a k#dA%@sPdZddlmZddlZddlZddlmZmZmZm Z m Z m Z m Z m Z mZmZmZmZmZddlmZmZmZddlmZddlmZddlmZmZmZdd lm Z dd l!m"Z"dd l#m$Z$dd l%m&Z&dd l'm(Z(ddl)m*Z*dZ+ddddddddddddddddd d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4$Z,Gd5d6d6e Z-Gd7d8d8e-Z.dd9iZ/Gd:d;d;eZ0Gdd?d?e Z2Gd@dAdAe.Z3GdBdCdCe.Z4GdDdEdEe-Z5GdFdGdGe-Z6dHdIdJdKdLZ7GdMdNdNeZ8GdOdPdPeZ9GdQdRdReZ:GdSdTdTeZ;e8e9e:e;dLZGdYdZdZe-Z?Gd[d\d\eZ@Gd]d^d^eZAd_d`iZBd_eAiZCGdadbdbe ZDGdcdddde-ZEGdedfdfe-ZFGdgdhdhe-ZGGdidjdje-ZHdkdldmZIGdndodoe-ZJGdpdqdqe-ZKdrdsZLGdtdudue-ZMGdvdwdweMZNdxdydzd{ZOGd|d}d}e-ZPGd~dde-ZQGddde-ZRGdddeZSGddde ZTGddde.ZUGddde-ZVGddde-ZWGddde-ZXGddde-ZYGddde-ZZGddde-Z[Gddde-Z\Gddde-Z]e\e]e\dZ^Gddde-Z_Gddde-Z`Gddde-Zae`eadZbGddde-ZcdddmZdGddde-ZeGddde-ZfGddde.ZgGddde-ZhGddde-ZiGddde-ZjGddde-Zke3e5e6e>e?eEeFeGeHeLeMePeQeReUeVeWeXekeYe[e\e_eceeeheieZegeje4dZlGddde ZmGdddeZndS)z TLS handshake extensions. )print_functionN) ByteEnumField ByteField EnumField FieldLenFieldFieldListFieldIntField PacketFieldPacketListFieldShortEnumField ShortFieldStrFixedLenField StrLenField XStrLenField)PacketRawPadding)X509_Extensions) _tls_version)SigAndHashAlgsLenFieldSigAndHashAlgsField _tls_hash_sig)_GenericTLSSessionInheritance)_tls_named_groups)_tls_cipher_suites)AnsiColorTheme)raw)confs !tae¢z^ Ȩ3Z server_nameZmax_fragment_lengthZclient_certificate_urlZtrusted_ca_keysZtruncated_hmacZstatus_requestZ user_mappingZ client_authzZ server_authzZ cert_typeZsupported_groupsZec_point_formatsZsignature_algorithms heartbeatZalpnZsigned_certificate_timestampZclient_certificate_typeZserver_certificate_typepaddingZencrypt_then_macZextended_master_secretrecord_size_limitZsession_ticketZpre_shared_keyZearly_data_indicationZsupported_versionscookieZpsk_key_exchange_modesZcertificate_authoritiesZ oid_filterspost_handshake_authZsignature_algorithms_certZ key_shareZnext_protocol_negotiationZrenegotiation_infoZencrypted_server_name)$r #)*+,-/0123t3c@sHeZdZdZdZeddeedddddedd d d d gZ d dZ dS)TLS_Ext_Unknownza We put this here rather than in extensions.py in order to avoid circular imports... zTLS Extension - Scapy UnknowntypeNlen!Hvalfmt length_ofcCs|jSNrHpktrSR/var/www/html/gsl.tools/lib/python3.9/site-packages/scapy/layers/tls/extensions.pydzTLS_Ext_Unknown. length_fromcCsB|jdur:t|d}|ddtd||dd}||S)Nr&r$rI)rHstructpack)selfpZpaytmp_lenrSrSrT post_buildfs  $zTLS_Ext_Unknown.post_build) __name__ __module__ __qualname____doc__namer _tls_extrr fields_descr^rSrSrSrTrF[s rFc@seZdZdZd ddZdS) TLS_Ext_PrettyPacketListz Dummy extension used for server_name/ALPN/NPN for a lighter representation: the final field is