Latest revision as of 20:23, 12 August 2016

Object Encryption: Extending Swift

<o:p> </o:p>

OpenStacks object storage system provides high availability and fault tolerance but for data at rest protection, client side encryption is required. Amazon and Googles object storage systems provide transparent data encryption. Server side encryption with key management would make data protection more readily available, enable harnessing of any special hardware encryption support on the servers, make available a larger set of encryption algorithms and reduce client maintenance effort.

Protecting data involves not only encryption support but also key management, the storing, protecting, and making the encryption keys readily available, without storing data and keys on the same device. We shall address thus both encryption and key management. Before we dig into the details, we take a brief look at the security model and design options and decisions to provide a phased support.

Security Model

<![if !supportLists]>· <![endif]>Protection of data at rest: data encrypted and keys held in a separate location. Stealing the data disk still leaves the data protected.

<![if !supportLists]>· <![endif]>Keys will also be encrypted, using a Master-key. One thing to keep safe as opposed to multiple keys. A notion similar to a safe deposit box requiring a bank key and a customer key to open.

<![if !supportLists]>· <![endif]>Key Manager will not maintain mapping between keys to objects.

<![if !supportLists]>· <![endif]>Authorization and access control support for key manager to protect from unauthorized use.

<![if !supportLists]>· <![endif]>Protection from denial of service, either from malicious activity or natural disasters by way of key replication (akin to object replication and recovery in Swift).

Use Cases

Key Provider:

<![if !supportLists]>· <![endif]>User (would rather not delegate trust, plans to use the same key for each object ..)

<![if !supportLists]>· <![endif]>Auto-generation (either by the object storage system or key manager)

Key Scope:<o:p></o:p>

<![if !supportLists]>· <![endif]>Per object<o:p></o:p>

<![if !supportLists]>· <![endif]>Per project (within a domain)<o:p></o:p>

<![if !supportLists]>· <![endif]>Per domain <o:p></o:p>

Key-Storage<o:p></o:p>

<![if !supportLists]>· <![endif]>End-User<o:p></o:p>

<![if !supportLists]>· <![endif]>Key Manager<o:p></o:p>

Key-Size 128, 192, 256, shorter with padding<o:p></o:p>

<o:p> </o:p>

Choice of Encryption Algorithm<o:p></o:p>

<![if !supportLists]>· <![endif]>AES<o:p></o:p>

<![if !supportLists]>· <![endif]>DES<o:p></o:p>

<![if !supportLists]>· <![endif]>RSA<o:p></o:p>

<![if !supportLists]>· <![endif]>And beyond <o:p></o:p>

<o:p> </o:p>

Design Considerations

Key Manager Access<o:p></o:p>

Restricting access to the Key Manager to only OpenStack services would increase security. That is, no end user access.

Access Control<o:p></o:p>

Keys inserted by a service only accessible by that service. Is there a use case to support a global access?

Master Key<o:p></o:p>

Each OpenStack service that uses Key Manager to maintain its keys could have its own master key and use the same to encrypt a key string before passing it for storage to the Key Manager. The Master key could reside on a python key ring (currently it is included in common module in OpenStack and readily available to all packages).

Benefits:

<![if !supportLists]>1. <![endif]>Communication between the service and the key manager do not need to be further encrypted using ssl or https because they keys flying between them are at all times encrypted. The decrypted key string would at any time only reside on the service that seeks to save it or use.

<![if !supportLists]>2. <![endif]>Keys used by different open stack services could reside in a single storage system but if one service were to be compromised, the keys from other services would still be safe.

<![if !supportLists]>3. <![endif]>Further, should there be a desire to change a master key, only keys stored by that service need to be re-encrypted. The actual data that they were used to encrypt do not need to be re-encrypted.

Fault Tolerance and High Availability<o:p></o:p>

Key Managers keys need to be accessible at the same level as the objects they encrypt which makes for have the keys stored on a Swift like Object Storage system. Our implementation will be based on this strategy.

<o:p> </o:p>

Swift API Changes (vx.1)

<![if !supportLists]>1. <![endif]>Put (also cli upload)<o:p></o:p>

put to take optional arguments should take optional args

<![if !supportLists]> <![endif]>encrypt=True|False, absence is the same as False

<![if !supportLists]> <![endif]>enc-alg=AES-CBC ..|RSA|DES (Mirantis selected AES-CBC)

<![if !supportLists]> <![endif]>enc-key-size=128|192|256 .. default 256 (Mirantis selected 256)

<![if !supportLists]> <![endif]>enc-key-string

<![if !supportLists]> <![endif]><project-id> (account, container, object-name == all the usual suspects same as before)

(To accommodate for domains and project names having to be only unique within a domain, there will be changes in Swift API semantics, in essence a unique project-id will be provided).

<o:p> </o:p>

The encrypted object will be stored in Swift and the object meta data shall reflect these parameters. It shall further include a reference to its encryption key, key-id.

Alternately a reference to an initialization vector will be provided, IV-id.

<o:p> </o:p>

<![if !supportLists]>2. <![endif]>Get (also cli command)<o:p></o:p>

<![if !supportLists]> <![endif]>enc-key-string

If an enc-key-string is provided, it is used to decrypt the retrieved object using the other meta data associated with the object. If enc-key-string is not provided, but the meta data indicates that it is encrypted, then key-id if it exists is used to decrypt the object. If IV-id is provided, then the project-id is used to retrieve the project specific key and this is used in conjunction with the IV string retrieved using IV-id to decrypt the object and return to the user.

<o:p> </o:p>

<![if !supportLists]>3. <![endif]>Put-Key, Get-Key, Create-key (cli-commands for the same)

<o:p> </o:p>

<![if !supportLists]> <![endif]>Put-key, arguments: key-string, project-id<o:p></o:p>

<![if !supportLists]>o <![endif]>Encrypt key-string using master key to get enc-key-string

<![if !supportLists]>o <![endif]>Create key-id using hash(DM5 or Sha)(project-id

enc-key-string

<![if !supportLists]>o <![endif]>Invoke Swift put using account=service-id (Swift|Cinder ..), enc-key-string and key-id from above, specify encrpt=false. (container could be keys or project-id)

<![if !supportLists]> <![endif]>Create-key project-id<o:p></o:p>

<![if !supportLists]>o <![endif]>Invokes Put-key after first generating a random key-string. Create key returns both the key-id and the unencrypted random key-string that was generated.

<![if !supportLists]> <![endif]>Get-key key-id<o:p></o:p>

<![if !supportLists]>o <![endif]>Invokes a Swift get with account=service-id, container = keys or project-id, and key-id.

<![if !supportLists]>o <![endif]>The encrypted key string retrieved above is decrypted using the service master key and the plain text key is returned.

Key-Manager API (v 1.0)

<![if !supportLists]>1. <![endif]>Put <encrypted-key-string> <key-id>

Return success/failure and the key-id.

<o:p> </o:p>

<![if !supportLists]>2. <![endif]>Get <key-id> returns the encrypted-key-string

<![if !supportLists]>3. <![endif]>Delete <key-id> deletes the entry

<o:p> </o:p>

Swift Changes

Put Path<o:p></o:p>

<![if !supportLists]>o <![endif]>If encryption is required, and the key string is provided, it shall be used.

<![if !supportLists]>o <![endif]>If no key string is provided, the system invokes create-key, and on success uses the random key-string generated to encrypt the object and annotate it by way of meta data with the encryption parameters including key-id. Create-key internally contacts key-manager and saves the random key generated.

<![if !supportLists]>o <![endif]>If a key-string is provided, the key-manager is bypassed and instead before put is attempted, the object is first encrypted. It is the responsibility of the get call to provide the appropriate decryption key.

<![if !supportLists]>o <![endif]>No change if encryption is not requested.

Get Path<o:p></o:p>

If the retrieved object indicates Encrypt=true, then the encryption related meta data is used and the key-manger used to obtain the encrypted key string used to encrypt the retrieved object and the information used accordingly.

Delete Path<o:p></o:p>

If each object has a distinct encryption key, then when an object is deleted, the key-manager may also delete the string saved against key-id or IV-id. How should we indicate whether we are using a common key that must not be deleted?

General remarks:<o:p></o:p>

<![if !supportLists]>o <![endif]>Encryption occurs on Swift which typically is doing more IO than compute, so this would better exploit the hardware resources on Swift.

<![if !supportLists]>o <![endif]>Additional network traffic to chat with the Key Manager to store and retrieve keys. Keys could be cached in the Swift node memory.

<![if !supportLists]>o <![endif]>SSL, HTTPS used for client communication with Swift is what protects the encryption key string in transit.

<o:p> </o:p>

<o:p> </o:p>

Concerns/Questions

<![if !supportLists]>· <![endif]>Data transfer overhead: Swift uses Rsync for file transfer during replication. Any encryption algorithm that uses some form of block cipher chaining or new initialization vector each time would result in the object representation changing drastically on each update. This would result in a larger network payload for transmission.

<![if !supportLists]>· <![endif]>More things that can fail: With a key manager and an object storage system, there are two systems that can fail or be compromised, increasing the chance of things failing.

<![if !supportLists]>· <![endif]>Unauthorized key deletion: If we use a Swift based system to storing keys and insert tombstone records to mimic a legitimate deletion after breaking into a Swift storage node, yes, keys could indeed be deleted on a reaper task, but this would be no new security hazard from what Swift deals with today. Perhaps we could introduce a check that there was a logged request to delete a key before deleting a key.

<![if !supportLists]>· <![endif]>Wary of losing control of encryption key(s): Support the use case where the end user provides the encryption key (and stores a copy of their own key, and is responsible for maintaining safety of the key). The said key will not then be saved in the Key Manager.

<![if !supportLists]>· <![endif]>Caching: Should only cache encrypted data.

<![if !supportLists]>· <![endif]>Snap shots: Any standard mechanism is fine. No change necessary, data is encrypted.

<![if !supportLists]>· <![endif]>Do we need an IV (initialization vector) for each object encrypted. Yes, if we take the common key for a project or domain approach. In this case the IV would need to be encrypted, and could be stored against a key-id. We could specify compound-encryption to imply use a master key in conjunction with the IV (accessed via the iv-id attached to the object meta-data).

<![if !supportLists]>· <![endif]>No re-keying in phase-1. Not addressing background tasks of object re-keying such as that mentioned in Mirantis blog.

<o:p> </o:p>

Implementation versions

<![if !supportLists]>· <![endif]>Phase 1: Develop stub Key Manager service and specify encryption parameters in the url.

Key manager could just be a hash table in the first version to get all the APIs specified and implement, to get the plumbing correct. Support a single most popular encryption algorithm.

This would fully implement object encryption.

<![if !supportLists]>· <![endif]>Phase-2: Make Key Manager is Swift instance, with multiple zones for storage. This would support true HA and fault tolerance.

<![if !supportLists]>· <![endif]>Phase-3: Support multiple encryption algorithms. For instance, volume encryption may prefer XTS, an encryption strategy that uses sector address.

<![if !supportLists]>· <![endif]>Phase-4: Reaper routine to change a master key for a service

<o:p> </o:p>

Intels Interest

Intel X86 hardware in Westmere and beyond provides AES-NI, hardware support for encryption/decryption. These speed up encryption/decryption. Further, Intel provides open source libraries to speed computation further by parallelizing the operations (multibuffer) and interleaving them (function stitching). The references give pointers to white papers.

Intel product generations are incorporating wider registers which enables further parallelization of cryptographic operations.

Future

<![if !supportLists]>· <![endif]>Store user encryption preferences such as default key string, size, and encryption algorithm, to be passed along with the authentication token and used by Swift during object insertion. This would reduce put URL request lengths, while yet allowing flexibility in algorithm selection.

<o:p> </o:p>

Glossary

Key-string: A string of bits used to encrypt data. Could be auto-generated or end-user provided.

Key-id: a unique ID used to index a key-string in the system. The key-id will be attached as meta data with the encrypted object.

