From 25a5648db24dd02fdf1a65441f2a697308d4b6b8 Mon Sep 17 00:00:00 2001
From: Pingsheng Pan <panpingsheng@Hygon.cn>
Date: Mon, 13 Jan 2025 15:08:41 +0800
Subject: [PATCH 1/2] Added the key sealing technology document

---
 sig/Hygon Arch/assets/sealing-key.png         | Bin 0 -> 23272 bytes
 ...00\346\234\257\344\273\213\347\273\215.md" |  65 ++++++++++++++++++
 ...00\346\234\257\344\273\213\347\273\215.md" |   6 +-
 3 files changed, 68 insertions(+), 3 deletions(-)
 create mode 100644 sig/Hygon Arch/assets/sealing-key.png
 create mode 100644 "sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\347\247\230\351\222\245\345\260\201\345\215\260\346\212\200\346\234\257\344\273\213\347\273\215.md"

diff --git a/sig/Hygon Arch/assets/sealing-key.png b/sig/Hygon Arch/assets/sealing-key.png
new file mode 100644
index 0000000000000000000000000000000000000000..8d8df726655c4c27a451f0871546f9d5d11b673e
GIT binary patch
literal 23272
zcmce;by$_%w=TREASFsmHzM8Lu_Q%80cnty5|D1Gh0={kNC_fc(ioJ4lq_J;Al==Z
zx%|C*pS{0ppYQB*uJ8KRAFsZT>zU7d<{Wd3ao^(}D^l~Z(j8n%TnGemM@1Q?4S}G8
zze4@6F~J{R*HbhQ2t7mvCim3q{pPfP9F<-s&!uw&$!#lMhSX{0<aG5Udz0#b=hiB@
z_YlmsTX%ZisdDmF3zcT{4m8r&B4jHl@bvAhH{)wQ^v#8C3K`;TxLSqytPg#*L<=7+
z3n`k5HsGr-Br0rope4TFm!Hp>k;+e=B9grl8=zG`>XTln$o0!lM(0yhf$mAXb^c|*
z%H@Dq0)c!G9Q7FsQ)_mD5TZUucZng4;FIefiu3o%koY%@zu&T@F-Mbyflp10(d1fi
z0&}Ug#NWGZ!wL%vD*|t>V`8>Mp%6$Jxhm>wqo(3_F4Z}qsL>b=l+qvssPRjg9zp)~
zOhOh23`Sctpva)2y_GULNlhHqhykG-PQb8(J^UT8oAAc=yZ0weC1z!9%7JR+fR?Hu
z0zNP{VB6-=INGoG7zQ)3023OuFwlN&3gv%`CXbD+1$)82gtwmhbW?X<*{*Z3o2gFk
zAu0d25y-MDE9dV4eW`Q>TG<y(4owO8^O=MY9Fk2rzv3W_pzZ-)zq+P_F5I!BUYq^t
zfC(`F2dF6@4JW)wSE0|P4d*wTVPoRPfaw<BT2ixGf-*n0y%XDud;;0;&is5dz5(^c
zozFRNZ7tP;eLh(I^v4@Q2&*6acGLY5BaI^u4>G8kCb-SSm@5<k7FG*?P3mZ1uBqTW
z9tyz@kAL0LWr9D>M-y&za~aH=`yIk^TaiMOG|a-=O!Uoe(AJlJ1$Y|MtpYS6IDMm=
z?XB`SIQ*OjY*lUmNmQPw<E127$gI{|Q$0+}q(jl(z(?*@vTC=MmMMD!D^xT{h#m-9
zgqmRox34z~GBWPpL)|ESUjrMP%j!yk0l{+c&Pw*reOZb4Aj7lR9!~UkJbH#vvKR#8
zcxE4hn7a12^Kihvv+zRc8P^%4$UVn)>Pey$u+5_|`|=zfUkd#UB6={~4;~99eLYSn
z^`)HWhOZm>q}>QDQjESTa{2}avnNG8)r3-$SNhIU@^oiaRuFPH%V4<m@S`0z6!~L*
zS1_mt_I95xQ47-&^W^A{j4l#w@Z%M?MGP7tq4BG~yOAczps5u+p3~47h#fhP$6lus
zv=oWU|J{2dZO{@Uz2i$>swodTnnChSS|5K-%GVY#^YM6F0>U8!CL9Ks5|%2FxMb2_
z`}489xxR|Isryd&zqfbPd;h-}F);QG?El8G`7ejD-Qp-<xGz+0C<jcA47}vfBpDu)
zkQlmq&(-|814#mNZ9~DlGDFH!*nONK{X6T*SY62E;W)*oPm#4vNp%CM++qfJ?)e_q
zq_x@LD06{hRkJLJ`GbKuPRU`Af<(#2p1})NDvSML_MQOz5t;qXJyOf?jRC1=onHvL
zqcI`*nl&+`1iA2}QYnKfZt_&(b|bv&b9#SR2mYp`42f)qsEuTiDKZ^<^ws1wciV`j
zQq+>A%EKCamGG@*FlqNxpJ}kOzvG4va~hC-d17#_J9fnts#{w0icnbvpZw<6_k1j6
z<sN%YV>2?YV<<u3wlsrrb*WQd`f$2At_^-&nBkrE#Fcu^#Ew&&9Y5M&!o>+?#u=L6
zH@n=Vc6n*{@Jd<Mcqb5<kaJJmzD-SHb0<V=Y)O}YiCQO8IOWNN5=7NbnaM6+X(|R0
zS67y)IJsqXq-uv0`xKMF;g%$;Ca(1AQ?*uCTO_<F9Gt#VEy`hC0xDUE7)g|DwLzBB
zi>6J{#%dx;x}?uRgHdSNYmBaWRRP&WZ5{K?X!IJZE1x*WGCf5@RCR-Y5l)52RV3ro
z-nN$DhO!qB8g!EvJS4Te*VjNuIUK@=XLs)QW&|e`IN_vlQ;Mpe@867g|A?t$J5E=F
z`1ac)Vh{-o%u#hZ!u?Gws&@-&v~ZI{_#w6`GS4%j5rqYDaYsL7XR_q4pM6!%{lrR*
zo@?m8HSic#!_5b!&lOTt^b!x2$AS1^I}GGG9MY4;++i@%ixD7Mm3%h(^8ijC)>nu&
zI`L}6<jP=>R?e*b)TKCz$+zFa13d!xuHXRo?BqvJN8wrI<Z_-)HSQNFBiE?crhS(8
zR2GeG!#}=@AKsU&g&AZv6+eg}{7_u9-kY25n?(Pj5D5!Ychs8Aesqk)vZ^3!3H+z*
zkWZi>35%B6%<HB&3gLkAue{pUzNxs~3~zR2tBHvTOPztcx9w-khN7YSl)qdE<-@FC
zdwu4rgMU{fg34!wxQffmSzkWyLlkQ`1ViyVYc`Id)E24G!fIqa*4CfA<)wK7qOpc`
z7M6@Zq6LDNHsNvniV$%&tF<pzUq#s^+|(8CITSn!;alQ!zOQ~<Mb(zze4|EwmtHe)
zR-58rD_h^bpO5~<eHW*4oj~J*KkS=0rbm`{$0;x`ZX)4Rf0wlI&Hn2>3*M+vODHA8
z)C~Jf!0M^SGVfEp>nGBQN~**($%9XAZnx_S)FcyT2kDG#>+RPWTpINIc$;I-N4~Fy
zDXT&2>`6XGXKiUyCg71g_%?>!eo7J8%WNjLg%uUq*LgK$aXtA$qK**jsxbEMQyWjF
z@JS2O+C)MK89Ee?YjJnf<krt;m<Lt<(()MT59hsj`eAAsr%zLE2ncJxVg!vfA8+Ix
zjBOy-+4CHd12G85g?%bRT;P#GYG)dxf5M(BsAwKkW38*IS^h9qf<z5dCTWGMIe(c3
zu`3ME;}&%5ha~^ofiv`dSP4<ipV~HYs?rRIW730L-<A72Ugld$47lrS+))yzfWExX
z<d7kwnVD%PgJmZB_4E~*K(#ebo8xsbpWTG2*=zHB77KXgWdywFJ~z7R#%ltj><ZJ*
z9%$eWx#tI>3y?la&$n9FiPbV6USaTIXs+#E?iZnPTGU>wZ{jU`(h5(G{0Mq&q<b?Y
z5^v9{!GEUc7QLcxec_)M5l^xA{Za@vitCCFp=WAMlY6E4`dTwT1s)Z{R1i9s`W&Lo
z`hsmvlj8T7T{MR`a9AX-1#w`bc-jNAiX$s{Dor1p`sLD#1Z&#rnm<MD3KC5G*r#L6
z)kQf~%G~nn1Tp43aVkfH5^i-$nMY(=Ftp;9Z&GGP+JrPw4EU>m__z^Il-{d3pm{65
z*<0K-r|u-^tgfv_B1yF*?jY4EhnI=+6n$%mdmY=Phn~4e1OT7*MJhMebvzN@oS9Q~
z>`|HH1q5SpY%xg7b;+Ylo02G8(_yvrWMaTx`oW4<U+q;V^WrMw_dqZy<{@)L5wptX
z!-BU&Hy#(a1L-#O{lAgOSr2h0H_9qjq1P_3rW#x&2=MQ@sV`+-U7Sc<Bkuy=2`^GI
zIGQodDa<3od*mA&d2gsAEHNk&71YN5=2ZU{j&gNAIA{HKxC-D}GoloF_lRk|&S4$?
