="mailto:rsalz@akamai.com" href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br></div><div dir="ltr">To: "<a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br></div><div dir="ltr">Subject: Re: [openssl-users] Generating dh parameters multithreaded?<br></div><div dir="ltr">Message-ID:<br></div><div dir="ltr"> <<a ymailto="mailto:9ff829cd17f74e4a910ca067196f7d62@usma1ex-dag1mb1.msg.corp.akamai.com" href="mailto:9ff829cd17f74e4a910ca067196f7d62@usma1ex-dag1mb1.msg.corp.akamai.com">9ff829cd17f74e4a910ca067196f7d62@usma1ex-dag1mb1.msg.corp.akamai.com</a>><br></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br></div><div dir="ltr"><br></div><div dir="ltr">> It takes a long time. Is there some way to have it use all available cores instead of just the one?<br></div><div dir="ltr"><br></div><div dir="ltr">You'll have to write the code to do that parallelism yourself.<br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 5<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 19:46:07 +0100<br></div><div dir="ltr">From: Moritz Wirth <<a ymailto="mailto:mw@flanga.io" href="mailto:mw@flanga.io">mw@flanga.io</a>><br></div><div dir="ltr">To: <a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br></div><div dir="ltr">Subject: [openssl-users] OpenSSL Certificate Cross Signing<br></div><div dir="ltr">Message-ID: <<a ymailto="mailto:c879dec1-9fab-5ecc-de01-4e033c690690@flanga.io" href="mailto:c879dec1-9fab-5ecc-de01-4e033c690690@flanga.io">c879dec1-9fab-5ecc-de01-4e033c690690@flanga.io</a>><br></div><div dir="ltr">Content-Type: text/plain; charset=utf-8<br></div><div dir="ltr"><br></div><div dir="ltr">Good Evening all,<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">I have 2 Root Certificate Authorities which I want to use to cross sign<br></div><div dir="ltr">an intermediate certificate. I created a certificate request and signed<br></div><div dir="ltr">it with both CAs.<br></div><div dir="ltr"><br></div><div dir="ltr">I issued an end user certificate with the intermediate CA and added both<br></div><div dir="ltr">intermediate CA Certificates (the one from Root1 and the one signed by<br></div><div dir="ltr">Root2). If only one CA is trusted, the certificate is still recognized<br></div><div dir="ltr">as trusted in Firefox regardless which certificate is on top of the<br></div><div dir="ltr">chain (Which is exactly what I want.)<br></div><div dir="ltr"><br></div><div dir="ltr">I wondered if I can connect both intermediate Certificates to a single<br></div><div dir="ltr">certificate or do I always need both certificates?<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">Best Regards,<br></div><div dir="ltr"><br></div><div dir="ltr">Moritz<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 6<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 21:42:50 +0100<br></div><div dir="ltr">From: val?ry <<a ymailto="mailto:vsbrin@gmail.com" href="mailto:vsbrin@gmail.com">vsbrin@gmail.com</a>><br></div><div dir="ltr">To: <a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br></div><div dir="ltr">Subject: Re: [openssl-users] PKCS#7<br></div><div dir="ltr">Message-ID:<br></div><div dir="ltr"> <CAMkdoSFR_kT=wxt5jAFMENwN3dXEhzVr=VkJmh-7=<a ymailto="mailto:ocaHj14OA@mail.gmail.com" href="mailto:ocaHj14OA@mail.gmail.com">ocaHj14OA@mail.gmail.com</a>><br></div><div dir="ltr">Content-Type: text/plain; charset="utf-8"<br></div><div dir="ltr"><br></div><div dir="ltr">Alright, big thanks to both of you for your input!<br></div><div dir="ltr"><br></div><div dir="ltr">On Mar 15, 2017 23:01, "Wouter Verhelst" <<a ymailto="mailto:wouter.verhelst@fedict.be" href="mailto:wouter.verhelst@fedict.be">wouter.verhelst@fedict.be</a>> wrote:<br></div><div dir="ltr"><br></div><div dir="ltr">On 15-03-17 05:13, val?ry wrote:<br></div><div dir="ltr"><br></div><div dir="ltr">> Hi,<br></div><div dir="ltr">><br></div><div dir="ltr">> thank you very much for your response.<br></div><div dir="ltr">> Say someone would be able to gather several clear text AES keys and<br></div><div dir="ltr">> their respective asymmetrically encrypted RSA blocks. Would it weakens<br></div><div dir="ltr">> the security of the RSA key pair ? I mean could it be easier for someone<br></div><div dir="ltr">> using that information to brute force an RSA key pair ?<br></div><div dir="ltr">><br></div><div dir="ltr"><br></div><div dir="ltr">Think of it this way:<br></div><div dir="ltr"><br></div><div dir="ltr">As far as the RSA algorithm is concerned, the AES keys are just data. They<br></div><div dir="ltr">happen to be AES keys, but they might have been a hash value, an image, or<br></div><div dir="ltr">somebody's date of birth.<br></div><div dir="ltr"><br></div><div dir="ltr">If getting the cleartext as well as the encrypted text for an RSA message<br></div><div dir="ltr">would allow you to more easily guess the RSA key, then the RSA algorithm<br></div><div dir="ltr">would be seriously flawed.