Master-key: a key-string used to encrypt the keys (key-strings) in the Key Manager

<o:p> </o:p>

References

<a href="http://www.mirantis.com/blog/openstack-swift-encryption-architecture/">http://www.mirantis.com/blog/openstack-swift-encryption-architecture http://www.egnyte.com/blog/2012/05/encryption-at-rest-in-egnyte-object-store-eos.html http://en.wikipedia.org/wiki/CBC-MAC<o:p></o:p></a>

<a href="http://www.mirantis.com/blog/openstack-swift-encryption-architecture/">http://en.wikipedia.org/wiki/Advanced_Encryption_Standard<o:p></o:p></a>

<a href="http://wiki.openstack.org/VolumeEncryption">http://wiki.openstack.org/VolumeEncryption</a>

Fast Cryptographic computation on IA processors via Function Stitching <a href="http://download.intel.com/design/intarch/PAPERS/323686.pdf">http://download.intel.com/design/intarch/PAPERS/323686.pdf</a>

Processing Multiple buffers in parallel - <a href="http://download.intel.com/design/intarch/papers/324101.pdf">http://download.intel.com/design/intarch/papers/324101.pdf</a>

XTS efficient implementation: <a href="http://download.intel.com/design/intarch/PAPERS/324310.pdf">http</a><a href="http://download.intel.com/design/intarch/PAPERS/324310.pdf">://</a><a href="http://download.intel.com/design/intarch/PAPERS/324310.pdf">download.intel.com/design/intarch/PAPERS/324310.pdf</a>

<o:p> </o:p>

</body>

</html>

Difference between revisions of "ObjectEncryption.htm"

Latest revision as of 20:23, 12 August 2016

Contents

Object Encryption: Extending Swift

Security Model

Use Cases

Design Considerations

Swift API Changes (vx.1)

Key-Manager API (v 1.0)