zrc=OH*--73?uVE!TnIavv8luy(*DU`IY*@(wW@YkN8H8mI`J4dT(Se?eMMBNYmKt{
z*_#GP^3NV>sfV>!VXTZ+4z0;lx4$_2(1ER^Wfa_3P#)b8b(r3alyj5`v6i6PsP`JN
zQsqL&b)_V5RX2gdyX{d~Ut>PsGpA<vs<&k+uhuF}wF$TAbH);CqbqCjLkYB%8N!|$
zOS~C@6n5Ej><TjT9!XG15R?1oRWydmKOT+w8<zr9J|VrL;PB>7)Z{WiP?TVA&@Tij
zQ}>6#{bows#PhQD-xI9X!aDRU3-GtRxXUpOo!bpzTWHU}O{AJ;w||L-q~Sz43nJ3y
zY}rnjZF9HMpdjrfKqV(m*quj5D_A5;Kg`X_O>Rsxqs5n@r;2WHtbW=<0wP5o?{mwh
z+ouFGI7^S~$kACz<I?Ub2$xxuMzlTclne^xl;an{baRx+i5Y!ybsG{S@95MH$0Y|&
z0HKL!%GLvyZzQN|=^1lpo}*G%F5vz3%F8{SG3OM5J2UN$Xb&f;gHCl1;@N-RR>1z^
z5c3B~c`JtW9p>m{B!)K9Dvda<bohNs`+TFx*)9%pQJ0{+9{Kr5PtmPAn!UCGs^3w$
zSm7*)RoSAMiowh)VEB9X?N{pD2$B=yH<9pefxo+OpFE=C=o(%2EXqF6_qJ8i3eh&P
ztzioE_s_uh!OetUGB^&&4^_IYBOkY?^VT#?An!$O+?Os8WEKmCzxx`u5b=sN=*{Xd
zcN>WPI)6vZ5oQ}}IM=WpW^IX|@|iMD!cEJ5ELUEWO6Ymmm;qAD@Q=whHoWEARi%SZ
zL~zZrbC4Cdn#SMgF+z*z1*Sy3zql~BKa)O$k;|(=u~A3gk~^HK;I_YBB-~aAq)m;o
z232PUJJWesZnY}!rwuHoJxm(uof4nF9f1(YSyy)CKXWU1p9fvK3vI%`_0o$|)7MYs
z;b;o)YVB2B*Bz*De_KF4S5Y~=fYEFWNEZjRnO0^n0)8wLVgEk4Mo#8Fkh&GRVLB4@
zdg?jmfh&(R6-alDz`Jn^10&A--0?Vz4}C3NowS6xNZM;G7RP+XNXW()I&4O<IKhqR
z<0*!#1|*$~r7k9EWtGT`KO)*}xvBNWea?sOM)-t_&0OTJ$Sj!|@E6!o*?VpjnjroD
zjzS%E_k6_DJ;ub52o;g-@&QG{ccZ;hQ$FG}QlF0LyPv%oa<tJ|IbT;F3lYhFqN+ft
z!X&le(d=l0uxzZJHY-*6EbEUG>F?-$VP9(c$GWBJrtCKI$i$;XX=aSLtwpn*FfAY|
zMNrkY&&-EDiZv=e_$zsM9Rjf$5f?Neu`~QcCO7xRbqghN(4ySv)pXdpYPbOhb0!CN
z4{@!^z}W2P_qJ)foEk4t6K-V^uZdEKJXc)_Y<d`v22&-Lhrj8@Q!o={VwcCROd}+O
z!K{al$6sj$jtRnGrGi<H)qZF3urmrcNY4h)T%C=%7^p(nv`Ff@3g3<iJ$W~AZ;_nq
zzUHj8VN+i=#|v2di?+<I=9pvg>~hmCuYeK6Z;F6aO`g4-Qjt?>VsHBwFH|3?tGoM2
z0w?$gAffLRoBVoO6B$*spR)QGWT+o{wI7emdsA#=T;y0r6Gdr5aned^A^XoT;~V&Y
z235X!RGQCNQG8WaDeL$rb@y?JEP7ZEHowJrx?kR+vXHMhBuNKmm1CQnZOi)T+cRw<
z*_UJhStO-GFup6NZyB@GV;%T2they^uc@7${R-T67l6aL*@2bd{oeQ6K=12$r&x^M
zNB<?=j5;|}Y(s2-pTe-G(+tnMZ{w@G@kF%gni)>dJcP0^l#)uuo!tcw{`i4rQ3jro
zVT+>agmtUYEqW#gYD1}XbdT_c0SRyG=g-lceUV6BK0X&0X0&5%c|*HQlYx)&wW>XR
z!?G5+*AAtAZ|{4;UVQ)|j>0ea!x+{hvJG8tI~l_II{rtuP-(}_X1_}Em^vLz(ZIGM
zUTqiqiw8^)ZcH@WgBR4=zND-c6n(wNXV}pth%}+u{bK+XpOVBthf48odL#l*JOd-t
zcv?sz?$UgtyBeZ9@?@;YXJr3nm|gOQQf?v6F>A;OuR)#E;#M(+e4V!fPC=B51*34%
z^w!D&NL|{2iId<lS(O@_g!!<VOD!QOA6mM0o@bY(d`9B+JaiW}s6SVMnYs?S(72%$
zAgi({V_xy2&7qRq*m12qd>0SQNa0`YL9h4hEXWXzD;bGOr5G&aiZA%X$$JC4EwZl<
zKkkK#G(+1i|M2XY-W-{p4yU$`wnc(l-aES0bUuzC>Fj6r<qYYz{CaKzPb03wB8k#i
ziI?cnf-o91sI@pjv~J=E5!!K<I5@C4ttah#iyxr3#7gn(H0ALiaq?Q^NBbF!=j^gY
zqGRSK(X@)zKk!wCZ)mhQy6=!9^!w<=S>*y*U-#wmz2g;+Ng{e}`eqF=sNMd7|5Nls
z=`GWK7$F-Qh8+>Sh$263V^vIH*r~|SO_PQF&Q>gz{f>?oCEUS4|18!rE2&70yJ3mw
zy-Xl&+xhQu2m}kC_D8yajii$f6IZeGT^ovl@c<9D6@k(6G8pU?12aSD>Z+`Yd_)A%
zQF8M2)(aIJ1`<RkQ8@6_6s#VOH;_Aac9_8(=e2*3i=H^{NaW11aP#GUFC<8$buXGg
z-ptRB`r>%&duKG&#mY|Uwc9gQ1#uGD`z7rw$7y&Z9o$Jum)%=}66BvWX>PXhFO9$%
z{0B1=(K9AmM8CrM5QfK2=D54_{t;)-L9JH!?OI?RVZ7zECLX&QqmC!DfieL{C8qPy
z&VEcYyWt{p0@-JH*NZaO=slK1&H)D*Elwu42ly3?9T{6a7@?0MN`E<AKa=ATGh(L~
zA)B9~Vr--b3=;nx)^41R4c%9ft!Ja3n%@Z>Ne^{wXZdb_-3h$$_1kvK{@&_;aW1in
zzb$V)9vhbgf`Vc%J>y16<Qc?F^cHmjeZQP3D?JB#=cByQW&TUWH6vBxN3D^ouThxX
zz$#YeTJ)(-M^EB|y~~4N=#aA3^A`@&jihgK&5(7DGs3%!DXIm#d$EDdZRmk&7SGE>
zKUt%VCzHaPq}+X}pMN_dWX!d)zyUl1d+}3txMJRTwGDoq!^CT6zeTFkKRkhvrq}za
zr=23L!CZ!QX1}tez;}wCvYUvU<Q}H~@>^!axsHUNV?BV5yz6S4zOFI}pu4%=xrw2X
z@Swl<wl*`#eXbqqw`FhoeQ&XAZ@{y)TI7z=gR$P(3<SzIzC|T~=dzslzCVyTQ|U^r
zO!=(dSGTh)E+iDD5wM>K?|4pI19*=yDirBv>;VQd^4+RE9sMY+(^Q=_mYPh8CQrhb
zKkgBZxm&E^kBczz<+@8PI(UIeOgPl|jfmdh;ItlTI`(~M5&vcv-(`PErFp}6=Y>yH
zN)m5%PeaN@Y~ZB@YRP0SCVu%0^|_l%UA7#dxBi07JO}F%A3+;<>C${Lz2ii2i4M}V
z=%%JtFu=E_*()c>>(j*&q%vR$5h#+!edyaawD9oochV-A(eerM%6K*v9OI{_gM$S3
z?%mU^3<I%w1|T=a_1tQkUkg>e-1g^RK+?m20r22%Y*EpeRKSE)>ip(J^?w=_*!kY1
zeR-|a02w*j@}aTWmWl6{ki*m$7k5e}7!2d@($sn%Soi(<B{Bt)KY7&`V{Ns>IA-E_
z4clMN&b%FFn!S?^RRG;Xfl3#-C+i%k9%oBO)7_kQ#Q+E+MnYJ148`WM)J%UFej{_e
z7wd9<Xy<^eD@|2r0hB7>9^xZR{Eu|}mYC?iHn^=cJK?$yJ&@kRneyFfxpUG>{B0ad
zR@RdAbe*>CWX5+dQo}D-B$^rAx}jZ8B|CaMf!TXHG{v>yJwiQ)``x>D-!5iOq$PLT
z(Fgk54ZP-pv39@HT@&ETT<)^hgB*TLf(25ue6+DFh}xF9lZ(BJ*&A9aVTbl!p0+5N
z(-4{6M*Y$I>5niaJT}`)%3I$Q7Z;~=ZO^vRfool{bURubaJa1$Fzt9H?c$`PgR_Gb
zm(@WAd_#rlV_=5FvtR<dA#|6J3=!u}bbQI6k&haS^=(&N0T;;Gg~PQG)TAoFqH=O_
z&iT$>(9WC<c=}8`fX&7N5a@)p{)}ZkOSRxNM|tz`Ub;`O;mqq)(*TNc-{}oW2a3}0
zF1kSKPoEZ+dJ?^^&sLxiJyU<7I;Uyehgza*o}@><XR`+1$b-8jE>3nlFY9SiAcWrZ
z$*S}2<-RllCrz{S>drpI0ef#vWwC=Vwwv%57Z*)LVjIDpIO6R~ealIL7ZIuj!F?QD
zTnJ6ie(LR})HmM>2?;qpDi4f~rV?2YX*-L~<3ypWznSQI<s+7mUhXD5)6;Kce_tH6
znt|6VfeX$z$IdR>Q)1N8e&ZV~M1+Jxl$~M_7_HBrWWC+v`ZgM#wo87<oL<{G=?riM
zK2z*~Q*2D*^t=lJ8I9zt>q~DVSCuV`?m58Y!F8#CiQ)f#0M086RuUbL6(4~*9E4is
zeEanKD7XT+G$BP=7%d7)z+f$%-67oy^4Qx?QS7@E0B_w2)F|FE*TiB;ZixY9-LO&n
zC`q{FkH3Vz&wqDJREiHTLXdkCc*FnJ1db?~@EP$@C-A=*oH;azS;a&o1l;o%j?yk*
zqv{C%>7J%nVp!ErgKgb+s~>_{kv)I$;?tsq#A8S(0mlnGLLoiQdwUbV0`6%@pXDRe
z8Bo=T*R@#SO@Sx*e+>11@oq%&FY*7b9vfJb|7v>w7i0d%J@{{|7X!w>_Kyv<f8v4H
zlFTamjTB%hYGOb@+9v=O`G2tF|BL+`40{04DPqzpQscVI1~}&0#+7{YnJ1aijN*ol
zXJ43AYBLs%GBdvq-7DUn;$E>Y5T|<BIJ!5qHJdGNpzT^SWDX$IwTWQMZ{zBuGT*?t
zeP6H@>vvGAwmyI@OI!K%98#kKF;ry|zs(wfmZq<`n?8&YN<i?I0>+(R{8jYFbBKU8
zC8Z#>)_%KXw-9^`eL0y~)I*xpH-Z3Jk~_JC-2@nJR1!f+Kxw!C9uWH9ykv}=0Y9Co
zG4!~Psqy#6oA*X0^76oR9l^Rvj%H%ezwUePPe2)gmnUNQm|U)oi;Y~9Hzw|PqBIF_
z$P=7|B_#*$V9mstYwJF@8lfEe2Me<Nq29H_f^h@U=aADJ%PuWi2O`1L;W*12QHG5h
zkBtxiqP%sb4vXYz;^$-p?#AoP-R@*KPMLR3QJ%=2;62x}QR(QDCz*$WGEPMR3#g%B
zqK;=NGjuTI)xolo!+;}(?2cUO1B}oVw8FQ#+GYt4Fc#!i8vfu^r^<xo5)csc>lQ}s
zPf7lCmupH9^f^v_+Q(^0Ahqbp^TCCgmVe=`*3!D~Ug}dA{w>X7U*mIoAtg@svX-L`
zJLDe7=z3!JXBrXq(YnfapaB!Q_x|YZcXI?FFHAg8fI%U^4I&Kzd<1VIAqQV|tQR;Z
zrP8R4B9fO)$hVU2omn)MvmVDDt4+EtGN=sLhMhf{+1pv~q25=fAC=pwpZ05z4(b<S
zhU|y7n{S5Kkcqy(lOtJNZ;am^jhNT97R;ef)tTE^lIDPy%TI4a%vzBsWOd6?@Fo-!