<br></div><div dir="ltr"><br></div><div dir="ltr">There is no known attack against RSA for which this is true, however, as<br></div><div dir="ltr">Rich pointed out.<br></div><div dir="ltr"><br></div><div dir="ltr">-- <br></div><div dir="ltr">Wouter Verhelst<br></div><div dir="ltr"><br></div><div dir="ltr">-- <br></div><div dir="ltr">openssl-users mailing list<br></div><div dir="ltr">To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-users</a><br></div><div dir="ltr">-------------- next part --------------<br></div><div dir="ltr">An HTML attachment was scrubbed...<br></div><div dir="ltr">URL: <<a href="http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/c5426a43/attachment-0001.html" target="_blank">http://mta.openssl.org/pipermail/openssl-users/attachments/20170315/c5426a43/attachment-0001.html</a>><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 7<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 17:08:50 -0400<br></div><div dir="ltr">From: Joseph Southwell <<a ymailto="mailto:jsouthwell@serengeti.com" href="mailto:jsouthwell@serengeti.com">jsouthwell@serengeti.com</a>><br></div><div dir="ltr">To: "Salz, Rich" <<a ymailto="mailto:rsalz@akamai.com" href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>>, <a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br></div><div dir="ltr">Subject: Re: [openssl-users] Generating dh parameters multithreaded?<br></div><div dir="ltr">Message-ID: <<a ymailto="mailto:F3ADE150-0FAA-46B8-B481-816C1DD1B984@serengeti.com" href="mailto:F3ADE150-0FAA-46B8-B481-816C1DD1B984@serengeti.com">F3ADE150-0FAA-46B8-B481-816C1DD1B984@serengeti.com</a>><br></div><div dir="ltr">Content-Type: text/plain; charset=us-ascii<br></div><div dir="ltr"><br></div><div dir="ltr">Are you suggesting that I should modify openssl myself to expose that functionality or are suggesting that there is a way to do that given the already exposed functionality? If it is the latter could you point me in the right direction?<br></div><div dir="ltr"><br></div><div dir="ltr">> On Mar 15, 2017, at 2:21 PM, Salz, Rich via openssl-users <<a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>> wrote:<br></div><div dir="ltr">> <br></div><div dir="ltr">>> It takes a long time. Is there some way to have it use all available cores instead of just the one?<br></div><div dir="ltr">> <br></div><div dir="ltr">> You'll have to write the code to do that parallelism yourself.<br></div><div dir="ltr">> -- <br></div><div dir="ltr">> openssl-users mailing list<br></div><div dir="ltr">> To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-users</a><br></div><div dir="ltr">> <br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Message: 8<br></div><div dir="ltr">Date: Wed, 15 Mar 2017 21:15:11 +0000<br></div><div dir="ltr">From: "Salz, Rich" <<a ymailto="mailto:rsalz@akamai.com" href="mailto:rsalz@akamai.com">rsalz@akamai.com</a>><br></div><div dir="ltr">To: Joseph Southwell <<a ymailto="mailto:jsouthwell@serengeti.com" href="mailto:jsouthwell@serengeti.com">jsouthwell@serengeti.com</a>>,<br></div><div dir="ltr"> "<a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>" <<a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>><br></div><div dir="ltr">Subject: Re: [openssl-users] Generating dh parameters multithreaded?<br></div><div dir="ltr">Message-ID:<br></div><div dir="ltr"> <<a ymailto="mailto:2a86a335027d437ba9531551ce0ea897@usma1ex-dag1mb1.msg.corp.akamai.com" href="mailto:2a86a335027d437ba9531551ce0ea897@usma1ex-dag1mb1.msg.corp.akamai.com">2a86a335027d437ba9531551ce0ea897@usma1ex-dag1mb1.msg.corp.akamai.com</a>><br></div><div dir="ltr">Content-Type: text/plain; charset="Windows-1252"<br></div><div dir="ltr"><br></div><div dir="ltr">> Are you suggesting that I should modify openssl myself to expose that<br></div><div dir="ltr">> functionality or are suggesting that there is a way to do that given the already<br></div><div dir="ltr">> exposed functionality? If it is the latter could you point me in the right<br></div><div dir="ltr">> direction?<br></div><div dir="ltr"><br></div><div dir="ltr">OpenSSL code does not do what you want. You'll have to write it<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">Subject: Digest Footer<br></div><div dir="ltr"><br></div><div dir="ltr">_______________________________________________<br></div><div dir="ltr">openssl-users mailing list<br></div><div dir="ltr"><a ymailto="mailto:openssl-users@openssl.org" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a><br></div><div dir="ltr"><a href="https://mta.openssl.org/mailman/listinfo/openssl-users" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-users</a><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">------------------------------<br></div><div dir="ltr"><br></div><div dir="ltr">End of openssl-users Digest, Vol 28, Issue 21<br></div><div dir="ltr">*********************************************<br></div><br><br></div> </div> </div> </div></div></body></html>