Swift Changes

Concerns/Questions

Implementation versions

Intels Interest

Future

Glossary

References

@@ Line 1: / Line 1: @@
--*527-3401____1.8.8.8.5.2.7.3.4.0.1.Le Dekh Le Ghochu
-USA AVAST CUStomer SUPPPORT PHONE NUMBER USA UK CANADA >>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 tech support phone number USA-$$$$$1888-527-3401$$$$$$$USA/canada avast 360 Technical Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360Support Number
-CANADA >>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 tech support phone number USA-$$$$$1888-527-3401$$$$$$$USA/canada avast 360 Technical Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360 Support NumberCANADA >>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 tech support phone number USA-
-$$$$$1888-527-3401$$$$$$$USA/canada avast 360 Technical Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360
+<html xmlns:v="urn:schemas-microsoft-com:vml"
+xmlns:o="urn:schemas-microsoft-com:office:office"
+xmlns:w="urn:schemas-microsoft-com:office:word"
+xmlns:dt="uuid:[[C2F41010]]-65B3-11d1-A29F-00AA00C14882"
+xmlns:m="http://schemas.microsoft.com/office/2004/12/omml"
+xmlns="http://www.w3.org/TR/REC-html40">
-Support NumberCANADA >>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 tech support phone number USA-
+<head>
+<meta http-equiv=Content-Type content="text/html; charset=windows-1252">
+<meta name=[[ProgId]] content=Word.Document>
+<meta name=Generator content="Microsoft Word 14">
+<meta name=Originator content="Microsoft Word 14">
+<link rel=File-List href="ObjectEncryption_files/filelist.xml">
+<!--[if gte mso 9]><xml>
+ <o:[[DocumentProperties]]>
+  <o:Author>Bhandaru, Malini K</o:Author>
+  <o:[[LastAuthor]]>Bhandaru, Malini K</o:[[LastAuthor]]>
+  <o:Revision>2</o:Revision>
+  <o:[[TotalTime]]>6</o:[[TotalTime]]>
+  <o:Created>2013-01-11T13:23:00Z</o:Created>
+  <o:[[LastSaved]]>2013-01-11T13:23:00Z</o:[[LastSaved]]>
+  <o:Pages>7</o:Pages>
+  <o:Words>1869</o:Words>
+  <o:Characters>10659</o:Characters>
+  <o:Company>Intel Corporation</o:Company>
+  <o:Lines>88</o:Lines>
+  <o:Paragraphs>25</o:Paragraphs>
+  <o:[[CharactersWithSpaces]]>12503</o:[[CharactersWithSpaces]]>
+  <o:Version>14.00</o:Version>
+ </o:[[DocumentProperties]]>
+ <o:[[OfficeDocumentSettings]]>
+  <o:AllowPNG/>
+ </o:[[OfficeDocumentSettings]]>
+</xml><![endif]-->
+<link rel=themeData href="ObjectEncryption_files/themedata.thmx">
+<link rel=colorSchemeMapping
+href="ObjectEncryption_files/colorschememapping.xml">
+<!--[if gte mso 9]><xml>
+ <w:[[WordDocument]]>
+  <w:[[SpellingState]]>Clean</w:[[SpellingState]]>
+  <w:[[GrammarState]]>Clean</w:[[GrammarState]]>
+  <w:[[TrackMoves]]>false</w:[[TrackMoves]]>
+  <w:[[TrackFormatting]]/>
+  <w:[[PunctuationKerning]]/>
+  <w:[[ValidateAgainstSchemas]]/>
+  <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
+  <w:[[IgnoreMixedContent]]>false</w:[[IgnoreMixedContent]]>
+  <w:[[AlwaysShowPlaceholderText]]>false</w:[[AlwaysShowPlaceholderText]]>
+  <w:DoNotPromoteQF/>
+  <w:[[LidThemeOther]]>EN-US</w:[[LidThemeOther]]>
+  <w:[[LidThemeAsian]]>X-NONE</w:[[LidThemeAsian]]>
+  <w:[[LidThemeComplexScript]]>X-NONE</w:[[LidThemeComplexScript]]>
+  <w:Compatibility>
+   <w:[[BreakWrappedTables]]/>
+   <w:[[SnapToGridInCell]]/>
+   <w:[[WrapTextWithPunct]]/>
+   <w:[[UseAsianBreakRules]]/>
+   <w:[[DontGrowAutofit]]/>
+   <w:[[SplitPgBreakAndParaMark]]/>
+   <w:[[EnableOpenTypeKerning]]/>
+   <w:[[DontFlipMirrorIndents]]/>
+   <w:[[OverrideTableStyleHps]]/>
+  </w:Compatibility>
+  <m:mathPr>
+   <m:mathFont m:val="Cambria Math"/>
+   <m:brkBin m:val="before"/>
+   <m:brkBinSub m:val="&#45;-"/>
+   <m:smallFrac m:val="off"/>
+   <m:dispDef/>
+   <m:lMargin m:val="0"/>
+   <m:rMargin m:val="0"/>
+   <m:defJc m:val="centerGroup"/>
+   <m:wrapIndent m:val="1440"/>
+   <m:intLim m:val="subSup"/>
+   <m:naryLim m:val="undOvr"/>
+  </m:mathPr></w:[[WordDocument]]>
+</xml><![endif]--><!--[if gte mso 9]><xml>
+ <w:[[LatentStyles]] [[DefLockedState]]="false" [[DefUnhideWhenUsed]]="true"
+  [[DefSemiHidden]]="true" DefQFormat="false" [[DefPriority]]="99"
+  [[LatentStyleCount]]="267">
+  <w:[[LsdException]] Locked="false" Priority="0" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Normal"/>
+  <w:[[LsdException]] Locked="false" Priority="9" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="heading 1"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
+  <w:[[LsdException]] Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 1"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 2"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 3"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 4"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 5"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 6"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 7"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 8"/>
+  <w:[[LsdException]] Locked="false" Priority="39" Name="toc 9"/>
+  <w:[[LsdException]] Locked="false" Priority="35" QFormat="true" Name="caption"/>
+  <w:[[LsdException]] Locked="false" Priority="10" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Title"/>
+  <w:[[LsdException]] Locked="false" Priority="1" Name="Default Paragraph Font"/>
+  <w:[[LsdException]] Locked="false" Priority="11" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Subtitle"/>
+  <w:[[LsdException]] Locked="false" Priority="22" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Strong"/>
+  <w:[[LsdException]] Locked="false" Priority="20" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Emphasis"/>
+  <w:[[LsdException]] Locked="false" Priority="59" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Table Grid"/>
+  <w:[[LsdException]] Locked="false" [[UnhideWhenUsed]]="false" Name="Placeholder Text"/>
+  <w:[[LsdException]] Locked="false" Priority="1" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="No Spacing"/>
+  <w:[[LsdException]] Locked="false" Priority="60" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Shading"/>
+  <w:[[LsdException]] Locked="false" Priority="61" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light List"/>
+  <w:[[LsdException]] Locked="false" Priority="62" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Grid"/>
+  <w:[[LsdException]] Locked="false" Priority="63" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 1"/>
+  <w:[[LsdException]] Locked="false" Priority="64" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 2"/>
+  <w:[[LsdException]] Locked="false" Priority="65" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 1"/>
+  <w:[[LsdException]] Locked="false" Priority="66" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 2"/>
+  <w:[[LsdException]] Locked="false" Priority="67" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 1"/>
+  <w:[[LsdException]] Locked="false" Priority="68" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 2"/>
+  <w:[[LsdException]] Locked="false" Priority="69" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 3"/>
+  <w:[[LsdException]] Locked="false" Priority="70" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Dark List"/>
+  <w:[[LsdException]] Locked="false" Priority="71" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Shading"/>
+  <w:[[LsdException]] Locked="false" Priority="72" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful List"/>
+  <w:[[LsdException]] Locked="false" Priority="73" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Grid"/>
+  <w:[[LsdException]] Locked="false" Priority="60" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Shading Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="61" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light List Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="62" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Grid Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="63" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 1 Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="64" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 2 Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="65" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 1 Accent 1"/>
+  <w:[[LsdException]] Locked="false" [[UnhideWhenUsed]]="false" Name="Revision"/>
+  <w:[[LsdException]] Locked="false" Priority="34" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="List Paragraph"/>
+  <w:[[LsdException]] Locked="false" Priority="29" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Quote"/>
+  <w:[[LsdException]] Locked="false" Priority="30" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Intense Quote"/>
+  <w:[[LsdException]] Locked="false" Priority="66" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 2 Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="67" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 1 Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="68" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 2 Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="69" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 3 Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="70" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Dark List Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="71" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Shading Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="72" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful List Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="73" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Grid Accent 1"/>
+  <w:[[LsdException]] Locked="false" Priority="60" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Shading Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="61" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light List Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="62" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Grid Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="63" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 1 Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="64" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 2 Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="65" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 1 Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="66" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 2 Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="67" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 1 Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="68" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 2 Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="69" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 3 Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="70" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Dark List Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="71" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Shading Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="72" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful List Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="73" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Grid Accent 2"/>
+  <w:[[LsdException]] Locked="false" Priority="60" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Shading Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="61" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light List Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="62" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Grid Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="63" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 1 Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="64" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 2 Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="65" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 1 Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="66" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 2 Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="67" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 1 Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="68" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 2 Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="69" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 3 Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="70" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Dark List Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="71" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Shading Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="72" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful List Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="73" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Grid Accent 3"/>
+  <w:[[LsdException]] Locked="false" Priority="60" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Shading Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="61" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light List Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="62" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Grid Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="63" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 1 Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="64" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 2 Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="65" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 1 Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="66" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 2 Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="67" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 1 Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="68" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 2 Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="69" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 3 Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="70" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Dark List Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="71" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Shading Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="72" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful List Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="73" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Grid Accent 4"/>
+  <w:[[LsdException]] Locked="false" Priority="60" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Shading Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="61" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light List Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="62" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Grid Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="63" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 1 Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="64" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 2 Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="65" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 1 Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="66" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 2 Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="67" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 1 Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="68" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 2 Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="69" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 3 Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="70" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Dark List Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="71" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Shading Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="72" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful List Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="73" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Grid Accent 5"/>
+  <w:[[LsdException]] Locked="false" Priority="60" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Shading Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="61" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light List Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="62" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Light Grid Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="63" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 1 Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="64" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Shading 2 Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="65" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 1 Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="66" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium List 2 Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="67" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 1 Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="68" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 2 Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="69" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Medium Grid 3 Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="70" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Dark List Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="71" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Shading Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="72" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful List Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="73" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" Name="Colorful Grid Accent 6"/>
+  <w:[[LsdException]] Locked="false" Priority="19" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Subtle Emphasis"/>
+  <w:[[LsdException]] Locked="false" Priority="21" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Intense Emphasis"/>
+  <w:[[LsdException]] Locked="false" Priority="31" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Subtle Reference"/>
+  <w:[[LsdException]] Locked="false" Priority="32" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Intense Reference"/>
+  <w:[[LsdException]] Locked="false" Priority="33" [[SemiHidden]]="false"
+   [[UnhideWhenUsed]]="false" QFormat="true" Name="Book Title"/>
+  <w:[[LsdException]] Locked="false" Priority="37" Name="Bibliography"/>
+  <w:[[LsdException]] Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
+ </w:[[LatentStyles]]>
+</xml><![endif]-->
+<style>
+<!--
+ /* Font Definitions */
+ @font-face
+	{font-family:Wingdings;
+	panose-1:5 0 0 0 0 0 0 0 0 0;
+	mso-font-charset:2;
+	mso-generic-font-family:auto;
+	mso-font-pitch:variable;
+	mso-font-signature:0 268435456 0 0 -2147483648 0;}
+@font-face
+	{font-family:Wingdings;
+	panose-1:5 0 0 0 0 0 0 0 0 0;
+	mso-font-charset:2;
+	mso-generic-font-family:auto;
+	mso-font-pitch:variable;
+	mso-font-signature:0 268435456 0 0 -2147483648 0;}
+@font-face
+	{font-family:Cambria;
+	panose-1:2 4 5 3 5 4 6 3 2 4;
+	mso-font-charset:0;
+	mso-generic-font-family:roman;
+	mso-font-pitch:variable;
+	mso-font-signature:-536870145 1073743103 0 0 415 0;}
+@font-face
+	{font-family:Calibri;
+	panose-1:2 15 5 2 2 2 4 3 2 4;
+	mso-font-charset:0;
+	mso-generic-font-family:swiss;
+	mso-font-pitch:variable;
+	mso-font-signature:-520092929 1073786111 9 0 415 0;}
+ /* Style Definitions */
+ p.[[MsoNormal]], li.[[MsoNormal]], div.[[MsoNormal]]
+	{mso-style-unhide:no;
+	mso-style-qformat:yes;
+	mso-style-parent:"";
+	margin-top:0in;
+	margin-right:0in;
+	margin-bottom:10.0pt;
+	margin-left:0in;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	font-size:11.0pt;
+	font-family:"Calibri","sans-serif";
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-fareast-font-family:Calibri;
+	mso-fareast-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;}