zLoLIDLpKxPc%5-dxLTXxmK->^QOln#b8{6BPo^jvu*b_Rlf=@u!~{(*ru8G!{eJ-O
zV0&b|?v4&0tG>+z9ZmpH9HNZFkv7^9UwyKz5l*jOsQD^-l?nUVeKsAE0XzmF$<PWu
zjk(>z<1N-~XvLfo38_?^F}npV<fjh(DxL!fzVK4^Ty1P`az`u(GeK1VW_}o6YlB!g
zzDA?5mVEAY*_tzB^{)BVRYk^aIai6Umzc?)gRW!PG^3hIs<k#d=fi`HC~j5c8{Cu)
zD9+cvzK~>osL|@0S3x5Xa<-O~HONUChm?$=?hOQdmIZLF`-7^)LHk-Q7zGv6!t<lj
z=^mhNS!AEO1hc@2t7VT4|F#sD3;}F!Ub8<LTF~zd6KQnA*K>ew{swqOQdsO+Joj22
zwx$5NxUTJcWkZmCQ_4E=g>=6f5_@BQ7^O6d3)B4?gJZZBlh@S@e|lv(6-lF6RoC;A
zJJJ2^NF7f9Q63hDS!S;=nuVSsNkmr^A+&21gOD)Z6GRGc+cO+l(m%K8c?(l>euT6d
z4BEF@k)E1K>XM}`lgi{PK&feu)`Zr+L(?8|Siveeo&~lrq+-Y_OmY$$u+v9C(01j-
zlD;-`el3R#mEwNOun^U*x3sC1j2-o$c*c&Nfj0QyJY37RZarqpJ6=8bp3?ZFFu6hi
zcZB@3_Im~rs%5EFH%NY=&{gUB0gaV{>-RK_B`w1QEzitzF^F~sLIa#>F4UQ>xx~l;
zCxZY@t(Nw(hEUXCV-fHv!Z<7-^=d(gm$YNuu@ei%b{%)b_!1LDT5;=yJL-p=1m*WZ
zlSOZI+|G}|a3AuY5c*gvULNEM(Nita!dTX)y$5x&5=&{+8G4uQa`oX%xStCIsYFex
zqrMOjEbvw!?!C;$Zqj&hx09yliNAVa^|@cRBdx5G`=vXgI2(O1nh*zsoyRC|JXl2>
zqz#Q+<6SbNj;L%h@1S_EOhxQ49nv%TQwG$lTk&kTeaG3Si&wC>w^Dwl%~A)ICn?%8
zSVU9WssM--CEW<*0JwKc4r+ytkjSzAf71ehI*FVq<_K3%9ad+p*`z~B)>A>NvYL@T
z%WkW)U!=Crv}>-Ho!>`*@IH#FpL^SS;{Y0?k36nURp+_xuLjc|CO$jE1L<P@3y7$y
z4PZkHC@}6h+HcYQG`ogP<C$9&KUPv1l!YiHGAM`enLU9_MtWP`rNDU|kN0#v0e{x^
zZbv`gY2rIKl}8f3-cgdVeQ7gK%6YsEWWRjylnR141b-Q#U6F<~1uGokg!8eRu`nN5
ziK(jwQCrD!jAH{LwkTUUx6T2Z@MwH=l*Htu5n=8+>|RU-l9SxBMQn&x#6XtR+w^pb
zDZhh$uMNXlT$O~~vHDh0ky$?hYisM5$D0#Y+0_yfP+}0--DBdhw6IzM`d#=`Qub|a
z<fF?ksgpT?X>dXbPJ1*0Ui)r0V13lc?$psU4l4)HvR9nvpG?RJLvgh8#}AAcI+>Wj
zv(&(^cSNS<yf*iHdAhjjr(PR6HQe%?b|>3z+~B@E{3!E~KYep`>VJmn+TGvf0i+<~
z?ec6rpkX={5k|P`H(iBOIklrMP|E}~FUCU{Fql;gYLA;LQ*Ik?yNoTH3!O7hpBs|t
zPNI?&9YE<7MFLFne74o!YxgUb%h{h)^g+*`{ac?$b$#Xf3>4@Fl`v@icI7sa_2qeD
z&?{jyGyK&n)mHO7j;?i4l{@>eTj}%I{BLW84xdbl{tRhR#yzy`o4k;%+7THnH~>jy
zsoWK@H^EVQ1g#Htyz&pN<3+0eiIluUhGv1+mzA$AMoOuizCh!ZG4Q1hHIeq81JH69
zwyOFHm?~14l@$S*Co1wo)o$SEjE2gx!ST~ANL*#_-V`n8TQO9qv>gLG$M^{-Jw|^3
zq{+w6KfIr|pWeKI`IL!?Ni^Wn3u%97iIL+peIDLELz{#27(KcL>Y+P#2%?xo3=|tb
zh{(i_n{hP+?M<CkrQb`|5*EHeTmKoJP<J3Pw(EJktY?!~szkiW1St^Aj~5(fa_T}7
z<yubusr|xQ;JETKB`7@)17sgbN;)=qcm8ODoapK`4n&Lim*fFnS=;sbGFH+sHYz%-
z;eh|!*y|JcRnwx_mJBhMm2+~|pEcWnjSuyf-@l))#=r2K`j4D%&^9M@_!lu`fV_z$
zqX`qew*On-4-4~7?9W2^SQg~`M2QQpa_f9wvfXLp56$JJ>t*t&QLp@Egf?!^B2v3p
zYl$7XmOC@1exO|AD+3D65okql>LjSF+BqT8s74V+RFy>zv<`LgIqbMyL91ga7ev6A
zy~9f&ghD95sb70@N7c^1YqI0L{Y1~7RMQxMu1mLs&bgtGoXo-R3!}%&_oZFT10T^r
z;S@Kjb`Z>OaBk{gOp4${F+9g#4ez_K?%Pk9veO5Xyy-0ajv_R_^8bYReHGnAl41%!