showed as a 1-line list rather than as lots of packets. XXX Define a new condition for packet lists in Packet._show_or_dump? Fr%rNTc Cs|r tntj}d||d||j|df}|jddD]}|j} |j} | |j} d||| |j|df} | || } t | t r| ddd t|t|t|jd } |d | | | f7}qB|jd}|j} |j} | |j} d||| |j|df} | || } t | t r\| ddd t|t|t|jd } |d | | | f7}|jr||jj|||d ||j|d d 7}|r|st|n|SdS)z Reproduced from packet.py z %s%s %s %s z###[z]###Nz %s %-10s%s =  r&z%s%s F)dumpindentlvl label_lvl first_call)rrZ color_themepunctZ layer_namercre field_nameZ field_value getfieldvali2repr isinstancestrreplacerHpayload _show_or_dumpZ show_indentprint)r[rkrlrmrnroctsfZncolZvcolZfvalueZbegnZreprvalrSrSrTrx{sX             z&TLS_Ext_PrettyPacketList._show_or_dumpN)Fr%rNrNT)r_r`rarbrxrSrSrSrTrftsrfZ host_namec@sBeZdZdZeddeeddddeddd d d gZd d Z dS) ServerNameZHostNameZnametypernamelenN servernamerMrNcCs|jSrO)r~rQrSrSrTrUrVzServerName.rWcCstSrOrr[r\rSrSrTguess_payload_classszServerName.guess_payload_class) r_r`rarcr_tls_server_name_typesrrrerrSrSrSrTr}s  r}c@seZdZddZdS)ServerListFieldcCs&dd|D}dddd|DS)NcSsg|] }|jqSrS)r.0r\rSrSrT rVz*ServerListField.i2repr..[%s], css|]}t|VqdSrOreprrxrSrSrT rVz)ServerListField.i2repr..joinr[rRrresrSrSrTrsszServerListField.i2reprNr_r`rarsrSrSrSrTrsrcs eZdZdZfddZZS)ServerLenFieldzQ There is no length when there are no servernames (as in a ServerHello). cs"|s|js|Stt||||SrO) servernamessuperraddfield)r[rRr{rJ __class__rSrTrszServerLenField.addfield)r_r`rarbr __classcell__rSrSrrTrsrc @sNeZdZdZeddeedddddd ed ddd edge d dd gZ dS)TLS_Ext_ServerNamezTLS Extension - Server NamerGrrHNrcCs|dS)Nr$rS)rRrrSrSrTrUrVzTLS_Ext_ServerName.)rMadjustservernameslenrcCs|jSrO)rrQrSrSrTrUrVrW) r_r`rarcr rdrrrr}rerSrSrSrTrs rc@seZdZdZeddeeddeddeedde e ddd d d e d d d dde dddde dd ddde dddd d e dd dddg Z dS)TLS_Ext_EncryptedServerNamez%TLS Extension - Encrypted Server NamerGrErHNcipherZkey_exchange_groupkey_exchange_lenZ key_exchangeH)rMrLrNcCs|jSrO)rrQrSrSrTrUrVz$TLS_Ext_EncryptedServerName.rWrecord_digest_lenZ record_digestrcCs|jSrO)rrQrSrSrTrUrVencrypted_sni_lenZ encrypted_snicCs|jSrO)rrQrSrSrTrUrV) r_r`rarcr rdr rrrrrrerSrSrSrTrs4  rc @s:eZdZdZeddeeddedddd d d d gZdS) TLS_Ext_MaxFragLenz#TLS Extension - Max Fragment LengthrGr#rHNZ maxfraglenr&z2^9z2^10z2^11z2^12)r#r$r%r& r_r`rarcr rdr rrerSrSrSrTrs rc@s&eZdZdZeddeeddgZdS)TLS_Ext_ClientCertURLz&TLS Extension - Client Certificate URLrGr$rHNr_r`rarcr rdr rerSrSrSrTrs rZ pre_agreedZ key_sha1_hashZ x509_nameZcert_sha1_hash)rr#r$r%c@s&eZdZdZeddegZddZdS) TAPreAgreedzTrusted authority - pre_agreedidtypercCstSrOrrrSrSrTrszTAPreAgreed.guess_payload_classN)r_r`rarcr_tls_trusted_authority_typesrerrSrSrSrTrsrc@s0eZdZdZeddeedddgZddZdS) TAKeySHA1Hashz!Trusted authority - key_sha1_hashrr#idNr3cCstSrOrrrSrSrTrsz!TAKeySHA1Hash.guess_payload_class r_r`rarcrrr rerrSrSrSrTrs   rc@sFeZdZdZdZeddeeddddedd d d d gZ d dZ dS) TAX509Namezm XXX Section 3.4 of RFC 4366. Implement a more specific DNField rather than current StrLenField. zTrusted authority - x509_namerr$dnlenNdnrrNcCs|jSrO)rrQrSrSrTrUrVzTAX509Name.rWcCstSrOrrrSrSrTrszTAX509Name.guess_payload_class) r_r`rarbrcrrrrrerrSrSrSrTr s  rc@s0eZdZdZeddeedddgZddZdS) TACertSHA1Hashz"Trusted authority - cert_sha1_hashrr%rNr3cCstSrOrrrSrSrTrsz"TACertSHA1Hash.guess_payload_classrrSrSrSrTrs   rc@seZdZdZddZdS) _TAListFieldz Specific version that selects the right Trusted Authority (previous TA*) class to be used for dissection based on idtype. cCs*t|d}|j}|tvr"t|}||SNr)ordcls_tls_trusted_authority_clsr[rRmrrrSrSrTm2i/s  z_TAListField.m2iN)r_r`rarbrrSrSrSrTr)src @sDeZdZdZeddeeddeddddedge d d d gZ dS) TLS_Ext_TrustedCAIndz%TLS Extension - Trusted CA IndicationrGr%rHNtalentarcCs|jSrO)rrQrSrSrTrU=rVzTLS_Ext_TrustedCAInd.rW) r_r`rarcr rdr rrrrerSrSrSrTr7s  rc@s&eZdZdZeddeeddgZdS)TLS_Ext_TruncatedHMACzTLS Extension - Truncated HMACrGr&rHNrrSrSrSrTr@s rc@s8eZdZdZeddddeddddd gZd d ZdS) ResponderIDzResponder ID structure respidlenNrespidrrNcCs|jSrOrrQrSrSrTrUJrVzResponderID.rWcCstSrOrrrSrSrTrLszResponderID.guess_payload_classr_r`rarcrrrerrSrSrSrTrFs rc@sTeZdZdZdZeddddedgeddd ed dd ded d e gZ d dZ dS)OCSPStatusRequestzE This is the structure defined in RFC 6066, not in RFC 6960! zOCSPStatusRequest structurerNrrcCs|jSrOrrQrSrSrTrUWrVzOCSPStatusRequest.rWZ reqextlenZreqextrNcCstSrOrrrSrSrTr[sz%OCSPStatusRequest.guess_payload_class) r_r`rarbrcrr rr rrerrSrSrSrTrPs   rr#Zocspc@seZdZddZdS)_StatusReqFieldcCs$|j}|j}|tvrt|}||SrO)styper_cert_status_req_clsrrSrSrTrds z_StatusReqField.m2iN)r_r`rarrSrSrSrTrcsrc @sBeZdZdZeddeeddeddee dge dd d gZ dS) TLS_Ext_CSRz*TLS Extension - Certificate Status RequestrGr'rHNrreqcCs |jdS)Nr#rPrQrSrSrTrUrrVzTLS_Ext_CSR.rW) r_r`rarcr rdr r_cert_status_typerrrerSrSrSrTrls  rc @sLeZdZdZeddeeddeddddd edge d d d d dgZ dS)TLS_Ext_UserMappingzTLS Extension - User MappingrGr(rHNumlenBZumrKZumtypercCs|jSrO)rrQrSrSrTrU|rVzTLS_Ext_UserMapping.rW) r_r`rarcr rdr rrrrerSrSrSrTrus rc@s*eZdZdZdZeddeeddgZdS)TLS_Ext_ClientAuthz XXX Unsupported zTLS Extension - Client AuthzrGr)rHN r_r`rarbrcr rdr rerSrSrSrTrs  rc@s*eZdZdZdZeddeeddgZdS)TLS_Ext_ServerAuthzrzTLS Extension - Server AuthzrGr*rHNrrSrSrSrTrs  rzX.509ZOpenPGP)rr#c @sPeZdZdZeddeeddeddddedd d ge d de d d dgZ dS)TLS_Ext_ClientCertTypez1TLS Extension - Certificate Type (client version)rGr+rHN ctypeslenctypesrrr#Z certtypescCs|jSrO)rrQrSrSrTrUrVzTLS_Ext_ClientCertType.rW) r_r`rarcr rdr rrr_tls_cert_typesrerSrSrSrTrs   rc@s0eZdZdZeddeeddeddegZ dS)TLS_Ext_ServerCertTypez1TLS Extension - Certificate Type (server version)rGr+rHNctype) r_r`rarcr rdr rrrerSrSrSrTrs   rcOs@td|ddd}|dkr&t}nt}||g|Ri|S)z We need to select the correct one on dissection. We use the length for that, as 1 for client version would imply an empty list. rIr$r&rr#)rYunpackrr)rargsZkargsr]rrSrSrT_TLS_Ext_CertTypeDispatchers rc @sPeZdZdZdZeddeeddedddd e dged de d d d gZ dS)TLS_Ext_SupportedGroupsz This extension was known as 'Supported Elliptic Curves' before TLS 1.3 merged both group selection mechanisms for ECDH and FFDH. z TLS Extension - Supported GroupsrGr,rHN groupslengroupsrngcCs|jSrO)rrQrSrSrTrUrVz TLS_Ext_SupportedGroups.rW) r_r`rarbrcr rdr rrrrerSrSrSrTrs  rc@s eZdZdS)TLS_Ext_SupportedEllipticCurvesN)r_r`rarSrSrSrTrsrZ uncompressedZansiX962_compressed_primeZansiX962_compressed_char2)rr#r$c @sPeZdZdZeddeeddeddddd edd ge d de d d dgZ dS)TLS_Ext_SupportedPointFormatz&TLS Extension - Supported Point FormatrGr-rHNecpllenrZecplrKrnccCs|jSrO)rrQrSrSrTrUrVz%TLS_Ext_SupportedPointFormat.rW) r_r`rarcr rdr rrr_tls_ecpoint_formatrerSrSrSrTrs rc @sLeZdZdZeddeeddeddddedge d de d d d gZ dS) TLS_Ext_SignatureAlgorithmsz$TLS Extension - Signature AlgorithmsrGr.rHN sig_algs_lensig_algsrhash_sigcCs|jSrOrrQrSrSrTrUrVz$TLS_Ext_SignatureAlgorithms.rW r_r`rarcr rdr rrrrrerSrSrSrTrs rc@s6eZdZdZeddeeddedddd d gZdS) TLS_Ext_HeartbeatzTLS Extension - HeartbeatrGr/rHNZheartbeat_moder$Zpeer_allowed_to_sendZpeer_not_allowed_to_sendr#r$rrSrSrSrTrs rc@s:eZdZdZedddddedddd d gZd d ZdS) ProtocolNamez Protocol NamerHNrprotocolrKrNcCs|jSrOrPrQrSrSrTrUrVzProtocolName.rWcCstSrOrrrSrSrTrsz ProtocolName.guess_payload_classrrSrSrSrTrsrc@seZdZddZdS)ProtocolListFieldcCs&dd|D}dddd|DS)NcSsg|] }|jqSrS)rrrSrSrTrrVz,ProtocolListField.i2repr..rrcss|]}t|VqdSrOrrrSrSrTrrVz+ProtocolListField.i2repr..rrrSrSrTrsszProtocolListField.i2reprNrrSrSrSrTrsrc @sDeZdZdZeddeeddeddddedge d d d gZ dS) TLS_Ext_ALPNz6TLS Extension - Application Layer Protocol NegotiationrGr0rHN protocolslen protocolsrcCs|jSrO)rrQrSrSrTrUrVzTLS_Ext_ALPN.rW) r_r`rarcr rdr rrrrerSrSrSrTrs  rc@s:eZdZdZeddeeddddeddd d d gZdS) TLS_Ext_PaddingzTLS Extension - PaddingrGr4rHNrrrNcCs|jSrOrPrQrSrSrTrUrVzTLS_Ext_Padding.rW) r_r`rarcr rdrrrerSrSrSrTrs  rc@s&eZdZdZeddeeddgZdS)TLS_Ext_EncryptThenMACz TLS Extension - Encrypt-then-MACrGr5rHNrrSrSrSrTr s