+h1
+	{mso-style-priority:9;
+	mso-style-unhide:no;
+	mso-style-qformat:yes;
+	mso-style-link:"Heading 1 Char";
+	mso-style-next:Normal;
+	margin-top:24.0pt;
+	margin-right:0in;
+	margin-bottom:0in;
+	margin-left:0in;
+	margin-bottom:.0001pt;
+	line-height:115%;
+	mso-pagination:widow-orphan lines-together;
+	page-break-after:avoid;
+	mso-outline-level:1;
+	font-size:14.0pt;
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#365F91;
+	mso-themecolor:accent1;
+	mso-themeshade:191;
+	mso-font-kerning:0pt;
+	font-weight:bold;}
+h2
+	{mso-style-priority:9;
+	mso-style-qformat:yes;
+	mso-style-link:"Heading 2 Char";
+	mso-style-next:Normal;
+	margin-top:10.0pt;
+	margin-right:0in;
+	margin-bottom:0in;
+	margin-left:0in;
+	margin-bottom:.0001pt;
+	line-height:115%;
+	mso-pagination:widow-orphan lines-together;
+	page-break-after:avoid;
+	mso-outline-level:2;
+	font-size:13.0pt;
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	font-weight:bold;}
+h3
+	{mso-style-priority:9;
+	mso-style-qformat:yes;
+	mso-style-link:"Heading 3 Char";
+	mso-style-next:Normal;
+	margin-top:10.0pt;
+	margin-right:0in;
+	margin-bottom:0in;
+	margin-left:0in;
+	margin-bottom:.0001pt;
+	line-height:115%;
+	mso-pagination:widow-orphan lines-together;
+	page-break-after:avoid;
+	mso-outline-level:3;
+	font-size:11.0pt;
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	font-weight:bold;}
+p.[[MsoSubtitle]], li.[[MsoSubtitle]], div.[[MsoSubtitle]]
+	{mso-style-priority:11;
+	mso-style-unhide:no;
+	mso-style-qformat:yes;
+	mso-style-link:"Subtitle Char";
+	mso-style-next:Normal;
+	margin-top:0in;
+	margin-right:0in;
+	margin-bottom:10.0pt;
+	margin-left:0in;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	font-size:12.0pt;
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	letter-spacing:.75pt;
+	font-style:italic;}
+a:link, span.[[MsoHyperlink]]
+	{mso-style-priority:99;
+	color:blue;
+	mso-themecolor:hyperlink;
+	text-decoration:underline;
+	text-underline:single;}
+a:visited, span.[[MsoHyperlinkFollowed]]
+	{mso-style-noshow:yes;
+	mso-style-priority:99;
+	color:purple;
+	mso-themecolor:followedhyperlink;
+	text-decoration:underline;
+	text-underline:single;}
+p
+	{mso-style-noshow:yes;
+	mso-style-priority:99;
+	mso-margin-top-alt:auto;
+	margin-right:0in;
+	mso-margin-bottom-alt:auto;
+	margin-left:0in;
+	mso-pagination:widow-orphan;
+	font-size:12.0pt;
+	font-family:"Times New Roman","serif";
+	mso-fareast-font-family:"Times New Roman";}
+p.[[MsoListParagraph]], li.[[MsoListParagraph]], div.[[MsoListParagraph]]
+	{mso-style-priority:34;
+	mso-style-unhide:no;
+	mso-style-qformat:yes;
+	margin-top:0in;
+	margin-right:0in;
+	margin-bottom:10.0pt;
+	margin-left:.5in;
+	mso-add-space:auto;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	font-size:11.0pt;
+	font-family:"Calibri","sans-serif";
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-fareast-font-family:Calibri;
+	mso-fareast-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;}
+p.[[MsoListParagraphCxSpFirst]], li.[[MsoListParagraphCxSpFirst]], div.[[MsoListParagraphCxSpFirst]]
+	{mso-style-priority:34;
+	mso-style-unhide:no;
+	mso-style-qformat:yes;
+	mso-style-type:export-only;
+	margin-top:0in;
+	margin-right:0in;
+	margin-bottom:0in;
+	margin-left:.5in;
+	margin-bottom:.0001pt;
+	mso-add-space:auto;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	font-size:11.0pt;
+	font-family:"Calibri","sans-serif";
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-fareast-font-family:Calibri;
+	mso-fareast-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;}
+p.[[MsoListParagraphCxSpMiddle]], li.[[MsoListParagraphCxSpMiddle]], div.[[MsoListParagraphCxSpMiddle]]
+	{mso-style-priority:34;
+	mso-style-unhide:no;
+	mso-style-qformat:yes;
+	mso-style-type:export-only;
+	margin-top:0in;
+	margin-right:0in;
+	margin-bottom:0in;
+	margin-left:.5in;
+	margin-bottom:.0001pt;
+	mso-add-space:auto;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	font-size:11.0pt;
+	font-family:"Calibri","sans-serif";
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-fareast-font-family:Calibri;
+	mso-fareast-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;}
+p.[[MsoListParagraphCxSpLast]], li.[[MsoListParagraphCxSpLast]], div.[[MsoListParagraphCxSpLast]]
+	{mso-style-priority:34;
+	mso-style-unhide:no;
+	mso-style-qformat:yes;
+	mso-style-type:export-only;
+	margin-top:0in;
+	margin-right:0in;
+	margin-bottom:10.0pt;
+	margin-left:.5in;
+	mso-add-space:auto;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	font-size:11.0pt;
+	font-family:"Calibri","sans-serif";
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-fareast-font-family:Calibri;
+	mso-fareast-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;}
+p.[[MsoIntenseQuote]], li.[[MsoIntenseQuote]], div.[[MsoIntenseQuote]]
+	{mso-style-priority:30;
+	mso-style-unhide:no;
+	mso-style-qformat:yes;
+	mso-style-link:"Intense Quote Char";
+	mso-style-next:Normal;
+	margin-top:10.0pt;
+	margin-right:.65in;
+	margin-bottom:14.0pt;
+	margin-left:.65in;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	border:none;
+	mso-border-bottom-alt:solid #4F81BD .5pt;
+	mso-border-bottom-themecolor:accent1;
+	padding:0in;
+	mso-padding-alt:0in 0in 4.0pt 0in;
+	font-size:11.0pt;
+	font-family:"Calibri","sans-serif";
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-fareast-font-family:Calibri;
+	mso-fareast-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	font-weight:bold;
+	font-style:italic;}
+span.[[Heading1Char]]
+	{mso-style-name:"Heading 1 Char";
+	mso-style-priority:9;
+	mso-style-unhide:no;
+	mso-style-locked:yes;
+	mso-style-link:"Heading 1";
+	mso-ansi-font-size:14.0pt;
+	mso-bidi-font-size:14.0pt;
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#365F91;
+	mso-themecolor:accent1;
+	mso-themeshade:191;
+	font-weight:bold;}
+span.[[IntenseQuoteChar]]
+	{mso-style-name:"Intense Quote Char";
+	mso-style-priority:30;
+	mso-style-unhide:no;
+	mso-style-locked:yes;
+	mso-style-link:"Intense Quote";
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	font-weight:bold;
+	font-style:italic;}
+span.[[SubtitleChar]]
+	{mso-style-name:"Subtitle Char";
+	mso-style-priority:11;
+	mso-style-unhide:no;
+	mso-style-locked:yes;
+	mso-style-link:Subtitle;
+	mso-ansi-font-size:12.0pt;
+	mso-bidi-font-size:12.0pt;
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	letter-spacing:.75pt;
+	font-style:italic;}
+span.[[Heading2Char]]
+	{mso-style-name:"Heading 2 Char";
+	mso-style-priority:9;
+	mso-style-unhide:no;
+	mso-style-locked:yes;
+	mso-style-link:"Heading 2";
+	mso-ansi-font-size:13.0pt;
+	mso-bidi-font-size:13.0pt;
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	font-weight:bold;}
+span.[[Heading3Char]]
+	{mso-style-name:"Heading 3 Char";
+	mso-style-priority:9;
+	mso-style-unhide:no;
+	mso-style-locked:yes;
+	mso-style-link:"Heading 3";
+	font-family:"Cambria","serif";
+	mso-ascii-font-family:Cambria;
+	mso-ascii-theme-font:major-latin;
+	mso-fareast-font-family:"Times New Roman";
+	mso-fareast-theme-font:major-fareast;
+	mso-hansi-font-family:Cambria;
+	mso-hansi-theme-font:major-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:major-bidi;
+	color:#4F81BD;
+	mso-themecolor:accent1;
+	font-weight:bold;}
+span.SpellE
+	{mso-style-name:"";
+	mso-spl-e:yes;}
+span.GramE
+	{mso-style-name:"";
+	mso-gram-e:yes;}
+.[[MsoChpDefault]]
+	{mso-style-type:export-only;
+	mso-default-props:yes;
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-fareast-font-family:Calibri;
+	mso-fareast-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;}
+.[[MsoPapDefault]]
+	{mso-style-type:export-only;
+	margin-bottom:10.0pt;
+	line-height:115%;}
+@page [[WordSection1]]
+	{size:8.5in 11.0in;
+	margin:1.0in 1.0in 1.0in 1.0in;
+	mso-header-margin:.5in;
+	mso-footer-margin:.5in;
+	mso-paper-source:0;}
+div.[[WordSection1]]
+	{page:[[WordSection1]];}
+ /* List Definitions */
+ @list l0
+	{mso-list-id:122116483;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-1638240446 -1256955394 -747331808 780309708 -992315210 1350077410 -933344816 430724074 -874457274 810312566;}
+@list l0:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l0:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l1
+	{mso-list-id:122773038;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-236697528 -2076565284 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l1:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:77.4pt;
+	text-indent:-.25in;}
+@list l1:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:113.4pt;
+	text-indent:-.25in;}
+@list l1:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:149.4pt;
+	text-indent:-9.0pt;}
+@list l1:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:185.4pt;
+	text-indent:-.25in;}
+@list l1:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:221.4pt;
+	text-indent:-.25in;}
+@list l1:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:257.4pt;
+	text-indent:-9.0pt;}
+@list l1:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:293.4pt;
+	text-indent:-.25in;}
+@list l1:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:329.4pt;
+	text-indent:-.25in;}
+@list l1:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:365.4pt;
+	text-indent:-9.0pt;}
+@list l2
+	{mso-list-id:139855240;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1149647228 1875906516 -1891470114 -530021094 -747722204 -1564852286 1375896106 768749834 -662000900 120738526;}
+@list l2:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l2:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l3
+	{mso-list-id:215437186;
+	mso-list-type:hybrid;
+	mso-list-template-ids:247096654 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l3:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l3:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l3:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l3:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l3:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l3:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l3:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l3:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l3:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l4
+	{mso-list-id:270671711;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1660208844 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l4:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l4:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l4:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l4:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l4:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l4:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l4:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l4:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l4:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l5
+	{mso-list-id:279142354;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1780925060 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l5:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l5:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l5:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l5:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l5:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l5:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l5:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l5:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l5:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l6
+	{mso-list-id:344987493;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1624039236 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l6:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:74.4pt;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l6:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:110.4pt;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l6:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:146.4pt;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l6:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:182.4pt;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l6:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:218.4pt;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l6:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:254.4pt;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l6:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:290.4pt;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l6:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:326.4pt;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l6:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:362.4pt;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l7
+	{mso-list-id:351803333;
+	mso-list-type:hybrid;
+	mso-list-template-ids:942731244 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l7:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l7:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l7:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l7:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l7:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l7:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l7:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l7:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l7:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l8
+	{mso-list-id:352611016;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-2055053236 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l8:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l8:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l8:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l8:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l8:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l8:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l8:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l8:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l8:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l9
+	{mso-list-id:408237228;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-1813769110 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l9:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.75in;
+	mso-level-number-position:left;
+	margin-left:.75in;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l9:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.25in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l9:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.75in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l9:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.25in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l9:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.75in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l9:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.25in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l9:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.75in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l9:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.25in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l9:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.75in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l10
+	{mso-list-id:429930739;
+	mso-list-type:hybrid;
+	mso-list-template-ids:660902738 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l10:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l10:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l10:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l10:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l10:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l10:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l10:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l10:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l10:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l11
+	{mso-list-id:459617094;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-756269696 -220722202 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l11:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:.75in;
+	text-indent:-.25in;}
+@list l11:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.25in;
+	text-indent:-.25in;}
+@list l11:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:1.75in;
+	text-indent:-9.0pt;}
+@list l11:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.25in;
+	text-indent:-.25in;}
+@list l11:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.75in;
+	text-indent:-.25in;}
+@list l11:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:3.25in;
+	text-indent:-9.0pt;}
+@list l11:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.75in;
+	text-indent:-.25in;}
+@list l11:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.25in;
+	text-indent:-.25in;}
+@list l11:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:4.75in;
+	text-indent:-9.0pt;}
+@list l12
+	{mso-list-id:472260649;
+	mso-list-type:hybrid;
+	mso-list-template-ids:323261092 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l12:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l12:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l12:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l12:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l12:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l12:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l12:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l12:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l12:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l13
+	{mso-list-id:569929020;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-1812306624 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l13:level1
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l13:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l13:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l13:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l13:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l13:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l13:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l13:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l13:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l14
+	{mso-list-id:706487500;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-1297577952 -606031210 -1297346110 2076623484 -1479669194 142794190 -802287618 -81219148 -1111036746 -1423013632;}
+@list l14:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l14:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l15
+	{mso-list-id:744692889;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-1530245928 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l15:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l15:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l15:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l15:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.5in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l15:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.0in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l15:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.5in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l15:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l15:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l15:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:5.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l16
+	{mso-list-id:757680205;
+	mso-list-type:hybrid;
+	mso-list-template-ids:175019204 -1072557874 707161064 202383198 -516286808 -1644017316 -1124537578 1903569360 1751160296 1266824778;}
+@list l16:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:1.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:2.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:3.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.0in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l16:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:4.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Arial","sans-serif";