z3=-Hfc?iTO0nxjU54`T6NX@rCNPj?TvI+ESXz3E_1m*I23Xf@~VQ9bGn+yS^+Q&J~
z81#TgE6b_(EDoa16_p$;iw0{wvs&IAQWR_CF=6EeU<)ORlV<3V9a<&zIQYp?K8FI^
zzR_9C5I4RSrM5L{h|F`hApIHbai>EkI_(b=s?PF>FD1)$7Z&)@AfRfzqQ$DCB`R!*
zu?TtX^3-Gb^RZ~JB@uSIBV`mrthdycGL9y`-Y5gge=FGbdLfCx8oojcYwT&SJ&_HZ
zJ=A_cVZJyHGL;H}Db0I|z!&lWUnt}<?T(lSXtwp>aS3(7QRoPuf-b&*<2`AT*S3tx
z^KLCDD~My{Yho(8#aL`62H7WmfL7PdsB$Mz0>U?FQ^{$CyUX`ab*6w%pQ)ka$Fj_C
z$`zlgn+O%QDh(1UAN}XjtZ&1Us|$K(4F(r^t22CnLZm=?rM@{{i9X>l=8|nfYq3#W
zhP>UL)NfsB(G^pNcy@&$t0-Agvle|U*Rzfjog(<+rrIS`BtvQ!qN)^!)Q2686B_aw
zg^4eKj1?RjsJX8z9|M(@l<ds=+YpPxAJThdgcz7+NrONB&r7ruERw(okC;%C^t)W7
zQ<Bc^Dt_|u^TlSbr9pio<YKh=N%zXZ>1mhD%rWJaFqUi<Z|ceC+-9?>hI~dJ)}Zfs
z{7DYvw>WqaN_dASU&R=;GovXJZEmq=Sbxr$74acY4~x^0Pegi;v*slbn)aEQ2>1F0
z_2mXUo?R8y)}?p?HRrm;nM9RPHeg~(Sgdk&-bDED)AtoTwx*+=R^nuX3oMHu135`s
znn+NoHUGP$5^^wgsl!2q=e;Rh3*ew^ubu)fK;L1a>Y*gKOheOVkKo>my*Z5~8~$Nc
zQbZU({7%Y%giRJgkoI^@2HytOv6Z%#yU{Se|LkG(7up>*uKPhrt0pCH7{lP*oE}@D
zz{E@BiN3YAViNw&NK0!+v1xN5_~OF1N<7y`*{0kP#^aS1SP4CrN-Hz9_GB|R*C&hR
zH|OO|zl~n}<kaWCp#kNlGuXD3zBZwdBF1|+CV<q=@l&DqUofRVT0qUsrI)Loo+#4H
z(h>t<8YsoxcIn!@|C8hN`lKz^LHMnobZiI~{(=SF#j~!J?Ruh|T6G?MZQaFDP-%Lu
zGw=u)xI2hT;=7fx{&=WJ7Kw88fDPiw@?NHBKAyDyvRT#p5}3bvR}78Ud>C1U%VMWh
zX6irKoEVaO*Kz6#Az(Vl>F9PQ#nS)xw88(3gZ~|f|G&VSaRg{6dI}E&5Cf%uvD27r
zV8LN9|Kjg)w2+r;FEZ2MlNW;#(xFnm$8#x$PJ4~0FT9F3a8i;2m{;-#;7h>!{}(L9
zVex%ZEfx7j%gd&uaAp<wfUbmOaCi-~9HrLKkU-RiiZ<n>>j2Ng58Mrs4mI_O8Ap^_
zVdBH%m|P9-JpdKc5%ezx<*<bJu00#`66@%FkX1q<Kz|etnS6x%se0%hw2jsX@qlE^
zkvCitLLaO-0-4Td;0iOV!LDrSPmD@pp@$`Aq`1;HKb3X5+y08YDn9O2)-E7@J3{{%
zyckLcymF{0-sT;KVBm$fgI_s~V#$6dypP}4G3UI>g@{YJg!e;nCeFsI&|YmA`Rry7
zM_Cw^>;GDvcIIQ$Lg^C;Ejuk2ZOmBbHZG-rUhpmEzu1;ljo%YRCdb<1ugMwV^s(bP
zYB<rPn!WJb!EY#`h0t-|Ej6n?e00KEG=_yZ<Fb#b6JL&w5%t9>Q9nX}^M!ZdF?M##
zDa2mkxaG@f$R1jL{W6B5bo&saQ&ZX^N~xPjJ~7DO@^u~>AY^3z#VZYdtfN(Q5f2`W
z<b`=qD-5EaF4SDVR3#q!<<UAs{R2krI_P1eDaUOeLy~sV!4OLLLqWlu2%?QGk)<c0
zsHVEh;SDQ%65Z1cYGAOqcQLE?RaKDB+K<2R<!Z`VlefRbB((@-Xl?O$=I+tS%2rit
z(}>N`he($n;#&Z6II?Q1Ep%DfbO%O`%o(QNt~xdx7(q|bFTG3Ni*Dkoh8b79Yr?sV
z42#p<{NBjr=eufrEB+(1Fzfm6KC#UTXbfyxfgfpWY;OGs-P?&2JxrjLdET9qpko%k
z<Z_Uv{q^*#=s;u2P!`}FeC<<teJ`O9u!iW$j-FH{ph#c)*JeTqrmUJYKsFM0j201X
z;8%i}U42*|Fu*>}$M9ZiOEK2_VKn6E0E@*#wnu#9@@Sv_O8QEy?!p0j{f46Dtd`dQ
zV|$_U79BX=V<>c1`Va+reh>x)=scWHE7hY0J|5x?DpW>zO7F(jQ?;_td8uV{=J_nv
z9+$wn8X7elG0aptobKb(hwYtfQ+556ix#@#S|NB8{@FsFn~Ah_=zX%+T)taaE&x_E
zJdS|>^MCt~L2^jN#ctxE|M71B+$55+QNz+T&@os4dn%*$Fg|nsuFuv{<ac?Jc>V#q
zu>+fX#w@q77VC6gQ`(=0*_XGJ3s0K0)l%w=Q+iSx%3$SiFcHCEOMf}5=RldMdW$)S
zCuEJPzkzea4r6ZQAsk2QDaaS*_4dKeMohE(q^v!PS3j<VUc9?zVVYQ#*YK5hs>Dg#
z<evrn*4V9oj4T^yWd%R~L?8e8@{owyE%$SSDt_VH7+TlaF<ZyqSzpQb742dhHa{|l
z#T9LI)Dz*Y{*hWEGV(Zf=Yf9WK{vRTMhC<ht+G7!&`@wf=w1B#zyZ!QQ&d-1pC-zj
z5tnBG`Upl={HJqm(}#JV0HvY%@AH}e(b<I({L4{(L~)_3muClY%sm^{fNS|HlI~Xc
zD|Y_>gKz!+mOm8a;{zfyuqZyNMDp;MyGhKiyjTGo1NlR@>*ArBUL_ZoKcLW2)kp}W
ze#VExscB0X(hg{TN6F)Hi{|W;gMgV|7v3^ErV%GM9j2FI?l-7^gtR->PcMtMUI#E>
z(E4ujAr{+?N}csroZYhwom)r~n2iU|wzkUKwp9msLT%5lM@>)akWOw=H>%}L2IVJX
zhR(NwV#<&u2;{oE`^M$$^>O{)X7#Uy>g+4d^I#h$$X`U)w9{Ia84IQlFEZVlsK&yV
zKArpY-nYS}(Waxz8dDi;KCEW!=*i~B1a><pI#OM3d$w&%o}uo5pZ_jMHF<+*yFMy$
z-F|ERcNxG!{Hn%ie@_p5(7)ZPk7hPd19(3W+cwVGj;;PO(WrgbK`k7h>-A+iKmq^n
z-))m!NC7tvKKmGY|LEVXu1GFi|8+H2XH27#=P$*J;>gQ@!$m#jCm8k*JBrE&IZ6}&
z52#Q4gD<!!&KndKH$IN1{&TgoD&UR3{y+D{7_I*flgPxm`bKO~GDQS%=x@*8>Pkqu
zSL^h`egv%Vkr7lG(g6?%@6oi|xTiv*1+K{a)Qa)1!MTFZuOrHJr++<!8INd`K)h2R
zQyxf1nsT(m?VC#HWJ3ioEuY6X$gcx;o6YG4GJSEeL>$_QXSpDBc#A<-dy!}ZnG%T8
zW-E-VEwt;@D%|5a=^`e*S7XaDEuov4h`BS3tnaNH)tWPVlG{!xtDg^>A3ZOModypv
z5&62H|F>}A<n*J}Z3QA3780N5wH;4bbGO4({&)x9Y(0@XQm(Dh6=VJ3s8Mb$3Qqxx
zjQrSI0aZONxTn+%9zj)M9`btgZKv@^+RkURqPt)3jDssCj7fMKGKM0^Jr3JM_beVs
z9pAYQPLhpFEOTEB9;@UrL;&CI4!?ooknxu*a@5TuTVDQxu(o44>dhth_u{q^5oZBw
z^&uZ$l=oaqw<YOJHt)d5%CeuE{@tt52TqrlVp9=P1F}e34CgPHrZ>B8qMnaCx|0Xd
z*YIiEM?HVdPl+uaPqURgE%FeE5qZ}0E&R?G>&>C?K*Ps0u+s>oy{QIp%eENx)qHAn
z`#Br6Ul(~DIfCmEwe0BtrwM<STmSeyl7aMCsW+8Mo8?^(uOYiCi<I$`dm8=>QRtoa
z-rMg!X8zH1dQ9^pyseG$7e)C=F^^G5rTy)(3)i_2pXV<vyl`U!4scppyl^!9h`%ge
zO>=uQx~~756&=NMC_YU!xMm|6kc!BQXPc68z4daPK50|UYn@OE+w}3)1u4@fCNZz=
z)vXweg@(L(5nmQXT0Wx4CmM5*!k39I(^NZ>Z;%JS7QNfkx-?6++Roouueh~JUm5Am
z72;=f$%H*fs9#*o6rtQ|rFv5Oc+c<NPpshAI{Zf@S;}Zn%=7Mx_>m|v#V(wYL8o34
z7xo>uo?^7dNW2_LRv%ES!35@bIP%CA7<9niC|Q(tGMQ=nNQ_chyADD+`ax@s+4ot~
z=%(57Sn|#9ayAXIhB$E(60^Y^ildVlb5zIk4fugH2=Wz|lpbo?amgEr&Ry25&fDBp
zA~A$v){J_K>*p7gCV}=?tvFMBE)b3PpPFt$YKIalC3g=Gc%WYhMJT#j50?<Z__L$d
zS+|D5zyU;5W8`F8%cGE0MC$H0eCMv;dT3sI-jY6BIx+2s>-Iq(%Ny`lXequ%>y5pB
zrSx}Fzd5dnsyxLvj;N%<Lh3?42tVJY-acIx(xs7Nw6=?@?prO`q>cJ;{Oo`*Ot`EW
z*D%H9bo7A|uj`7I<dxjTMiY%vw$zFjPv6pV=Pt=zk}A%d4_RwqAMc}_h5w?rq;pbU
z^Wo*lm#cRrG_fXpt|E0&Tl#yUGk<*8N=EyYcoPz-oW4B`z{Ah3qN)GNRq2I`?+Ii!