rc@s&eZdZdZeddeeddgZdS)TLS_Ext_ExtendedMasterSecretz&TLS Extension - Extended Master SecretrGr6rHNrrSrSrSrTrs rc@s>eZdZdZdZeddeeddddedd d d d gZ dS) TLS_Ext_SessionTicketz RFC 5077 updates RFC 4507 according to most implementations, which do not use another (useless) 'ticketlen' field after the global 'len' field. zTLS Extension - Session TicketrGr8rHNticketrrNcCs|jSrOrPrQrSrSrTrUrVzTLS_Ext_SessionTicket.rW) r_r`rarbrcr rdrrrerSrSrSrTrs  rc@s&eZdZdZeddeeddgZdS)TLS_Ext_KeySharez'TLS Extension - Key Share (dummy class)rGrBrHNrrSrSrSrTr"s rc@s&eZdZdZeddeeddgZdS)TLS_Ext_PreSharedKeyz,TLS Extension - Pre Shared Key (dummy class)rGr9rHNrrSrSrSrTr(s rc@s&eZdZdZeddeeddgZdS)TLS_Ext_EarlyDataIndicationzTLS Extension - Early DatarGr:rHNrrSrSrSrTr.s rc@s.eZdZdZeddeeddeddgZdS)!TLS_Ext_EarlyDataIndicationTicket&TLS Extension - Ticket Early Data InforGr:rHNmax_early_data_sizer r_r`rarcr rdr rrerSrSrSrTr4s  r)r#r&r*c@s&eZdZdZeddeeddgZdS)TLS_Ext_SupportedVersionsz0TLS Extension - Supported Versions (dummy class)rGr;rHNrrSrSrSrTr@s rc @sNeZdZdZeddeeddeddddd edged de d d d gZ dS)TLS_Ext_SupportedVersion_CHz4TLS Extension - Supported Versions (for ClientHello)rGr;rHN versionslenrversionsrKversioncCs|jSrO)rrQrSrSrTrUOrVz$TLS_Ext_SupportedVersion_CH.rW) r_r`rarcr rdr rrrrerSrSrSrTrFs rc@s0eZdZdZeddeeddeddegZdS)TLS_Ext_SupportedVersion_SHz4TLS Extension - Supported Versions (for ServerHello)rGr;rHNr) r_r`rarcr rdr rrerSrSrSrTrRs   rrc@sJeZdZdZeddeeddeddddedd d d d gZ d dZ dS)TLS_Ext_CookiezTLS Extension - CookierGr<rHN cookielenr!rrNcCs|jSrO)rrQrSrSrTrUcrVzTLS_Ext_Cookie.rWcCs0|d}|dus|dkr&td|_t|S)Nr!rV )rrosurandomr!rFbuild)r[fvalrSrSrTr es  zTLS_Ext_Cookie.build) r_r`rarcr rdr rrrer rSrSrSrTr]s  rZpsk_keZ psk_dhe_kec @sNeZdZdZeddeeddeddddd edge d de d d d gZ dS)TLS_Ext_PSKKeyExchangeModesz&TLS Extension - PSK Key Exchange ModesrGr=rHN kxmodeslenrZkxmodesrKZkxmodecCs|jSrO)r rQrSrSrTrUxrVz$TLS_Ext_PSKKeyExchangeModes.rW) r_r`rarcr rdr rrr_tls_psk_kx_modesrerSrSrSrTr os r c@s.eZdZdZeddeeddeddgZdS)TLS_Ext_TicketEarlyDataInforrG.rHNrrrrSrSrSrTr{s  rc@s@eZdZdZdZeddeeddddedge d d d gZ dS) TLS_Ext_NPNzU Defined in RFC-draft-agl-tls-nextprotoneg-03. Deprecated in favour of ALPN. z)TLS Extension - Next Protocol NegotiationrGrCrHNrrcCs|jSrOrPrQrSrSrTrUrVzTLS_Ext_NPN.rW) r_r`rarbrcr rdrrrrerSrSrSrTrs  rc@s&eZdZdZeddeeddgZdS)TLS_Ext_PostHandshakeAuthz#TLS Extension - Post Handshake AuthrGr@rHNrrSrSrSrTrs rc @sLeZdZdZeddeeddeddddedge d de d d d gZ dS) TLS_Ext_SignatureAlgorithmsCertz)TLS Extension - Signature Algorithms CertrGrArHNrrrrcCs|jSrOrrQrSrSrTrUrVz(TLS_Ext_SignatureAlgorithmsCert.rWrrSrSrSrTrs