+	mso-bidi-font-family:"Times New Roman";}
+@list l17
+	{mso-list-id:778257005;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1384833978 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l17:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l17:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l17:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l17:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.5in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l17:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.0in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l17:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.5in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l17:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l17:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l17:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:5.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l18
+	{mso-list-id:834301006;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-2002630492 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l18:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l18:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l18:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l18:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l18:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l18:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l18:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l18:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l18:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l19
+	{mso-list-id:878205406;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1417684554 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l19:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l19:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l19:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l19:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l19:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l19:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l19:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l19:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l19:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l20
+	{mso-list-id:919291507;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-285414150 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l20:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l20:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l20:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l20:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l20:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l20:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l20:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l20:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l20:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l21
+	{mso-list-id:927888618;
+	mso-list-type:hybrid;
+	mso-list-template-ids:534256980 67698691 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l21:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l21:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l21:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l21:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l21:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l21:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l21:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l21:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l21:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l22
+	{mso-list-id:1009405999;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-557834622 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l22:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l22:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l22:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l22:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l22:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l22:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l22:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l22:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l22:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l23
+	{mso-list-id:1135299525;
+	mso-list-type:hybrid;
+	mso-list-template-ids:335442640 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l23:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l23:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l23:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l23:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l23:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l23:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l23:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l23:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l23:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l24
+	{mso-list-id:1259800777;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1683795436 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l24:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l24:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l24:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l24:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.5in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l24:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.0in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l24:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.5in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l24:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l24:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l24:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:5.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l25
+	{mso-list-id:1268923595;
+	mso-list-type:hybrid;
+	mso-list-template-ids:347531028 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l25:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l25:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l25:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l25:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l25:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l25:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l25:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l25:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l25:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l26
+	{mso-list-id:1324777341;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1566070432 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l26:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l26:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l26:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l26:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l26:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l26:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l26:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l26:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l26:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l27
+	{mso-list-id:1371953485;
+	mso-list-type:hybrid;
+	mso-list-template-ids:919913810 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l27:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l27:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l27:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l27:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.5in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l27:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.0in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l27:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.5in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l27:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.0in;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l27:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.5in;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l27:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:5.0in;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l28
+	{mso-list-id:1470199665;
+	mso-list-type:hybrid;
+	mso-list-template-ids:200833058 653957714 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l28:level1
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:.75in;
+	text-indent:-.25in;
+	mso-ansi-font-weight:bold;}
+@list l28:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.25in;
+	text-indent:-.25in;}
+@list l28:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:1.75in;
+	text-indent:-9.0pt;}
+@list l28:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.25in;
+	text-indent:-.25in;}
+@list l28:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.75in;
+	text-indent:-.25in;}
+@list l28:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:3.25in;
+	text-indent:-9.0pt;}
+@list l28:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.75in;
+	text-indent:-.25in;}
+@list l28:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.25in;
+	text-indent:-.25in;}
+@list l28:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:4.75in;
+	text-indent:-9.0pt;}
+@list l29
+	{mso-list-id:1542597610;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-223980410 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l29:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l29:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l29:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l29:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l29:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l29:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l29:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l29:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l29:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l30
+	{mso-list-id:1658223727;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-278248284 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l30:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l30:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l30:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l30:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l30:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l30:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l30:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l30:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l30:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l31
+	{mso-list-id:1668291820;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-221496802 1032849646 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l31:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:.75in;
+	text-indent:-.25in;}
+@list l31:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.25in;
+	text-indent:-.25in;}
+@list l31:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:1.75in;
+	text-indent:-9.0pt;}
+@list l31:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.25in;
+	text-indent:-.25in;}
+@list l31:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.75in;
+	text-indent:-.25in;}
+@list l31:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:3.25in;
+	text-indent:-9.0pt;}
+@list l31:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.75in;
+	text-indent:-.25in;}
+@list l31:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.25in;
+	text-indent:-.25in;}
+@list l31:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:4.75in;
+	text-indent:-9.0pt;}
+@list l32
+	{mso-list-id:1719165480;
+	mso-list-type:hybrid;
+	mso-list-template-ids:480281366 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l32:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l32:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l32:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l32:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l32:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l32:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l32:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l32:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l32:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l33
+	{mso-list-id:1735615887;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1965696710 -248099998 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l33:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:.75in;
+	text-indent:-.25in;}
+@list l33:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:1.25in;
+	text-indent:-.25in;}
+@list l33:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:1.75in;
+	text-indent:-9.0pt;}
+@list l33:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.25in;
+	text-indent:-.25in;}
+@list l33:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:2.75in;
+	text-indent:-.25in;}
+@list l33:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:3.25in;
+	text-indent:-9.0pt;}
+@list l33:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:3.75in;
+	text-indent:-.25in;}
+@list l33:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:4.25in;
+	text-indent:-.25in;}
+@list l33:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:4.75in;
+	text-indent:-9.0pt;}
+@list l34
+	{mso-list-id:1782453638;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-521994616 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l34:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l34:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l34:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l34:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l34:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l34:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l34:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l34:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l34:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l35
+	{mso-list-id:1854955638;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-1051832468 -1131242166 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l35:level1
+	{mso-level-start-at:2;
+	mso-level-number-format:alpha-lower;
+	mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:77.4pt;
+	text-indent:-.25in;}
+@list l35:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:113.4pt;
+	text-indent:-.25in;}
+@list l35:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:149.4pt;
+	text-indent:-9.0pt;}
+@list l35:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:185.4pt;
+	text-indent:-.25in;}
+@list l35:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:221.4pt;
+	text-indent:-.25in;}
+@list l35:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:257.4pt;
+	text-indent:-9.0pt;}
+@list l35:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:293.4pt;
+	text-indent:-.25in;}
+@list l35:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:329.4pt;
+	text-indent:-.25in;}
+@list l35:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	margin-left:365.4pt;
+	text-indent:-9.0pt;}
+@list l36
+	{mso-list-id:1865436252;
+	mso-list-type:hybrid;
+	mso-list-template-ids:829867566 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l36:level1
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l36:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l36:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l36:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l36:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l36:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l36:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l36:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l36:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l37
+	{mso-list-id:1871797321;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1772274718 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l37:level1
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l37:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l37:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l37:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l37:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l37:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l37:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l37:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l37:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l38
+	{mso-list-id:2028824457;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1730040010 -606031210 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l38:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:;
+	mso-level-tab-stop:.5in;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Times New Roman","serif";}
+@list l38:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l38:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l38:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l38:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l38:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l38:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l38:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l38:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l39
+	{mso-list-id:2064063239;
+	mso-list-type:hybrid;
+	mso-list-template-ids:1768198160 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
+@list l39:level1
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l39:level2
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l39:level3
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l39:level4
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l39:level5
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l39:level6
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l39:level7
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0B7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Symbol;}
+@list l39:level8
+	{mso-level-number-format:bullet;
+	mso-level-text:o;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:"Courier New";}
+@list l39:level9
+	{mso-level-number-format:bullet;
+	mso-level-text:\[[F0A7]];
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;
+	font-family:Wingdings;}
+@list l40
+	{mso-list-id:2096240889;
+	mso-list-type:hybrid;
+	mso-list-template-ids:-2032233358 -2076565284 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
+@list l40:level1
+	{mso-level-text:"%1\)";
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	margin-left:77.4pt;
+	text-indent:-.25in;}
+@list l40:level2
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l40:level3
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l40:level4
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l40:level5
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l40:level6
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+@list l40:level7
+	{mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l40:level8
+	{mso-level-number-format:alpha-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:left;
+	text-indent:-.25in;}
+@list l40:level9
+	{mso-level-number-format:roman-lower;
+	mso-level-tab-stop:none;
+	mso-level-number-position:right;
+	text-indent:-9.0pt;}
+ol
+	{margin-bottom:0in;}
+ul
+	{margin-bottom:0in;}
+-->
+</style>
+<!--[if gte mso 10]>
+<style>
+ /* Style Definitions */
+ table.[[MsoNormalTable]]
+	{mso-style-name:"Table Normal";
+	mso-tstyle-rowband-size:0;
+	mso-tstyle-colband-size:0;
+	mso-style-noshow:yes;
+	mso-style-priority:99;
+	mso-style-parent:"";
+	mso-padding-alt:0in 5.4pt 0in 5.4pt;
+	mso-para-margin-top:0in;
+	mso-para-margin-right:0in;
+	mso-para-margin-bottom:10.0pt;
+	mso-para-margin-left:0in;
+	line-height:115%;
+	mso-pagination:widow-orphan;
+	font-size:11.0pt;
+	font-family:"Calibri","sans-serif";
+	mso-ascii-font-family:Calibri;
+	mso-ascii-theme-font:minor-latin;
+	mso-hansi-font-family:Calibri;
+	mso-hansi-theme-font:minor-latin;
+	mso-bidi-font-family:"Times New Roman";
+	mso-bidi-theme-font:minor-bidi;}
+</style>
+<![endif]--><!--[if gte mso 9]><xml>