z>xxsB88W-t$GuxC5F@eIO%LwQ_3Brr&I;eOr`0&z=M|X>EnXt;e0Hs{LGag+t&{Pz
zf>&(8)th6Jl&pJLej?Hwr&BRMK(;%y<MefWMS^Fofj}>6Dk4t?56MD5Yx9VumGB}<
z>di+P+mthiQugnS>vHl2swZcBc@C>MQ-{-Ra}hkBi&{hiT7%f~-rM1C+e%@zA5#mc
zH0~Yz`aO9Q!#B6;R(D1uvQUUK=aF)w8GHC-ljGl;Ick{xEe6zewe0?QrYC}yDBN0Z
zztTt!uf9QSusj<>`tB42oVV0}Z@ay&H+@N+d0ihuvxVW{^v#{_cvN`N2lxVPlm7i=
z;K0hfx1C4`6h$Y@nHa$#WfGZ>lsGatJ?^SQ2Ih24ZY4B3Xw1)r^DM60WO6W1IF46*
z;Lyvx{?k}F!#)8tAAsBYsv~v+qNaNT;WH89^Z*u>1cbV6g$clKM~gcxG}p$OZF}o(
zuR7qkq!6=fvd%(%raN70=DlL?FE01X`1ZTSq9ljc;U8b_4v?jI4(oi_*)>$tb?O?j
z`Mr&CQ<wk3G-IDGK&I4~Z1IMtspH=*GJZ{Q(>Gtjf0Jza&E14#QdgBva9zXy7?nT>
z?ENQP{pYZA#0mA<tn6xT6hws@Ee+HciT*~gT=yUU{s54=7J|6b@E-%xUlT;NzX0>d
zZPof)TilvFtI5yLc2;@#R8^sASAcOk`M~RQ$Ax)|O$)ffKUr;nK+#I~rvu##wB;K|
zkJN|=#lWtjCTF`vr5Q);(rr>7G6_m(u6fes8FBy-gYa2}0m60mkVPq~WsHcK4cEQr
z*o)0^iU)-O2Lp{}7hCcf*F{@#-G5BnZk{qRxB2BheYUyfcG$epl^!b=Ll?R3_{vx6
z4nikh_?PpME253%&RXM1>D1<xAjM9i_gyZ1`;sFAH9H$BP=`a-OawToB*aN;-T3s`
z*w-PFJ?dt!B^-{MgkpILP)V+3(Hbkn*bgP>0Fn{kX}sLGM5uLm3qz|ESR|0o$wjMd
zQH%q83j2dNP#7(u4<Wzg3X#0C1~j>-el-%2t_t6K*gH}5F7nkeY>x^F?t0`+Qx5M-
z@^>DwuS;4-LG=EzjG+W*@@fnWNVF-jRmVPdTLfK}o+~yd?%#&DQS*i2r7J<MV))$@
zK5kHTYzbwliIaPX4Ip36>CpyIFZTb@<efDBD=b9T=qvc}Viu8NGY}|#yD9?grrp(5
zvBSH1ngW?XWr2VQRPzeV$$2Z_!yN{Xr|5vU8^z`|4o#aA9W>Yr#`l9{UrYhz3Z_=q
zKN-ubcsRX4A(nIN(4N6y!&Aio(GX)f$gbQ(1{%xl{*6PmTg>5k*!ZhAf@+Wb4D;Ze
zNk{Zwp2|KKZ)U%*0MLupLhc7%ocuZ}JshCl5{<3;O)L}IE*tS6lQx1M0^#>4K86)0
zv+O*8<d`w5SWi4f^~J&Z+5<p;f*>yl%5j8Q!bszX^W+56lPp&Hpeo1~MO7e;B1*$U
zK!3`{q^<N*K%W}CW{I^TNax5i3VdVs9(qG5EGi1mzS^|uwyri22`ggymz8nLgR;50
z>OI>#Zusz$KaE5|!9i-g6ANA&-sZ3mSYIb2VO+dzW`Aq8nA2)WL{<7_fWsTW`vk?q
zB3RwUjaSd4wL?gL?dGt;cuMbCW#HL1%MQg=M>`Yn>E?3QSX1fJhKh|QloY1??5?+;
z(WWSUD*;&10%=quOYD9EzG@wIx6>cpnlWsKUA@2~y)+>8DG$7|FV9eTr8Unk`-*U1
zZbD-8S=C$);;w`m1La0@M)81R1H1BUdihZd^0k7gS-1DIjJc}$(@7@m9Sqk8zqylc
zfI7MQ$_>bn$w9N9TOCmWT!+$fMwcHthW7)S<5$>I;*4E1J*xqM7d7QX#aJj$Y$?|~
zc~@PkyW{h>LFR?h9~s+>{PZrt3w0<YJld6cBc)nVZeiJ<GHRIK;4LWAjL2L)ahPqT
z0fL;9MlqP<zr0S-jTnn2rHB|5@F3+)vv`vw)dI@xGfnIanUb%^-ycX<i`2bP4<B_7
zxW6MgAid_I5@vw*sd`OF3U|+PjbgK5MY?&Xu<ctXhjVz%p8vSlpZ?Pkd_NLU5W?3;
z$y#%HyRRGj3bgikS4Y{<2cf{UDnt{gPN6mIvlQ6$&pAAY5^5u>L3^fbWa*d72Z5h8
zIT-kNUg^6&*{MXR**sSgLb`Am#SF81f8yXk`|O&t-eY9^e01rmrhB~Ln{Bp6Hj_&?
zUf~f&ld!%XstYS^SndozC$<jn!3#Hrm`<Yv;gt)EfI=ww!QH;uhO;wu1-JCosQ%z%
z9311Mfoz#rpzp-Mx=Ss~k|<aF!-Q(x`5$w`CA6qAD=~a1bWVcmTn*PG0Ro68thoNJ
zwq|nKtOoDvjw~lxo=y6SaJ<N$pDkSP;pc@U5!#xrza;drp4Z<bKg09zUog28nQht)
zY~9!4<Z8iYz(`3k`7s}Os)V{+u|a(DysO)0x9?lE)C+xF1)EF7*TSK>XHCG}j%X`>
zTUNrOcxv$5AD^|`P61AFU+lvz<Q}>?ETS@ZpAOY)lb)1?4dnApGv@9y?0S22Zx<@`
zFQm2PtQjnmD`iXRTVKaVbPMt_sl??IESI{S=1~8n=P%9<6v?fn^nu6%U4WCHjH4fD
z^U)uCKzgC*#_A-T=;ZHO=3gT}lZ8f^0JlD@`^w7pZX&7JKEq`I$6wpc;=<|&nLt`<
ze<)2iXD5S#;?!|dvSp6#rIUX!Lm664CpH7U3en8@Sp7nKFgo=udIL-qYzA?0&4j`E
z4>V`zh_)D+n*$kV->KUgQS;L`7N&?Y4o5#zJyRu_L}r|Y%^Tz6gDg&|kidYNpu`TF
z-Ocosy@Tu<G?X-T_xL7&RC@QC>$H2zyjjL;dLQW)ywj30x)C!C8+}6>W!uC0)52OT
zDEv^FqUkuLvZ=XOv=G;Q2^(!<vT+xXb*+!gZZ8Xg#>34{(cCV1)*VvCiUL3=M$!HR
zg`9T>F~U?FaiByjknv&*1hsh?ftlK#Hyl?j=<PE70k`Q|>~T>F+U?eh?YgeOvtHBA
zk1|(wl9zMP%krVNXG20;fn?{tzF#WwIt}8jlM(yQzBHioGUz4U7MteHNsTp9OLYT!
z#ol}Z!mN4IOJ-BDeKA+J^Vz!#pE6=Rw)`+IC$g_7hSvmN%UzLqUToDbD$t!1fSU7l
zp*;cssqc-E6k|*(2`{&&8nTRcQ2J_@E*j6zKO0i1KDv?8R~<V4Du0}1JGNnJs1B1E
zz`h1?Gf`Huq@64ZiI&L!^X21;!{}wo0YlRr2WeB&j)&n1Lg?Y_qwxeezf-*N?hEB4
zm2qXTvUhX#$r=y)s+MXKTDT`~tBV>p1irhvw>@!#KPXt5H%A8ni{NDYF5LI{2L0OZ
z*sx^kn~pB%hlny)-pHP#4f4e?`u^_5WO!vP^dA3Mx8l_`=78Zx;?s=*hF?@ImoRY#
z4DN>fd!1={kYv@4@4AFS2#v~ez#z1p^*iqZ5o+0%3pMmv!=FR5quiBx<W9?sz0A@K
z(|FYb1UYGiD(z;=NojtHXQ?*j@COL{Q30tMdv1srjLc1Q@G5I7`OrwZdY7}V*)+J&
zPS<(THA(e;cU9EK?58f%%buJY4I66$DrEREki)hN=T-{S%LOu*t0UiQas&iInTq;d
z0EFR*y1M!Y?c%u)5wz<+g+$RR>W+Lc=7!aHIyOvi&OuW7PylUEL*N6V>3aLjaVD`S
zb#pugP4EG#Ve2ksBCfHohJtch?c_2pgFD9?!59dMv3(L$(A1rU9HHk|oDGvCP#k@>
z)8fM)(abkL+S>b~+}C5V2g~K=>ZF|Y6f4M#7k;tRMz^;VV(dgg7%$;QR52Zlj`b4M
zMLNkxQ_t6S_O;8oFUKun-376NbP)o#e=X#Bs+Sh6h>+tkrpjRIr?^aKH~UXWwPo(f
z_29A|c><Bu<51&`<=XsEhEg~~Lyj{>{)e&$tu7d{rdq7Jo-D;qPwB&Q4T-VP;DSza
z`Sk&USbVsvkx_JOL9&uX<wXlJ9~hz}wUKU+D58&%DbAgrys8fI1|&}yV?5I?h1^c2
zJs0U(_XBq=*V0M*2^n&iTMr9(%zb<&-<|sO+)sUWBNQm?>=f(nN*7euRqOjX1L5p>
zsS$WS5{?0Z9PiA=0>Nu5dp$kc;kak*GK4eL2B+Ns@j~9H?a?H9Bl5sk@}hvd-pOhS
z2TB1N0BL}zZALIZf6Om;>t(0bC!nTVP^P!ZASu$gekDZEPVk&HX(28|(QdesHESaM
zyL(Je3!(ku{n;^AMpbNve9c4p)%uGSrQ4_3o&hy~_`t!$?x-V9zFEnn>yVK#Fhd)3
z_erM|3_fjtp$;F5OR*++Ciq|wA(;8T<=wmF!HL<ojpbbRJ<axE1Zb%42R@+iK3Mss
zfE^6}D-nP>_%a*m(!X62*gUc_ncen&<F|};UE7G;Uy(e}-_C@etj9=fx97!5zj-Ad
z?Ik%gGW#TOSR&`AZ`0M4xx^0TWnZa#)_oMsSE857^1X5W>`o`cy8yW!xDC>u^e6nS
zb=RsIks{W8WyoOz8tye+C}`YN7~UDxBjiWtuxRMHTuv?(nN^?l-M6E@j?j4Z#|VgR
zzdyJ>xj`noX%Pb+eB%SN7<oju&ounnJf&&ex3{<f^fxZH?D+F+e_6bXlBS!8d<^`Y
zx)Uq?8*pWM&`)~cutze!D95iy#3Q!Y?aGnD_RT=I70MFayio6$Gy<DmmT_7cL0UF#
zgI|sy^QhmfS*cI-c~!mQS*yPj`~KPWPqDEbzED`b2v*hBA^Ybn(iXoS{|LRsN^Y(z
zZ-(o(?B<}8<`pSpF@*2T0j;F(@>$t?d$F2)|0kasX|ib!WH+f?#a2>9W6E#tz8tCe
zs^>_|-Xg_5Tqj0T+rO+^f%|y)c*4~P;nAl|Y1j1_p>9GqwVbiap?@DV;#Z6u|8Cpq
z3^!8gf04KD)&Fks%C>i}1+mofOsQ{}ZoLmETC9@Mj6c5{xGk^{-nmnAuFhpF-Fv(f
zt37!>V=Fmx?X522RIyT+RG0bv>Y{5)BG2)CO*jfRIbn#n$-WvIXMO=7*JE;Gd5&&+
z%)sHPbpAJk`ISSXxvj;~wdMmgZjL^BW9xk9yZWH<#!z_JL)stFJ2_DBJ5kKc=JYlC
z_>R<>V4Wk<BiLrh5m|TV!P}BHfzSSIgJTLY{0m14@4tFErZuY1ZBg}?W-#<;-&~T7
ze{r#xZW-X&8Du_GPkP7vtq`S|UXi(Zh;J~>cE`?}Hoaq#sB~<*8r9$a_Ix%ZMP9z{
z3V-05W^i+~)2Z$jhYKscITD+rJc&?Px;MTjt`!kNz&h!9<M?|&zp^-;fB-q)sH)@c
z;klL8BKy2-`^>5Qm%FzCU6KPK8!XO+4f>++D4`B#>E)N>cUU&yxXi|;TW#e|_xM(h
zHK=<Pj7c9AYs~-FGwndM9t)LcRQai=#A6Enm44hSW_|pCpvql$ontX_pv``nsNH0d
z@;eZH<hM>_6QCulA8g6ES@&cOw#mHnzYz?udG*Ct)SX5T>MCUU`-Meu)a6UeroK#}
zlfs}LG(pH80dLr-u}_>>j+q~&^83|SM=5B-AWW3Hmmb}CEB3X|h|c;o;L0j`8JG$c
zX3(Y84j!nHZTC9|5Cff*p=Y_<VXo*Me<lHe;1@*X*;2muP??C&;Ck}V$;(|R_z97k
zty8M0u)c~j3UumOX#cP9_T@<%6N&gD{{U$FvuTxVCL%fOM{T-hPkwA!x_@HjffToN
zUQkczAoa&R9?d^%?cv)pG2IekoftsB#zcq0`UWBk&|KZvLQ8*$J@?nR1>_`aE?43x
z@xumVW;2;Rof1U1lls<a2hVx2#q$P->=DpdH!5xOx38|M74IRh6IJl`VN<7MYO842
zV+Hf7<IF!)G|sKKw0|4w#yyCg_pXRR8(1AmY9c-@<>$Eimr9$f?4mtbAKtoy5RUwm
zvXU8l2O}pCc6h@!(GW0Bt>9iu+u5wGD0|EGLFQGFcgN1Edw=$jUTS>($3xk?w_x$6
z57aV!x(ZA7^60LLI9ASwVgo|!Z%#@YUCXxP2u-6HMOLp*GUEE%+<{ER`rDl@PubpT
zXAS6WtEbU7=99z+-Gz?_1|L!UX}B!|I)8->vpnv<<FqT;V2)geJ=p1(?7}d!0?h_*
z>RYxP(=s!U8rgbB_T63>Ui*L&@p9>1`HP!2<dzeD`&E-uag=wxMTRo?!G@8#A<csT
z#Eu?HxZ<QEVDtzDl)au)waOZsCf6=E&0N^%NiXi3yN!k;d?p#!xmoiT$+bNs!oO{J
zX4k6fpt|gDYc`z*>uX50jZTdXx_e#jbv3z`p_(D+ylzr}WBRj>riiqus1mSA-h~pD
z2zL8tDPr~QH-le2_&&YagG)bHm)bPV*Kca-xUzwp+jSXp2JOu|p=5b%%bKlUN>eJ~
z%`+yQ0x5m;L9-nc`!FBcJ$ux+BXsqCY|GH1^IlAXtc6Slss1vn@r!aaE6xz_32C|y
zXD6{UABw9kyDYN&GXOignu3W2?*l&}fB~fD5kzBy0cKAyy#K(jvD)&VcS<k)CZuS3
zN-pHtd83S<E|qkS@!nvp+@_ze!1tf+I|s?N-&TBtA#L7{*5I}Cg?+4KRO}S(w(kFE
z<~pOAYPR+P1q4KVRZuz>nxRQkL_k5LLj>tWnjpQXfV2Qg5fzaVP`b20fY1y`M-h+~
zR0zEZ`bJu!Ktd<q#CNTG*SEg!=lyZdkDN1^N%r1zp0j7qoc+vTY6k`;#pO=Ha2)sV
z&kkxX!($T4GoH^V&tJJ$)~jmeKf_XZ_KD*9qq@sQTT3;fi`HjO4w;ha97DON&jro9
z=#0yB8(%<W24@nl%Dw&=!@<|&-BYcwm&x3&V|5`;d0}Kr06pki0Cr-qz>^aemkoB5
zL8@ja`gkXQsnQI6JB#ECABU~BI6vFbhava7VD7BXqiNN7{Vi*av^3hd?Ly4AeHxV{
zURweinBOFyxh@2^P7#AAVGldh@_Bva<~W3gmEU1t{l?@dVv;oVf|1<}t@D;^9D_?X
znTNX#xy6kyvmMPPd7DU}2F-bsicGDh@CN+v4+Zez+Pz^~Fq8Ma*AIO>aKdln+c+NQ
zBo^REoc@kfKXzu)HYdc>k+@4%CelV`%hx+^!Y)}}V*lJpMRFJ@^?3_ojm?V{%Q!Ak
zRg(5qZ<a&_@>tAd%`o+KBP-Vp^xO*FWe8ny)6S*LyOUTi%#>|mOG}FgZg6A-J>GBj
zqTmrFFaeg1A?@1CEc5<eJVN2Tt#6#>vwg03e+W@bvf+K@sbic!G1ICALeE=N3aPNV
zs(D85vi&K!X^NY0b(=DkSiU<TLwTK?o}M7EY>YS9{_Y_q&Hl3Bfu4<4Pukbomm`k2
zvyk{S$n?bdFPY<TIOQo+-jDDcYd3VomT7NjLFD(_AL3WUT+~_O-!aAw9qX9eYV6`N
zl%|F0zTet_Mg^0t39>X|sa@m~xebG$sEp2*7`JpL=P1R)noQZ&FJn1{7Qf_cvuAIF
z(+GvFTRY(rWB&1C;b5vzmHAXk*yU7AUt@UR&Yrr#u5N5Xb2%SvZ7*qu+GpoOh~~VV
z6Zng`>7kCmGU}zHU2pzAh7K+yMa-cKKA-s-CB06|?#&UUS%h!ccIBPd(Es}JW7ICP
zb$^HRv6e+tz%J1d_e$_qrD&1;Usj=PKXgu4YKc3auIy+^_<M~wL(>bVaHetZZGv1_
zQ!Xy9%YJj$ySLw_hpqKrWIM>%5U`S-joe<)s;fcn1*_$V20L#S{!ZE>_1Qh}t>=k(
z0~T0hCMd&LM5+JMFsg9Hv1{Q47b71J&zI@ukgSGXHYc-*8W$nG4fataabxq?(@4|?
z-e<L5481FFQfjo`^Gi%jRQ~*yHA-X9G&PZ*%X9DmHDb;yL%~eQ?48(^jnE0jyu{)U
z$<c>blf$sawaKM9V+`%<xsNLJ_B7QxxZtj5u$$RGO6}{*_wR21TDD=U<-g^*nVk11
zA})@V$>zvndyNm5>Smzo4h>Ojt8SsCld0!jJ#acbzsKve*Y)E?^Q~}pCDmekL-ajq
zlTVmF4v$%1KrPfd^B1sB(POxPW)zmS?WCT%L=Npb$K{X2QlB-uR3+fT_h#Q8pirrc
zCFtz*wczM>2dy)SA{_h8u(b_r(n6%Z+@^60S@EI%8`P?mnFh#Rz3e+1F*x<|`|RO1
zcA2JJkWc0Fe(e>5Ws?TUUW%AC)6qn&Q)jc@8f@IFW~TZv^}XEX2~=4*;GM%fp(GI?