rc@sDeZdZdZeddeeddeddddd edd d d d gZ dS)TLS_Ext_RenegotiationInfoz(TLS Extension - Renegotiation IndicationrGrDrHNreneg_conn_lenrZrenegotiated_connectionrKrNcCs|jSrO)rrQrSrSrTrUrVz"TLS_Ext_RenegotiationInfo.rW) r_r`rarcr rdr rrrerSrSrSrTrs rc@s.eZdZdZeddeeddeddgZdS)TLS_Ext_RecordSizeLimitz!TLS Extension - Record Size LimitrGr7rHNr rrSrSrSrTrs  r)rr#r$r%r&r'r(r)r*r+r,r-r.r/r0r4r5r6r7r8r9r:r;r<r=r@rArBrCrDrEcs$eZdZfddZddZZS)_ExtensionsLenFieldcsX||j}||}|dus&|dkrF|jj}|dus>|dkrF|dfStt|||S)z We try to compute a length, usually from a msglen parsed earlier. If we can not find any length, we consider 'extensions_present' (from RFC 5246) to be False. Nr) get_fieldrMrX tls_session tls_versionrrgetfield)r[rRr{extr]vrrSrTrs  z_ExtensionsLenField.getfieldc Cs|dur|jdur||j\}}|jj}d|j_|||}||j_|||}|dkr|jj}|dusr|dkrv|S|t|j |S|t|j |S)a There is a hack with the _ExtensionsField.i2len. It works only because we expect _ExtensionsField.i2m to return a string of the same size (if not of the same value) upon successive calls (e.g. through i2len here, then i2m when directly building the _ExtensionsField). XXX A proper way to do this would be to keep the extensions built from the i2len call here, instead of rebuilding them later on. NTrr) rMZgetfield_and_valrfrozeni2lenrrrYrZrL) r[rRr{iZfldr tmpr|rrSrSrTrs    z_ExtensionsLenField.addfield)r_r`rarrrrSrSrrTrs rc@s4eZdZdZdZddZddZddZdd Zd S) _ExtensionsFieldr#cCs|dur dSt|||Sr)rHi2m)r[rRr rSrSrTrsz_ExtensionsField.i2lencCs>||p d}|dkr|gfS||d|||d|fSr)rXr)r[rRr{r]rSrSrTr sz_ExtensionsField.getfieldcCsl|dur dSt|tr\|jjs\d}|D]0}t|trJ|j|_||7}q&|t|7}q&|Sdtt|S)NrV)rtrrrZ raw_statefulrrmap)r[rRr r{rrSrSrTr#s  z_ExtensionsField.i2mc Csg}t|dkrtd|ddd}td|ddd}t|t}|turddlm}m }|j r|j t kr||j t}q||j t}nR|t urddlm} | |j t}n.|turt|j t}n|turt|j t}|||d|d|jd||dd}q|S)Nr&rIr$r)_tls_ext_keyshare_cls_tls_ext_keyshare_hrr_cls)_tls_ext_presharedkey_cls)r)rHrYr _tls_ext_clsgetrFrZ"scapy.layers.tls.keyexchange_tls13r%r&Z random_bytes_tls_hello_retry_magicZmsgtyperr'r_tls_ext_supported_version_clsr_tls_ext_early_data_clsappendr) r[rRrrtr]rr%r&r'rSrSrTr"s,   z_ExtensionsField.m2iN) r_r`raZislistZ holds_packetsrrr#rrSrSrSrTr"s r")orb __future__rrrYZ scapy.fieldsrrrrrrr r r r r rrZ scapy.packetrrrZscapy.layers.x509rZscapy.layers.tls.basefieldsrZscapy.layers.tls.keyexchangerrrZscapy.layers.tls.sessionrZscapy.layers.tls.crypto.groupsrZscapy.layers.tls.crypto.suitesrZ scapy.themesrZ scapy.compatrZ scapy.configrr*rdrFrfrr}rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr,rrrr+rr r rrrrrrr(rr"rSrSrSrTsL <        )1                          '-