+ <o:shapedefaults v:ext="edit" spidmax="1026"/>
+</xml><![endif]--><!--[if gte mso 9]><xml>
+ <o:shapelayout v:ext="edit">
+  <o:idmap v:ext="edit" data="1"/>
+ </o:shapelayout></xml><![endif]-->
+</head>
-$$$$$1888-527-3401$$$$$$$USA/canada avast 360 Technical Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360
+<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
-Support NumberCANADA >>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 tech support phone number USA-
+<div class=[[WordSection1]]>
-$$$$$1888-527-3401$$$$$$$USA/canada avast 360 Technical Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360
+<h1>Object Encryption: Extending Swift </h1>
-Support Number
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
-CANADA >>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 tech support phone number USA-
-$$$$$1888-527-3401$$$$$$$USA/canada avast 360 Technical Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360
+<p class=[[MsoNormal]]><span class=SpellE>[[OpenStack]]s</span> object storage system
+provides high availability and fault tolerance but for data at rest protection,
+client side encryption is required. Amazon and Googles object storage systems
+provide transparent data encryption. Server side encryption with key management
+would make data protection more readily available, enable harnessing of any special
+hardware encryption support on the servers, make available a larger set of
+encryption algorithms and reduce client maintenance effort. </p>
-Support Number
+<p class=[[MsoNormal]]>Protecting data involves not only encryption support but
-KARANT!!!*+*!!!!*+$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number om avast tech support phone number
+also key management, the storing, protecting, and making the encryption keys readily
+available, without storing data and keys on the same device. We shall address
+thus both encryption and key management. Before we dig into the details, we
+take a brief look at the security model and design options and decisions to
+provide a phased support.</p>
-avast 360 Tech Support KARANT!!!*+*!!!!*+$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number om avast tech
+<h2>Security Model</h2>
-support phone number avast 360 Tech Support KARANT!!!*+*!!!!*+$$$$$1888-527-3401$$$$$$$++ avast 360 support phone
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l19 level1 lfo16'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Protection
+of data at rest: data encrypted and keys held in a separate location</b>. Stealing
+the data disk still leaves the data protected. </p>
-number om avast tech support phone number avast 360 Tech Support KARANT!!!*+*!!!!*+$$$$$1888-527-3401$$$$$$$++
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l19 level1 lfo16'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Keys will
+also be encrypted, using a Master-key</b>. One thing to keep safe as opposed to
+multiple keys. A notion similar to a safe deposit box requiring a bank key and
+a customer key to open.</p>
-avast 360 support phone number om avast tech support phone number avast 360 Tech Support KARANT!!!*+*!!!!*
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l19 level1 lfo16'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Key
+Manager will not maintain mapping between keys to objects</b>.</p>
-+$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number om avast tech support phone number avast 360 Tech
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l19 level1 lfo16'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Authorization
+and access control support for key manager to protect from unauthorized use</b>.</p>
-Support KARANT!!!*+*!!!!*+$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number om avast tech support phone
+<p class=[[MsoListParagraphCxSpLast]] style='text-indent:-.25in;mso-list:l19 level1 lfo16'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Protection
+from denial of service</b>, either from malicious activity or natural disasters
+by way of key replication (akin to object replication and recovery in Swift).</p>
-number avast 360 Tech Support
+<h2>Use Cases</h2>
-KARANT!!!*+*!!!!*+$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number om avast tech support phone number
+<p class=[[MsoNormal]] style='text-indent:.5in'><b style='mso-bidi-font-weight:
+normal'>Key Provider</b>:</p>
-avast 360 Tech Support
+<p class=[[MsoListParagraphCxSpFirst]] style='margin-left:1.0in;mso-add-space:auto;
-USA..$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number om avast tech support phone number avast 360 Tech
+text-indent:-.25in;mso-list:l17 level1 lfo18'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>User</b> (would
+rather not delegate trust, plans to use the same key for each <span
+class=GramE>object ..</span>)</p>
-Support Number
+<p class=[[MsoListParagraphCxSpLast]] style='margin-left:1.0in;mso-add-space:auto;
-USA..$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number om avast tech support phone number avast 360 Tech
+text-indent:-.25in;mso-list:l17 level1 lfo18'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Auto-generation
+</b>(either by the object storage system or key manager)</p>
-Support Number
+<p class=[[MsoNormal]] style='margin-left:.5in'><b style='mso-bidi-font-weight:
-USAtralia>>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number avast tech support phone number avast
+normal'>Key Scope:<o:p></o:p></b></p>
-Tech Support Number
+<p class=[[MsoListParagraphCxSpFirst]] style='margin-left:1.0in;mso-add-space:auto;
-USA >>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number USA-$$$$$1888-527-3401$$$$$$$USA/canada
+text-indent:-.25in;mso-list:l15 level1 lfo19'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Per object<o:p></o:p></b></p>
-avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360 Support Number
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:1.0in;mso-add-space:
-avast Live Support and Help‎ 1.888.527.3401 @@ avast tech support phone number
+auto;text-indent:-.25in;mso-list:l15 level1 lfo19'><![if !supportLists]><span
-avast Live Support and Help‎ 1.888.527.3401 @@ avast tech support phone number
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast Live Support and Help‎ 1.888.527.3401 avast 360 support phone number USA
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-USA Canada>>>> USA-$$$$$1888-527-3401$$$$$$$++ avast 360 support phone number USA-
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Per
+project </b>(within a domain)<b style='mso-bidi-font-weight:normal'><o:p></o:p></b></p>
-$$$$$1888-527-3401$$$$$$$USA/canada avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$;!!avast 360 Support
+<p class=[[MsoListParagraphCxSpLast]] style='margin-left:1.0in;mso-add-space:auto;
+text-indent:-.25in;mso-list:l15 level1 lfo19'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Per
+domain <o:p></o:p></b></p>
-Number
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'><span
-WikiGenes- @+++1800-969-1649++000avast 360 support phone number18885273401USA/canada
+style='mso-spacerun:yes'>              </span>Key-Storage<o:p></o:p></b></p>
-avast antivirus technical support phone number 1@888@#527--3401
-hdfc toll free customer care number(((!1@888@#527--3401)) avast 360 Tech Support Number @@!
-$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
+<p class=[[MsoListParagraphCxSpFirst]] style='margin-left:1.0in;mso-add-space:auto;
-avast toll free customer care number 1@888@#527--3401)))
+text-indent:-.25in;mso-list:l27 level1 lfo20'><![if !supportLists]><span
-avast toll free customer care number 1@888@#527--3401)))
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast toll free customer care number 1@888@#527--3401))))
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast toll free customer care number 1@888@#527--3401>>>>>
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>End-User<o:p></o:p></b></p>
-avast technical support phone number ((1@888@#527--3401))
-avast technical support number 1@888@#527--3401
-avast technical support number 1@888@#527--3401
-symantec technical support number 1@888@#527--3401
-avast antivirus technical support number 1@888@#527--3401
-avast support phone number 1@888@#527--3401
-avast locations avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number avast 360
-Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
+<p class=[[MsoListParagraphCxSpLast]] style='margin-left:1.0in;mso-add-space:auto;
-avast customer service
+text-indent:-.25in;mso-list:l27 level1 lfo20'><![if !supportLists]><span
-avast antivirus customer care__avast Support phone number 1@888@#527--3401
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast customer support phone number 1@888@#527--3401
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast customer support phone number 1@888@#527--3401
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Key
-avast antivirus customer support phone number 1@888@#527--3401avast antivirus customer service phone number
+Manager<o:p></o:p></b></p>
-@888@#527--3401
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'><span
-avast antivirus technical support phone number 1@888@#527--3401
+style='mso-spacerun:yes'>               </span>Key-<span class=GramE>Size<span
-avast antivirus tech support phone number 1@888@#527--3401
+style='mso-spacerun:yes'>  </span>128</span>, 192, 256, shorter with padding<o:p></o:p></b></p>
-avast antivirus phone number 1@888@#527--3401 avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast
-Support Number
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'><o:p>&nbsp;</o:p></b></p>
-avast security center phone number 1@888@#527--3401
-avast support telephone number 1@888@#527--3401
-avast 360 technical support phone number 1@888@#527--3401
-symantec technical support phone number 1@888@#527--3401
-avast tech support phone number 1@888@#527--3401 avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast
-Support Number
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'><span
-apple technical support phone number 1@888@#527--3401 USA
+style='mso-spacerun:yes'>              </span>Choice of Encryption Algorithm<o:p></o:p></b></p>
-microsoft technical support phone number 1@888@#527--3401 USA
-gmail technical support phone number 1@888@#527--3401 USA
-kaspersky technical support phone number 1@888@#527--3401 USA
-lenovo technical support phone number 1@888@#527--3401 USA
-epson technical support phone number 1@888@#527--3401 USA
-avast technical support phone number 1@888@#527--3401 avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!!
-avast 360 Support Number
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l30 level1 lfo21'><![if !supportLists]><span
-avast AntiVirus Customer Service Phone Number #1: 800-969-1649
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast Phone number $$$$$1888-527-3401$$$$$$$ avast 360 phone number avast 360 support phone number
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-Free~* C@ll 1@888@#527--3401 avast 360 technical support phone number USA 1@888@#527--3401 avast 360 technical
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>AES<o:p></o:p></b></p>
-support phone number avast free call
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l30 level1 lfo21'><![if !supportLists]><span
-~* C@ll 1@888@#527--3401 avast 360 technical support phone number USA 1@888@#527--3401 avast 360 technical support
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>DES<o:p></o:p></b></p>
-phone number avast free call avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l30 level1 lfo21'><![if !supportLists]><span
-PHONE support USA @1@888@#527--3401 avast antivirus technical support phone number
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast locations
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast online support
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>RSA<o:p></o:p></b></p>
-avast Support phone number 1@888@#527--3401
-avast customer care avast tech support phone number 1@888@#527--3401
-avast tech support phone number 1@888@#527--3401
-avast antivirus tech support phone number 1@888@#527--3401
-avast locations avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
-avast Support phone number 1@888@#527--3401
-service avast com
-avast login
-avast technical support phone number 1@888@#527--3401
-avast customer service
-avast Support phone number 1@888@#527--3401
-avast support telephone number 1@888@#527--3401
-avast support phone number 1@888@#527--3401
-avast antivirus support phone number 1@888@#527--3401 avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!!
-avast 360 Support Number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l30 level1 lfo21'><![if !supportLists]><span
-avast antivirus tech support phone number 1@888@#527--3401
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast antivirus customer service phone number 1@888@#527--3401
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast 360 technical support phone number 1@888@#527--3401
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>And beyond
-symantec technical support phone number 1@888@#527--3401
-avast technical support phone number 1@888@#527--3401
-avast customer service telephone number 1@888@#527--3401
-avast antivirus phone number 1@888@#527--3401
-avast antivirus customer service phone number 1@888@#527--3401
-avast antivirus customer service Support avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360
-Support Number
+<o:p></o:p></b></p>
-avast antivirus phone number 1@888@#527--3401
-avast phone number 1@888@#527--3401 cancel subscription
-avast technical support phone number 1@888@#527--3401
-avast 800 phone number 1@888@#527--3401
-snapdeal toll free customer care number 1@888@#527--3401
-sbi toll free customer care number 1@888@#527--3401
-airtel toll free customer care number 1@888@#527--3401
-avast customer service number 1@888@#527--3401
-avast call center avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
-avast customer service email address
-avast customer care no avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
-call avast support
-chat with avast support
-avast customer support
-avast antivirus customer service number 1@888@#527--3401
-avast avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
-avast call center
-avast hq
-avast office locations
-avast support site
-avast telephone number 1@888@#527--3401 for customer support
-avast customer service contact number 1@888@#527--3401
-avast customer care
-avast toll free number 1@888@#527--3401
-avast security contact number 1@888@#527--3401
-contact avast
-avast headquarters avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
-avast customer service chat
-avast customer service telephone number 1@888@#527--3401
-avast Support phone number 1@888@#527--3401
-avast customer support
-avast customer service refund
-avast login
-avast locations
-avast customer service number 1@888@#527--3401 USA
-avast locations
-avast customer service email address
-avast support site avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
-avast technical support phone number 1@888@#527--3401
-avast technical support live chat
-avast technical support email address
-avast technical support number 1@888@#527--3401
-avast technical support number 1@888@#527--3401 avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast
-Support Number
+<p class=[[MsoListParagraphCxSpLast]]><b style='mso-bidi-font-weight:normal'><o:p>&nbsp;</o:p></b></p>
-symantec technical support number 1@888@#527--3401
-avast antivirus technical support number 1@888@#527--3401
-avast customer support phone number 1@888@#527--3401
-avast customer support number 1@888@#527--3401
-avast customer support number 1@888@#527--3401 avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast
-Support Number
+<h2>Design Considerations</h2>
-avast antivirus customer support number 1@888@#527--3401
-avast locations avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast 360 Support Number
-avast Support phone number 1@888@#527--3401
-avast antivirus phone number 1@888@#527--3401 avast 360 Tech Support Number @@!$$$$$1888-527-3401$$$$$$$!! avast
-Support Number
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Key Manager Access<o:p></o:p></b></p>
-avast customer service Support
-avast technical support phone number 1@888@#527--3401
-avast tech support phone number 1@888@#527--3401
-avast tech support number 1@888@#527--3401
-avast tech support number 1@888@#527--3401 FREE
-AUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number phone avast antivirus customer care
-phone number
+<p class=[[MsoNormal]]><span style='mso-spacerun:yes'>        </span>Restricting
-AUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number phone avast antivirus customer care
+access to the Key Manager to only [[OpenStack]] services would increase security.
+That is, no end user access.</p>
-phone numberAUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number phone avast antivirus
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Access Control<o:p></o:p></b></p>
-customer care phone numberAUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number phone avast
+<p class=[[MsoNormal]]>Keys inserted by a service only accessible by that service.
+Is there a use case to support a global access?</p>
-antivirus customer care phone numberAUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Master Key<o:p></o:p></b></p>
-phone avast antivirus customer care phone numberAUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'><span
+style='mso-spacerun:yes'>       </span></b>Each [[OpenStack]] service that uses Key
+Manager to maintain its keys could have its own master key and use the same to
+encrypt a key string before passing it for storage to the Key Manager. The
+Master key could reside on a python key ring (currently it is included in
+common module in [[OpenStack]] and readily available to all packages).</p>
-Support Number phone avast antivirus customer care phone number
+<p class=[[MsoNormal]]>Benefits:</p>
-AUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number phone avast antivirus customer care
-phone number
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l36 level1 lfo22'><![if !supportLists]><span
-AUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number phone avast antivirus customer care
+style='mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin'><span
+style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]>Communication between the service and the key
+manager do not need to be further encrypted using ssl or https because they
+keys flying between them are at all times encrypted. The decrypted key string
+would at any time only reside on the service that seeks to save it or use.</p>
-phone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l36 level1 lfo22'><![if !supportLists]><span
-AUS avast Install@+@@1888-527!!3401@@+ @@avast antivirus tech Support Number phone avast antivirus customer care
+style='mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin'><span
+style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]>Keys used by different open stack services could
+reside in a single storage system but if one service were to be compromised,
+the keys from other services would still be safe.</p>
-phone number
+<p class=[[MsoListParagraphCxSpLast]] style='text-indent:-.25in;mso-list:l36 level1 lfo22'><![if !supportLists]><span
-avast Security contact Number +1.8.8.8.5.2.7.3.4.0.1.**avast antivirus support phone number
+style='mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin'><span
-usa+1.8.8.8-5.2.7-3.4.0.1.) Technical support number
+style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-CANADA+1800-969-1649 avast Antivirus Technical Support
+</span></span></span><![endif]>Further, should there be a desire to change a