z%OgHIknF`Q41<2Ac-fO$Q~RR5nU3kbVq2+Za;Rq(9b?eKC<IR<&(9yxkswz}|G@uf
z4S!(O`tX}!mh%0g+}z5F3S+<kt5&<RlbY=_(^~8iyr3F~YWI?dlD=k02&p48_b2vo
z1<GCbveL+w)Qx9Bo-ImG-DC(f4WSUgBMhSuEXJFH?sqOd04%dG>e$_e(5=;^+dgqT
z5d`o0yU^{RA6!|gA+?fT6|Z=pckMk5YfBcN49pET5eDt$*C-bHCEJIy$VLmbyNjpf
zQ1}hFz0%`#>yHQqEmPLdqH}C@M}DT3GhZh*uGJk^M;%s6l5yHc28bW!sa-`|h<T_q
zE$!~%i4z+h6EogsKZmULCR&lX;k#%%*A3DXrnGc0*;uWlF_63nUda!F%)JuYZUU!S
zW4-&$UL<s40GY=B70fWziMY+*T|$JZsTItFXAyjfOoxJ7!dj=*w(@q7;qUpb?QCy<
z-`Js0yHB1BBi0?|n{eVC@f3LUTvBSG-zWxWaMsNBPTq);z%(3A_`K3m|Cp?-DD2Xj
zoamw4{AFj}$dGVEXW@M8+C~jOPC(DWW^Z6U<Bi?Y2bPK@nL3}Jg(qoN1cI5|VNLLP
znc91HyLW}J;n(}6?f%adfSp?UxjAHG2zbGwB2hClGq=5M3I>BQF*Qxz-rjydo>oOS
zzPj)9ATY2F&~uAcCZ54AvPiOAj1LpYU~u*JmUcZZn;M%z-nEtx7x7?)!yjLCV$%s4
zwig>(;+z<U+hoLZI~j3286)4p%jtZLDi~%E@Fv4&Su|zBPP{_klYPoJu@QOu@0dL*
zbXj%~b<<n*hzb7gp9k8k(xee4m-x-~^`B|Hc^R-g`lhExufMPF=OUq$mzVde{J@ob
zR|O0fE8VsI8o_s(``N;TPb;D0*-3$=<FY~*of#Yj|8nzgTFbbELNI*6NW1?K3>VA7
z%KDuTM9n=~JxNSX^ij4tkO%E!86>QP9QTo_Ewu;W&+Ew*B6LrdQsV#ZiO#t^FxT|(
z^fWjrZ3}mD%0CZ-iRhwGD0ffKp=kD#3Q9^vpaJZdpR`!1D)jKzY-Dh7@QHZtq{?HE
zRfKG825EP@u?sgfdhTpcqiVWrxxqn#z*CW;J42@y-?rrY4UT7qJgn5p*p2y+WX;^A
z_<7tOr7II07jO6G`mLB5xTO^Dspon*Cw^7Z2PJ0Q!YvJ#z<s11ATuSajY!fW>oyw=
zJ2FWJZRfuh>Td%^H&;T};N$(2WrZP?K+>%%f)>I@;f99sXXP2FB3GxTrpB8?>Hrg=
zW_b@{`%xr$^+i8ad5tCdH|!2fBs-DU&*GE0OQ@3iZ_lj<rd0tRroOIeWx1#Qr?D^l
z-W>5VkS1206lZ;1JNa?J<Ky?8(~^Xpdol#wy1Pr7?qkN;NIjFeItOEJO)IZzasj&Z
zp(uMJ2l9jgiHFtQcO0|ob?OE~$8_1AD79IJXQY}OSTz-9oGEw0lO0dGscSx$xuW@^
zRt{ff#+~&O^<}tpy0$){YtauN5%|3<l|X6Ythz<dIKToZ7=7~{O;lwl;fbhd-M6l?
zeBMa&RR!R*Vm$ag`GT<AkgT!|Q}9ArB%=NM)do2!b7@+3am-*ws}F3yyD~4tL>=bP
zF(fmnpeV>=ez#v`bxOf`n*WofVCuvTrX#hM866_JtQ{dqX0d1%u64V?Hbc{*pk7Rh
z2fKI-*O1iUtuh2}D9&`^c(<@Z6(TFG`anWdaB_WpIWmS|Z--y=vkX=Y${PO0pU|Zj
z_<K$Z_x7zT5ua6?-#s7^?{Q^7F9#TbDJ<+r^xr6QbMH@AWQ%QodLtiGTx>~IgJ4`%
z5fPynl@m4nYOh434DR$_NvSowR5XrGO>i=|9$9$jD5TA$GjJYPu<>xy-KO9Zt4B;p
z+X)<B*hFFWJAZBD8LV$9>cV-HqmsS;h0^Ylv1>b_HD+Ux%j+pv3C!_s`=J>{*`3gH
zx+O#>rgN5IH?*}0!^5fm3R}v!w)lkFS|x3gry6qCa&K=BQ&Ms>BxI-BPDnfzL>@1g
zAn$Qj4oKfb0AA^DX*$>)8FbFxX3^Qp*6!^cucsvo{Q8}%g&$BuCQJHA+)V+^`6TtO
z)$EjolD?-+WAAlKjny0!Gcq%WfM?;Ri~{z*>%Du`A62bKjn(%G<nQ7u*I8gOK$0W_
zV}wWs0wYg(9JXaFvB~x1FpSz5RU~R7Cx1h$(`!fnZ_<UTy2NSyWcc5!g5BxwD`_FY
zdRrKKd;f;}M0_TW7L6$@8v=c;H<=$j)f#T+)ATzgRPBRlt|c%7446g;UPuqGw>6#{
zBe=7g^Ys@w&i!5fwXE7le$hoA3`Yhk$%>zD3*K5842Y%}-P81)GeLU={ncdO9>bCT
z`nA=N(_I&rw+`(w$2MFY0!fo!z$Bw~d4!3(*U-tX8e+IAaf{`ICn}|C7kxc|=>$qH
zjdm+gJarU{Pya4T$u91^Pm%x+pvu56{rUUD4|cd3l!g60t#hTy%qbK~Loj7APcVeC
zXhs+rNqeW=wm4r@RpI0hLH7RLH%~V-XkHi$xDjGdLwjq2=kB!rAm4?3X&|q#vAn#y
zADwA2_2$*s1tLGJV`W)gKIee>v#=eio2#o%e0;o?dVs6zC$kJb2Fd4=SE1R0vIjLh
z;l*XoobLhVI|nD{QV$BI+)5@Z4QjP5V{Pm6zI}5Lxcs1a5^>P{%D={e;e73c%!Vt_
zJIxjqGR)9F)=`r^hdB`77_Pue05R!(b4I+gi^~n|1VIrNb+|C-69}?cSX`tJHH?v0
zr(Z{;z$~!hM-LU3l;|Q5h~6Phs8EAj81Tn*7Z(=3B%akC8XYZekL3i;STak%75tf#
zlhftU%}QQAKL78Z{-Ug}Uz&8X|KU40ng&dPgv(1y^)Gr)!o9r8gF`}a&b{0q&;nah
z6xY>RfatryZ=N}DKk`hy+p<1g&dWD>c^ZHeH3IVFvq)?aa>DFKAqaxIc=PUD=7!$6
zi7C*FMxdC)bO>DjI{L>7$oX&j-N=a0*4D-al5cBcy-vlP9bu|ay*E!}jIjB=6=lLB
zAV2`i%bBE@bDS;=a^(Fl3(^m{L5pwn766em3(}DDHM$y5Zr`K=Rpj5Y|36_2Z9jh&
zo2G#cccm}L%H}SORH#gG<Sv6Bf@D1i@-;vpvKAK?GfB*|5-$oF{0EI(A!zpb-JGyt
zAgK4lKd1!4=(>}iiXWtc5WNRffur=1Lwb?b=eU?RjK)%*&^bs92oX}tR6$i+dCTS;
zyTB#iTuHB!Dn?@eSII6$=;BHg&<me?1Ztwo>7qhcLO0<Ff~x1OLI7fa)FbyAfNtv_
zj~ic_;>s=iUqL-ssD_}cuj?fsUr*N0pFTbLV<eP{0)F5Q10$&H>HC-Rf`9PwPlq`l
zmj#t@7f(hY9GX4!?^`2d6#>49kh>3XA##;|8T<0j{S%i5`0Zw-i%jA9(+Ilsh>je(
z0&dHV!zJwD;C%rvxOZU3m7&Q=$?jkW6O{sGyx&EBA8&7?iZMO`0mIgym9ClrP)>DA
zSDv_dSTjw=4j(k7F+Nl0lLJ=W?Y>f1x>i>13I$^JY>DV`&;ocI_F5nH)>|vYZROV$
zd!fXW6G-ZocW|q3=6vC$mRB2Y7sx7ZB;r?%k^T{*s(}%y5df0bbI!IGXUG*ASR2g1
z+C7^3<*=#oaqIeMC(yCrkQDgm{9Wr$@!=uxjDfy5{ijnSV(DmxAVG~kr~mrOGO54s
zw9EDoIO*#4=FUQG3jOz}^qr>L<m~An{|_3rO5?l=^==6#+0ljRY8hR}YS=&eAAo|=
A7ytkO

literal 0
HcmV?d00001

diff --git "a/sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\347\247\230\351\222\245\345\260\201\345\215\260\346\212\200\346\234\257\344\273\213\347\273\215.md" "b/sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\347\247\230\351\222\245\345\260\201\345\215\260\346\212\200\346\234\257\344\273\213\347\273\215.md"
new file mode 100644
index 000000000..0ba623664
--- /dev/null
+++ "b/sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\347\247\230\351\222\245\345\260\201\345\215\260\346\212\200\346\234\257\344\273\213\347\273\215.md"	
@@ -0,0 +1,65 @@
+测试之前，请参考[2-1-安装CSV软件](https://openanolis.cn/sig/Hygon-Arch/doc/865622260278236994?lang=zh)准备软件环境。
+
+## 概要
+CSV虚拟机可以从海光安全固件中获取由机器根密钥和虚拟机相关信息派生出的密钥。该密钥可以被客户用于任何目的，例如秘钥封印或与外部实体通信。
+
+## 原理介绍
+![](../../../assets/sealing-key.png)
+
+1、海光安全固件通过硬件派生出的root-key 、固件中csv-sealing-key 字符串、虚拟机| policy | user_pubkey_digest | user_vm_digest | vm_id | vm_version | 内容派生出sealing key，该key 只能从虚拟机内部获取，key在虚拟机生命周期不变。
+
+2、虚拟机通过相应的接口获取海光安全固件中产生的sealing key。
+
+3、虚拟机中用户应用程序使用获取的sealing key 进行一定场景的业务应用。
+
+### 派生sealing key组件描述
+  
+| 组件 | 描述 |
+|----- |-------|
+|root-key|海光安全固件通过硬件派生出的root-key，每台机器唯一且固定不变。|
+|csv-sealing-key|海光安全固件提供的字符串，固定不变，作为派生秘钥的参数之一。|
+|policy|csv虚拟机的启动策略，用户通过 hag csv generate_policy  --nodebug 生成默认的配置，csv generate_policy --help 可以查看详细配置说明，qemu 启动虚拟机的policy 参数配置需要和hag 设置的一致。|
+|user_pubkey_digest|DH公钥的SM3摘要值，用于确认启动虚拟机的用户身份。DH密钥由虚拟机用户生成，用于对虚拟机启动参数进行签名。DH公钥在使用hag csv generate_launch_blob -build $build_id -bios OVMF.fd -kernel vmlinuz  -initrd initramfs.img 计算虚拟机组件摘要时候自动生成，DH证书文件为guest_owner_dh.cert,作为qemu的参数传入。|
+|user_vm_digest|虚拟机组件启动摘要，通常由ovmf，内核image，文件系统initrd组成，通过hag csv generate_launch_blob -build $build_id -bios OVMF.fd -kernel vmlinuz  -initrd initramfs.img 命令生成launch_blob.bin文件，该文件中包含虚拟机启动摘要，文件作为qemu 启动参数传入。|
+|vm_id|虚拟机id，用户自己定义，hag csv generate_launch_blob --help 中 通过-id 参数传入，字段默认都为0。| 
+|vm_version|虚拟机版本号，用户自己定义，hag csv generate_launch_blob --help 中 通过-version 参数传入，字段默认都为0。|
+
+### sealing key qemu启动参数介绍
+  
+1、获取安全固件build_id
+```
+build_id=`sudo hag csv platform_status  |grep "build id"`
+```
+2、导出证书链
+```
+hag csv export_cert_chain
+```
+3、生成 policy 文件
+```
+hag csv generate_policy  --nodebug
+```
+4、生成launch_blob.bin、guest_owner_dh.cert
+```
+hag csv generate_launch_blob -build $build_id -bios OVMF.fd -kernel vmlinuz  -initrd initramfs.img
+```
+guest_owner_dh.cert 为用户dh证书，对应的私钥对launch_blob.bin中的字段进行签名，guest_owner_dh.cert 作为qemu的参数传入，海光安全固件获取证书中的公钥，对launch_blob.bin 中的内容进行验签。
+launch_blob.bin作为qemu启动参数传入，launch_blob.bin内容对应为SESSION的数据结构，内容如下：
+
+
+| 偏移 | 比特位 | 输入/输出 |	  名称  | 描述 |
+|----- |-------| ---------|---------|------|
+|00h  |	127:0|	In    | NONCE| 一次性随机数，用户随机生成 |
+|10h  |	255:0|	In    | WRAP_TK  | KEK对 TEKTIK 加密形成WRAP_TK，TEKTIK 用户随机生成 ，KEK 由主密钥派生出来|
+|30h  |	127:0|	In    | WRAP_IV	 |加密TEKTIK使用的IV，加密参数之一|
+|40h  |	255:0|	In    | WRAP_MAC |使用KIK作为key 对WRAP_TK，WRAP_IV 进行hmac计算生成WRAP_MAC进行完整性保护，KIK 由主密钥派生出来|
+|60h |	255:0|	In    | SESSION_MAC	 |使用TIK对policy\|\|session data(0x124 - 0x2C3)进行hmac计算生成SESSION_MAC对数据进行完整性保护|
+|80h  |	1311:0|	In    | -	 |保留字段，0|
+|124h |	2047:0|	In    | Menc |主密钥，用户随机生成，被PDH公钥加密后为Menc，KEKKIK 由主密钥派生，海光安全固件中使用PDH私钥对Menc进行解密得到主密钥，使用主密钥派生出KEKKIK,使用KIK对WRAP_TK、WRAP_IV 进行完整性验证，KEK解密WRAP_TK 得到TEKTIK,使用KIK对policy\|\|session data(0x124 - 0x2C3)重新进行hmac计算和SESSION_MAC进行对比，实现数据完整性保护|
+|224h |	255:0|	In    | DIGEST	|虚拟机摘要，使用虚拟机组件计算生成，虚拟机组件如 OVMF.fd、 vmlinuz 、initramfs.img，安全固件中会对其进行重新计算和用户计算出的DIGEST进行对比，从而实现可信度量启动|
+|244h  |	255:0|	In    | -	 |保留字段，0|
+|264h |	127:0|	In    | VM_ID	 |虚拟机id，用户自己定义，hag csv generate_launch_blob --help 中 通过-id 参数传入|
+|274h  |	127:0|	In    | VM_VERSION	 |虚拟机版本号，用户自己定义，hag csv generate_launch_blob --help 中 通过-version 参数传入|
+|284h  |	511:0|	In    | USERDATA	 |用户自定义数据|
+|2C4h  |	511:0|	In    | SIG	 |用户DH私钥对SESSION数据的签名|
+
+### 测试用例参考 [2-3-2-测试密钥封印](https://openanolis.cn/sig/Hygon-Arch/doc/865622217613776670?lang=zh)
diff --git "a/sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\350\277\234\347\250\213\350\256\244\350\257\201\346\212\200\346\234\257\344\273\213\347\273\215.md" "b/sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\350\277\234\347\250\213\350\256\244\350\257\201\346\212\200\346\234\257\344\273\213\347\273\215.md"
index 0889458a0..2a2388235 100644
--- "a/sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\350\277\234\347\250\213\350\256\244\350\257\201\346\212\200\346\234\257\344\273\213\347\273\215.md"	
+++ "b/sig/Hygon Arch/content/2-CSV\346\265\213\350\257\225\346\226\207\346\241\243/10-\346\212\200\346\234\257\344\273\213\347\273\215/2-CSV\350\277\234\347\250\213\350\256\244\350\257\201\346\212\200\346\234\257\344\273\213\347\273\215.md"	
@@ -43,9 +43,9 @@ CSV 固件利用芯片密钥CEK对PEK证书进行再次签名。此时PEK证书
  ![](../../../assets/attestation_1.png)
 ### 远程认证报告生成 
 #### 虚拟机摘要值生成
-为了保证系统程序及其运行环境的完整性，虚拟机启动过程中，安全处理器需要对OVMF_CODE.fd、虚拟机内核文件和虚拟机内存文件(initrd)进行度量。<br>
+为了保证系统程序及其运行环境的完整性，虚拟机启动过程中，安全处理器需要对OVMF.fd、虚拟机内核文件和虚拟机内存文件(initrd)进行度量。<br>
 1、将服务程序放入initrd文件中。<br>
-2、对initrd文件、OVMF_CODE.fd和虚拟机内核镜像文件，利用SM3算法计算虚拟机文件摘要值。<br>
+2、对initrd文件、OVMF.fd和虚拟机内核镜像文件，利用SM3算法计算虚拟机文件摘要值。<br>
 3、在虚拟机启动时提供虚拟机文件和摘要值，CPU中的安全处理器利用 SM3 算法计算虚拟机文件的摘要并进行完整性检验。<br>
 4、完整性信息校验通过，虚拟机成功启动，在生成认证报告时将此摘要值作为虚拟机摘要值写入认证报告中。<br>
 #### 生成认证报告
@@ -91,7 +91,7 @@ CEK签名证书链校验流程：<br>
 |30h	 |127:0	|    Out   |Version	       |虚拟机版本号，虚拟机用户自定义。|
 |40h	 |511:0	|    Out   |USERDATA	  |用户自定义数据|
 |80h	 |127:0	|    Out   |MNONCE	       |一次性随机数，用于区别报告内容防重放攻击，由虚拟机用户生成。|
-|90h	 |255:0	|    Out   |DIGEST	       |虚拟机的启动摘要，虚拟机initrd文件、OVMF_CODE.fd和虚拟机内核<br>镜像文件的SM3摘要值。|
+|90h	 |255:0	|    Out   |DIGEST	       |虚拟机的启动摘要，虚拟机initrd文件、OVMF.fd和虚拟机内核<br>镜像文件的SM3摘要值。|
 |B0h	 |31:0	|    Out   |POLICY	       |虚拟机规则|
 |B4h	 |31:0	|    Out   |SIG_USAGE	  |签名密钥用途 PEK|
 |B8h	 |31:0	|    Out   |SIG_ALGO	  |签名算法 SM2|
-- 
Gitee


From 9a2ee70bff502c64f4d7c534d93830598832bec7 Mon Sep 17 00:00:00 2001
From: Pingsheng Pan <panpingsheng@Hygon.cn>
Date: Tue, 14 Jan 2025 14:27:57 +0800
Subject: [PATCH 2/2] Add notes for download repository

---
 ...263\273\347\273\237\345\222\214\345\206\205\346\240\270.md" | 3 +++
 1 file changed, 3 insertions(+)

diff --git "a/sig/Hygon Arch/content/1-\345\256\211\345\205\250\345\212\237\350\203\275\347\216\257\345\242\203\351\205\215\347\275\256/1-\345\256\211\350\243\205\346\223\215\344\275\234\347\263\273\347\273\237\345\222\214\345\206\205\346\240\270.md" "b/sig/Hygon Arch/content/1-\345\256\211\345\205\250\345\212\237\350\203\275\347\216\257\345\242\203\351\205\215\347\275\256/1-\345\256\211\350\243\205\346\223\215\344\275\234\347\263\273\347\273\237\345\222\214\345\206\205\346\240\270.md"
index 7d709629c..b43b034ff 100644
--- "a/sig/Hygon Arch/content/1-\345\256\211\345\205\250\345\212\237\350\203\275\347\216\257\345\242\203\351\205\215\347\275\256/1-\345\256\211\350\243\205\346\223\215\344\275\234\347\263\273\347\273\237\345\222\214\345\206\205\346\240\270.md"	
+++ "b/sig/Hygon Arch/content/1-\345\256\211\345\205\250\345\212\237\350\203\275\347\216\257\345\242\203\351\205\215\347\275\256/1-\345\256\211\350\243\205\346\223\215\344\275\234\347\263\273\347\273\237\345\222\214\345\206\205\346\240\270.md"	
@@ -12,6 +12,9 @@
 **注：不同版本可能存在差异，可以根据实际情况调整。**
 ## 下载测试代码仓库
 
+如果仓库较大clone困难，可以加参数 --depth 1 进行精简clone 。
+**如果客户将仓库作为zip压缩包下载下来，要将zip包传输到目标机器上再解压，不要解压后再传到目标机器，容易出现文件丢失。**
+
 ```
 $ sudo chmod a+w /opt
 $ cd /opt/
-- 
Gitee