-USA-1800-969-1649contact avast antivirus customer service phone number
+master key, only keys stored by that service need to be re-encrypted. The
-AUS-1.8.8.8-5.2.7-3.4.0.1. phone number for avast customer service
+actual data that they were used to encrypt do <span class=GramE>not<span
-UK-1800-969-1649 phone number for avast antivirus technical support
+style='mso-spacerun:yes'>  </span>need</span> to be re-encrypted.</p>
-.8.8.8-5.2.7-3.4.0.1. phone number for avast antivirus customer service
-phone number for avast antivirus technical support
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Fault Tolerance and
-phone number for avast security
+High Availability<o:p></o:p></b></p>
-avast antivirus customer care phone number
-avast antivirus customer service billing
+<p class=[[MsoNormal]]>Key Managers keys need to be accessible at the same level
-avast antivirus customer service email address
+as the objects they encrypt which makes for have the keys stored on a Swift
-avast antivirus customer service live chat
+like Object Storage system. Our implementation will be based on this strategy.</p>
-avast antivirus customer service telephone number
-avast antivirus customer support usa phone number
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
-avast antivirus help desk support phone number free in usa
-avast antivirus phone number customer service us
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
-avast antivirus phone number support
-avast antivirus support phone number
+<h3>Swift API Changes (vx.1)</h3>
-avast antivirus tech support phone number free in usa
-avast antivirus tech support phone number
+<p class=[[MsoListParagraph]] style='text-indent:-.25in;mso-list:l13 level1 lfo37'><![if !supportLists]><b
-avast antivirus technical support customer service
+style='mso-bidi-font-weight:normal'><span style='mso-bidi-font-family:Calibri;
-avast antivirus technical support number
+mso-bidi-theme-font:minor-latin'><span style='mso-list:Ignore'>1.<span
-avast antivirus telephone number
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span></span></b><![endif]><b
-avast antivirus toll free customer care number
+style='mso-bidi-font-weight:normal'>Put <span
-avast antivirus toll free number in usa
+style='mso-spacerun:yes'>   </span>(also<span style='mso-spacerun:yes'>
-avast antivirus contact phone number in usa
+</span>cli upload)<o:p></o:p></b></p>
-avast antivirus customer service number
-avast antivirus customer service phone number
+<p class=[[MsoNormal]]><span style='mso-spacerun:yes'>   </span><span
-avast antivirus customer service telephone number
+style='mso-spacerun:yes'>    </span><span class=GramE>put</span> to take
-avast antivirus customer support number
+optional arguments should take optional <span class=SpellE>args</span> </p>
-avast antivirus customer support phone number
-avast antivirus customer support phone number
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l4 level1 lfo38;
-avast antivirus help desk phone number in usa
+tab-stops:list .5in'><![if !supportLists]><span style='font-family:"Times New Roman","serif";
-avast antivirus phone number
+mso-fareast-font-family:"Times New Roman"'><span style='mso-list:Ignore'><span
-avast antivirus phone number support for technical issue in usa
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast antivirus support phone number
+</span></span></span><![endif]>encrypt=<span class=SpellE>True|False</span>,<span
-avast antivirus technical support help desk phone number
+style='mso-spacerun:yes'>  </span>absence is the same as False</p>
-avast antivirus technical support number
-avast antivirus technical support phone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l4 level1 lfo38;
-avast customer service number
+tab-stops:list .5in'><![if !supportLists]><span style='font-family:"Times New Roman","serif";
-avast customer service telephone number
+mso-fareast-font-family:"Times New Roman"'><span style='mso-list:Ignore'><span
-avast customer services email
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast customer support email address
+</span></span></span><![endif]><span class=SpellE><span class=GramE>enc-alg</span></span><span
-avast customer support number
+class=GramE>=</span>AES-CBC ..|RSA|DES<span style='mso-spacerun:yes'>
-avast customer support phone number
+</span>(Mirantis selected AES-CBC)</p>
-avast customer service phone number
-avast internet security contact phone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l4 level1 lfo38;
-avast internet security customer service phone number
+tab-stops:list .5in'><![if !supportLists]><span style='font-family:"Times New Roman","serif";
-avast internet security phone number
+mso-fareast-font-family:"Times New Roman"'><span style='mso-list:Ignore'><span
-avast internet security help phone number
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast internet security phone number in usa
+</span></span></span><![endif]><span class=SpellE><span class=GramE>enc</span></span><span
-avast internet security support phone number
+class=GramE>-key-size=</span>128|192|256 .. default 256<span
-avast internet security technical support
+style='mso-spacerun:yes'>  </span>(Mirantis selected 256) </p>
-avast phone number customer service
-avast phone numbers customer support
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l4 level1 lfo38;
-avast phone support number
+tab-stops:list .5in'><![if !supportLists]><span style='font-family:"Times New Roman","serif";
-avast security contact phone number
+mso-fareast-font-family:"Times New Roman"'><span style='mso-list:Ignore'><span
-avast security phone number customer service
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast security support phone number
+</span></span></span><![endif]><span class=SpellE>enc</span>-key-string</p>
-avast support contact number
-avast support email address
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l4 level1 lfo38;
-avast support phone number
+tab-stops:list .5in'><![if !supportLists]><span style='font-family:"Times New Roman","serif";
-avast support telephone number
+mso-fareast-font-family:"Times New Roman"'><span style='mso-list:Ignore'><span
-avast support telephone number usa
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast support telephone number
+</span></span></span><![endif]>&lt;project-id&gt;<span
-avast tech support number
+style='mso-spacerun:yes'>     </span>(account, container, object-name == all
-avast tech support phone number
+the usual suspects same as before)</p>
-avast tech support phone number free
-avast technical support phone number
+<p class=[[MsoListParagraphCxSpMiddle]]>(To accommodate for domains and project
-avast technical support cutomer phone number
+names having to be only unique within a domain, there will be changes in Swift
-avast technical support phone number
+API semantics, in essence a unique project-id will be provided).</p>
-avast technical support number free in usa
-avast technical support number toll free number
+<p class=[[MsoListParagraphCxSpMiddle]]><o:p>&nbsp;</o:p></p>
-avast technical support phone number
-avast technologies phone number
+<p class=[[MsoListParagraphCxSpMiddle]]>The encrypted object will be stored in
-avast telephone support number
+Swift and the object <span class=GramE>meta</span> data shall reflect these
-avast antivirus customer support phone number
+parameters. It shall further include a reference to its encryption key, <b
-avast antivirus customer service phone number
+style='mso-bidi-font-weight:normal'>key-id</b>.</p>
-avast customer support phone number
-avast phone number customer service
+<p class=[[MsoListParagraphCxSpMiddle]]>Alternately a reference to an
-avast technical support telephone number
+initialization vector will be provided, <b style='mso-bidi-font-weight:normal'>IV-id</b>.</p>
-contact avast antivirus customer service phone number
-customer service number for avast antivirus
+<p class=[[MsoListParagraphCxSpMiddle]]><o:p>&nbsp;</o:p></p>
-phone number for avast antivirus
-phone number for avast antivirus customer service
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l13 level1 lfo37'><![if !supportLists]><b
-phone number for avast antivirus support
+style='mso-bidi-font-weight:normal'><span style='mso-bidi-font-family:Calibri;
-phone number for avast customer service
+mso-bidi-theme-font:minor-latin'><span style='mso-list:Ignore'>2.<span
-phone number for avast customer service
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span></span></b><![endif]><b
-phone number for avast customer support
+style='mso-bidi-font-weight:normal'>Get<span style='mso-spacerun:yes'>
-phone number for avast tech support
+</span>(also cli command)<o:p></o:p></b></p>
-phone number avast antivirus customer service
-avast antivirus customer service number
+<p class=[[MsoListParagraphCxSpLast]] style='margin-left:.75in;mso-add-space:auto;
-avast antivirus customer service phone
+text-indent:-.25in;mso-list:l9 level1 lfo40;tab-stops:list .75in'><![if !supportLists]><span
-avast antivirus customer service phone number
+style='font-family:"Times New Roman","serif";mso-fareast-font-family:"Times New Roman"'><span
-avast antivirus customer service phone number us
+style='mso-list:Ignore'><span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast antivirus customer service telephone number
+</span></span></span><![endif]><span class=SpellE>enc</span>-key-string</p>
-avast antivirus customer support
-avast antivirus customer support number
+<p class=[[MsoNormal]] style='margin-left:.5in'>If an <span class=SpellE>enc</span>-key-string
-avast antivirus phone number customer service us
+is provided, it is used to decrypt the retrieved object using the other <span
-avast antivirus phone number support
+class=GramE>meta</span> data associated with the object. If <span class=SpellE>enc</span>-key-string
-avast antivirus phone support
+is not provided, but the <span class=GramE>meta</span> data indicates that it
-avast antivirus phone support number
+is encrypted, then key-id if it exists is used to decrypt the object. If IV-id
-avast antivirus support phone number
+is provided, then the project-id is used to retrieve the project specific key
-avast antivirus tech support phone number
+and this is used in conjunction with the IV string retrieved using IV-id to
-avast antivirus technical support
+decrypt the object and return to the user.</p>
-avast antivirus technical support number
-avast antivirus technical support phone number
+<p class=[[MsoNormal]] style='margin-left:.5in'><o:p>&nbsp;</o:p></p>
-avast customer service phone number
-avast customer support phone number
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l13 level1 lfo37'><![if !supportLists]><span
-avast helpline phone number
+style='mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin'><span
-avast internet security customer service
+style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast internet security customer service phone number
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Put-Key,
-avast internet security help phone number
+Get-Key, Create-key </b><span style='mso-spacerun:yes'> </span>(cli-commands
-avast internet security phone number customer service
+for the same)</p>
-avast phone number customer service
-avast phone number customer support
+<p class=[[MsoListParagraphCxSpMiddle]]><b style='mso-bidi-font-weight:normal'><o:p>&nbsp;</o:p></b></p>
-avast security customer service phone number
-avast security phone number customer service
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:.75in;mso-add-space:
-avast support phone number
+auto;text-indent:-.25in;mso-list:l9 level1 lfo40;tab-stops:list .75in'><![if !supportLists]><span
-avast support telephone number
+style='font-family:"Times New Roman","serif";mso-fareast-font-family:"Times New Roman"'><span
-avast tech support number
+style='mso-list:Ignore'><span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast tech support phone number
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Put-key,
-avast technical support
+arguments: key-string, project-id<o:p></o:p></b></p>
-avast technical support number
-avast technical support phone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:1.25in;mso-add-space:
-avast antivirus customer support phone number
+auto;text-indent:-.25in;mso-list:l9 level2 lfo40'><![if !supportLists]><span
-avast antivirus phone number customer service
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast antivirus tech support number
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast customer service phone number
+</span></span></span><![endif]>Encrypt key-string using<span
-avast customer service phone numbers
+style='mso-spacerun:yes'>  </span>master key to get <span class=SpellE>enc</span>-key-string</p>
-avast internet security technical support
-avast tech support phone number us
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:1.25in;mso-add-space:
-avast technical support telephone number
+auto;text-indent:-.25in;mso-list:l9 level2 lfo40'><![if !supportLists]><span
-contact avast antivirus
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-contact avast by phone
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-contact avast customer service
+</span></span></span><![endif]>Create key-id using<span
-contact avast antivirus customer service phone number
+style='mso-spacerun:yes'>  </span>hash(DM5 or <span class=SpellE>Sha</span>)(project-id
-contactavast antivirus tech support usa
+* <span class=SpellE>enc</span>-key-string</p>
-customer service avast phone number
-download avast titanium
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:1.25in;mso-add-space:
-dri avast customer service number
+auto;text-indent:-.25in;mso-list:l9 level2 lfo40'><![if !supportLists]><span
-dri avast customer service phone number
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-dri avast phone number
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-how to contact avast by email
+</span></span></span><![endif]>Invoke Swift put using account=service-id (<span
-how to delete avast from mac
+class=SpellE>Swift|<span class=GramE>Cinder</span></span><span class=GramE> ..</span>),
-micro trend customer service
+<span class=SpellE>enc</span>-key-string and key-id from above, specify <span
-avast antivirus customer service number
+class=SpellE>encrpt</span>=false. (container could be keys or project-id)</p>
-phone number for avast customer service
-phone number foravast customer service
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:.75in;mso-add-space:
-phone number foravast customer support
+auto;text-indent:-.25in;mso-list:l9 level1 lfo40;tab-stops:list .75in'><![if !supportLists]><span
-phone number foravast tech support
+style='font-family:"Times New Roman","serif";mso-fareast-font-family:"Times New Roman"'><span
-phone number foravast technical support
+style='mso-list:Ignore'><span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-phone number for avast antivirus technical support
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Create-key<span
-phone number for avast security
+style='mso-tab-count:1'>  </span>project-id<o:p></o:p></b></p>
-phone number for avast support
-phone number for avast technical support
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:1.25in;mso-add-space:
-phone number for avast antivirus customer service
+auto;text-indent:-.25in;mso-list:l9 level2 lfo40'><![if !supportLists]><span
-phone number for avast customer service
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-remove avast from mac
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-technical support for antivirus avast
+</span></span></span><![endif]>Invokes Put-key after first generating a random
-telephone number foravast technical support
+key-string. Create key returns both the key-id and the unencrypted random
-telephone avast antivirus
+key-string that was generated.</p>
-avast antivirus contact number
-avast antivirus customer care
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:.75in;mso-add-space:
-avast antivirus customer care number
+auto;text-indent:-.25in;mso-list:l9 level1 lfo40;tab-stops:list .75in'><![if !supportLists]><span
-avast antivirus customer care number usa
+style='font-family:"Times New Roman","serif";mso-fareast-font-family:"Times New Roman"'><span
-avast antivirus customer service
+style='mso-list:Ignore'><span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast antivirus customer service number :idea: :evil: :D :) :lol: :( :o :shock:
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Get-key
-avast antivirus customer service phone number
+key-id<o:p></o:p></b></p>
-avast antivirus customer service phone number usa
-avast antivirus customer service telephone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:1.25in;mso-add-space:
-avast antivirus customer support
+auto;text-indent:-.25in;mso-list:l9 level2 lfo40'><![if !supportLists]><span
-avast antivirus customer support in usa
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast antivirus customer support number
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast antivirus customer support phone number
+</span></span></span><![endif]>Invokes a Swift get with account=service-id, container
-avast antivirus for phone
+= keys or project-id, and key-id.</p>
-avast antivirus free antivirus support
-avast antivirus help phone number
+<p class=[[MsoListParagraphCxSpLast]] style='margin-left:1.25in;mso-add-space:auto;
-avast antivirus helpline number
+text-indent:-.25in;mso-list:l9 level2 lfo40'><![if !supportLists]><span
-avast antivirus online support
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast antivirus phone
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast antivirus phone number
+</span></span></span><![endif]>The encrypted key string retrieved above is
-avast antivirus phone number in usa
+decrypted using the <span class=GramE>service<span style='mso-spacerun:yes'>
-avast antivirus phone number usa
+</span>master</span> key and the plain text key is returned.</p>
-avast antivirus phone support
-avast antivirus plus tech support
+<h3>Key-Manager <span class=GramE>API <span style='mso-spacerun:yes'> </span>(</span>v
-avast antivirus protection
+.0)</h3>
-avast antivirus support
-avast antivirus support number
+<p class=[[MsoListParagraphCxSpFirst]] style='margin-left:.75in;mso-add-space:auto;
-avast antivirus support phone number
+text-indent:-.25in;mso-list:l28 level1 lfo39'><![if !supportLists]><b
-avast antivirus support services
+style='mso-bidi-font-weight:normal'><span style='mso-bidi-font-family:Calibri;
-avast antivirus support telephone number
+mso-bidi-theme-font:minor-latin'><span style='mso-list:Ignore'>1.<span
-avast antivirus tech support
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span></span></b><![endif]><b
-avast antivirus tech support phone number free in usa
+style='mso-bidi-font-weight:normal'>Put</b> &lt;encrypted-key-string&gt; &lt;key-id&gt;
-avast antivirus tech support number
+</p>
-avast antivirus tech support phone number
-avast antivirus technical support
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:.75in;mso-add-space:
-avast antivirus technical support number
+auto'>Return success/failure and the key-id.<span style='mso-spacerun:yes'>
-avast antivirus technical support phone number
+</span></p>
-avast antivirus toll free customer care number
-avast antivirus toll free number
+<p class=[[MsoListParagraphCxSpMiddle]]><o:p>&nbsp;</o:p></p>
-avast antivirus contact phone number in usa
-avast antivirus help desk phone number in usa
+<p class=[[MsoListParagraphCxSpMiddle]] style='margin-left:.75in;mso-add-space:
-avast antivirus phone number support for technical issue in usa
+auto;text-indent:-.25in;mso-list:l28 level1 lfo39'><![if !supportLists]><b
-avast antivirus support phone number
+style='mso-bidi-font-weight:normal'><span style='mso-bidi-font-family:Calibri;
-avast antivirus technical support help desk phone number
+mso-bidi-theme-font:minor-latin'><span style='mso-list:Ignore'>2.<span
-avast antivirus technical support phone number
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span></span></b><![endif]><b
-avast contact number
+style='mso-bidi-font-weight:normal'>Get &lt;key-id&gt;</b><span
-avast contact number usa
+style='mso-spacerun:yes'>   </span>returns the encrypted-key-string</p>
-avast contact phone number
-avast contact support
+<p class=[[MsoListParagraphCxSpLast]] style='margin-left:.75in;mso-add-space:auto;
-avast contact number usa
+text-indent:-.25in;mso-list:l28 level1 lfo39'><![if !supportLists]><b
-avast contact phone number
+style='mso-bidi-font-weight:normal'><span style='mso-bidi-font-family:Calibri;
-avast contact phone number usa
+mso-bidi-theme-font:minor-latin'><span style='mso-list:Ignore'>3.<span
-avast customer & technical support
+style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span></span></b><![endif]>Delete
-avast customer care
+&lt;key-id&gt;<span style='mso-spacerun:yes'>  </span>deletes the entry</p>
-avast customer care center
-avast customer care email
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
-avast customer care number
-avast customer care number
+<h3>Swift Changes</h3>
-avast customer care number usa
-avast customer care number usa toll free
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Put Path<o:p></o:p></b></p>
-avast customer care phone number usa
-avast customer care tchnical support
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l21 level1 lfo41'><![if !supportLists]><span
-avast customer care toll free
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast customer care toll free number
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast customer care usa
+</span></span></span><![endif]>If encryption is required, and the key string is
-avast customer help
+provided, it shall be used.</p>
-avast customer number
-avast customer portal
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l21 level1 lfo41'><![if !supportLists]><span
-avast customer service
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast customer service billing
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast customer service email address
+</span></span></span><![endif]>If no key string is provided, the system invokes
-avast customer service number
+create-key, and on success uses the random key-string generated to encrypt the
-avast customer service phone
+object and annotate it by way of <span class=GramE>meta</span> data with the
-avast customer service phone number
+encryption parameters including key-id. Create-key internally contacts
-avast customer service phone number us
+key-manager and saves the random key generated.</p>
-avast customer service phone number usa
-avast customer service reviews
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l21 level1 lfo41'><![if !supportLists]><span
-avast customer service telephone number
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast customer service usa
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast customer support
+</span></span></span><![endif]>If a key-string is provided, the key-manager is
-avast customer support number
+bypassed and instead before put is attempted, the object is first encrypted. It
-avast customer support phone
+is the responsibility of the get call to provide the appropriate decryption
-avast customer support phone number
+key.</p>
-avast customer service number
-avast customer service number usa
+<p class=[[MsoListParagraphCxSpLast]] style='text-indent:-.25in;mso-list:l21 level1 lfo41'><![if !supportLists]><span
-avast customer service phone number
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast customer support number
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast customer support phone number
+</span></span></span><![endif]>No change if encryption is not requested.</p>
-avast free phone support
-avast gold support phone number
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Get Path<o:p></o:p></b></p>
-avast help desk phone number
-avast help phone number
+<p class=[[MsoNormal]]><span style='mso-spacerun:yes'>           </span>If the
-avast helpline
+retrieved object indicates Encrypt=true, then the encryption related <span
-avast helpline phone number
+class=GramE>meta</span> data is used and the key-manger used to obtain the
-avast hotline customer service phone number
+encrypted key string used to encrypt the retrieved object and the information
-avast internet security customer service
+used accordingly.</p>
-avast internet security phone number
-avast internet security phone number in usa
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Delete Path<o:p></o:p></b></p>
-avast lab usa customer service
-avast labs usa customer serviceavast
+<p class=[[MsoNormal]] style='text-indent:.5in'>If each object has a distinct
-avast phone number
+encryption key, then when an object is deleted, the key-manager may also delete
-avast phone number customer service
+the string saved against key-id or IV-id. How should we indicate whether we are
-avast phone number support
+using a common key that must not be deleted?</p>
-avast phone number tech support
-avast phone number technical support
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>General remarks:<o:p></o:p></b></p>
-avast phone numbers customer support
-avast phone support
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l21 level1 lfo41'><![if !supportLists]><span
-avast phone support number
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast phone number customer service
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast phone number support
+</span></span></span><![endif]>Encryption occurs on Swift which typically is
-avast phone number tech support
+doing more IO than compute, so this would better exploit the hardware resources
-avast phone number usa
+on Swift.</p>
-avast security contact phone number
-avast security phone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l21 level1 lfo41'><![if !supportLists]><span
-avast security support phone number
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast software customer service
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast software customer service number
+</span></span></span><![endif]>Additional network traffic to chat with the Key
-avast support center
+Manager to store and retrieve keys. Keys could be cached in the Swift node
-avast support contact number
+memory.</p>
-avast support email address
-avast support phone number
+<p class=[[MsoListParagraphCxSpLast]] style='text-indent:-.25in;mso-list:l21 level1 lfo41'><![if !supportLists]><span
-avast support telephone number
+style='font-family:"Courier New";mso-fareast-font-family:"Courier New"'><span
-avast support number usa
+style='mso-list:Ignore'>o<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;
-avast support phone number
+</span></span></span><![endif]>SSL, HTTPS used for client communication with
-avast support phone number usa
+Swift is what protects the encryption key string in transit.</p>
-avast tech support
-avast tech support center
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'><o:p>&nbsp;</o:p></b></p>
-avast tech support contact
-avast tech support number
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
-avast tech support number usa
-avast tech support phone
+<h2>Concerns/Questions</h2>
-avast tech support phone number
-avast tech support phone number free
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast tech support number
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast tech support number usa
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast tech support phone number
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Data
-avast technical support
+transfer overhead</b>: Swift uses Rsync for file transfer during replication.
-avast technical support number
+Any encryption algorithm that uses some form of block cipher chaining or new
-avast technical support phone number
+initialization vector each time would result in the object representation
-avast technical support phone number usa
+changing drastically on each update. This would result in a larger network
-avast technical support reviews
+payload for transmission. </p>
-avast technical support usa
-avast technical support phone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast technical support number
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast technical support number toll free number
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast technical support number usa
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>More things
-avast technical support phone number
+that can fail</b>:<span style='mso-spacerun:yes'>  </span>With a key manager
-avast technical support phone number usa
+and an object storage system, there are two systems that can fail or be compromised,
-avast technologies phone number
+increasing the chance of things failing.</p>
-avast telephone number
-avast telephone support number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast toll free number
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast toll free number usa
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast usa customer care for tech support
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Unauthorized
-avast usa customer service
+key deletion</b>: If we use a Swift based system to storing keys and insert
-avast usa phone number
+tombstone records to mimic a legitimate deletion after breaking into a Swift
-avast antivirus customer service phone number
+storage node, yes, keys could indeed be deleted on a reaper task, but this
-avast antivirus customer service phone number
+would be no new security hazard from what Swift deals with today. Perhaps we
-avast antivirus customer support phone number
+could introduce a check that there was a logged request to delete a key before
-avast antivirus customer support phone number
+deleting a key.</p>
-avast antivirus technical support number
-avast customer service phone number usa
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast internet security support phone number
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast.com customer service
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast antivirus antispyware 2011
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Wary of
-avast antivirus customer support
+losing control of encryption key(s)</b>:<span style='mso-spacerun:yes'>
-avast antivirus serial key
+</span>Support the use case where the end user provides the encryption key (and
-avast antivirus serial number
+stores a copy of their own key, and is responsible for maintaining safety of
-avast antivirus support
+the key). The said key will not then be saved in the Key Manager.</p>
-avast antivirus technical support
-avast business support
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast contact support
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast customer care number
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast customer service 800
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Caching</b>:
-avast customer service number
+Should only cache encrypted data.</p>
-avast customer service phone number
-avast customer service telephone number
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast customer support
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast grentry non payment
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast helpline support number
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Snap
-avast internet security customer service
+shots</b>:<span style='mso-spacerun:yes'>  </span>Any standard mechanism is
-avast internet security technical support
+fine. No change necessary, data is encrypted.</p>
-avast oem customer service
-avast pc cillin technical support
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast phone support
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast removal tool download
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast subscription renewal
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Do we
-avast support contact
+need an IV (initialization vector) for each object <span class=GramE>encrypted<span
-avast support hotline
+style='font-weight:normal'>.</span></span></b> Yes, if we take the common key
-avast support phone number
+for a project or domain approach. In this case the IV would need to be
-avast tech support phone number
+encrypted, and could be stored against a key-id. We could specify compound-encryption
-avast technical support
+to imply use a master key in conjunction with the IV (accessed via the iv-id
-avast technical support chat
+attached to the object meta-data).</p>
-avast technical support phone number
-avast technical support phone number usa
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l23 level1 lfo17'><![if !supportLists]><span
-avast telephone number
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
-avast titanium antivirus
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-avast titanium internet security
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>No re-keying
-avast titanium maximum
+in phase-1. </b>Not addressing background tasks of object re-keying such as that
-avast titanium maximum security
+mentioned in Mirantis blog.</p>
-avast titanium problems
-avast titanium removal tool
+<p class=[[MsoListParagraphCxSpLast]]><o:p>&nbsp;</o:p></p>
-avast titanium reviews
-avast titanium support
+<h2>Implementation versions</h2>
-avast virus removal service
-uninstall avast smart surfing for mac
+<p class=[[MsoListParagraph]] style='text-indent:-.25in;mso-list:l39 level1 lfo23'><![if !supportLists]><span
-usa customer care number for avast antivirus
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Phase 1:</b>
+Develop stub Key Manager service and specify encryption parameters in the <span
+class=GramE>url</span>.</p>
+<p class=[[MsoNormal]] style='margin-left:.5in'>Key manager could just be a hash
+table in the first version to get all the APIs specified and implement, to get
+the plumbing correct. Support a single most popular encryption algorithm.</p>
+<p class=[[MsoNormal]] style='margin-left:.5in'>This would fully implement object
+encryption.</p>
+<p class=[[MsoListParagraphCxSpFirst]] style='text-indent:-.25in;mso-list:l39 level1 lfo23'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Phase-2</b>:
+Make Key Manager is Swift instance, with multiple zones for storage. This would
+support true HA and fault tolerance.</p>
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l39 level1 lfo23'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Phase-3</b>:
+Support multiple encryption algorithms. For instance, volume encryption may
+prefer XTS, an encryption strategy that uses sector address.</p>
+<p class=[[MsoListParagraphCxSpMiddle]] style='text-indent:-.25in;mso-list:l39 level1 lfo23'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]><b style='mso-bidi-font-weight:normal'>Phase</b>-4:
+Reaper routine to change a master key for a service</p>
+<p class=[[MsoListParagraphCxSpLast]]><o:p>&nbsp;</o:p></p>
+<h3>Intels Interest</h3>
+<p class=[[MsoNormal]]>Intel <span class=GramE>X86 hardware in <span class=SpellE>Westmere</span>
+and beyond</span> provides AES-NI, hardware support for encryption/decryption.
+These speed up encryption/decryption. Further, Intel provides open source
+libraries to speed computation further by parallelizing the operations (<span
+class=SpellE>multibuffer</span>) and interleaving them (function stitching).
+The references give pointers to white papers.</p>
+<p class=[[MsoNormal]]>Intel product generations are incorporating wider registers
+which enables further parallelization of <span class=GramE>cryptographic</span>
+operations.</p>
+<h2>Future</h2>
+<p class=[[MsoListParagraph]] style='text-indent:-.25in;mso-list:l12 level1 lfo15'><![if !supportLists]><span
+style='font-family:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:
+Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
+</span></span></span><![endif]>Store user encryption preferences such as default
+key string, size, and encryption algorithm, to be passed along with the
+authentication token and used by Swift during object insertion. This would
+reduce put URL request lengths, while yet allowing flexibility in algorithm
+selection.</p>
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
+<h2>Glossary</h2>
+<p class=[[MsoNormal]]><strong><span style='font-family:"Calibri","sans-serif";
+mso-ascii-theme-font:minor-latin;mso-hansi-theme-font:minor-latin;mso-bidi-font-family:
+"Times New Roman";mso-bidi-theme-font:minor-bidi'>Key-string</span></strong>:<span
+style='mso-spacerun:yes'>  </span>A string of bits used to encrypt data. Could
+be auto-generated or end-user provided.</p>
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Key-id</b>: a unique
+ID used to index a key-string in the system. The key-id will be attached as <span
+class=GramE>meta</span> data with the encrypted object.</p>
+<p class=[[MsoNormal]]><b style='mso-bidi-font-weight:normal'>Master-key</b>: a
+key-string used to encrypt the keys (key-strings) in the Key Manager</p>
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
+<h2>References</h2>
+<p class=[[MsoNormal]] style='margin-left:.25in'><a
+href="http://www.mirantis.com/blog/openstack-swift-encryption-architecture/">http://www.mirantis.com/blog/openstack-swift-encryption-architecture
+<span style='mso-field-code:" HYPERLINK \0022http\:\/\/www\.egnyte\.com\/blog\/2012\/05\/encryption-at-rest-in-egnyte-object-store-eos\.html\0022 "'>http://</span><span
+style='mso-field-code:" HYPERLINK \0022http\:\/\/www\.egnyte\.com\/blog\/2012\/05\/encryption-at-rest-in-egnyte-object-store-eos\.html\0022 "'>www.egnyte.com/blog/2012/05/encryption-at-rest-in-egnyte-object-store-eos.html</span>
+<span style='mso-ascii-font-family:Calibri;mso-hansi-font-family:Calibri;
+mso-bidi-font-family:Calibri;color:windowtext;text-decoration:none;text-underline:
+none'><span style='mso-field-code:" HYPERLINK \0022http\:\/\/en\.wikipedia\.org\/wiki\/CBC-MAC\0022 "'><u><span
+style='color:blue;mso-themecolor:hyperlink'>http://en.wikipedia.org/wiki/CBC-MAC</span></u></span><o:p></o:p></span></a></p>
+<p class=[[MsoNormal]] style='margin-left:.25in'><span style='mso-ascii-font-family:
+Calibri;mso-hansi-font-family:Calibri;mso-bidi-font-family:Calibri'><a
+href="http://www.mirantis.com/blog/openstack-swift-encryption-architecture/"><span
+style='color:windowtext;text-decoration:none;text-underline:none'><span
+style='mso-field-code:" HYPERLINK \0022http\:\/\/en\.wikipedia\.org\/wiki\/Advanced_Encryption_Standard\0022 "'><u><span
+style='color:blue;mso-themecolor:hyperlink'>http://en.wikipedia.org/wiki/Advanced_Encryption_Standard</span></u></span></span><span
+style='mso-ascii-font-family:Calibri;mso-ascii-theme-font:minor-latin;
+mso-hansi-font-family:Calibri;mso-hansi-theme-font:minor-latin;mso-bidi-font-family:
+"Times New Roman";mso-bidi-theme-font:minor-bidi'><o:p></o:p></span></a></span></p>
+<p class=[[MsoNormal]]><span style='mso-spacerun:yes'> </span><span
+style='mso-spacerun:yes'>      </span><a
+href="http://wiki.openstack.org/VolumeEncryption">http://wiki.openstack.org/VolumeEncryption</a></p>
+<p class=[[MsoNormal]] style='margin-left:.25in'>Fast Cryptographic computation on
+IA processors via Function <span class=GramE>Stitching<span
+style='mso-spacerun:yes'>  </span></span><a
+href="http://download.intel.com/design/intarch/PAPERS/323686.pdf">http://download.intel.com/design/intarch/PAPERS/323686.pdf</a><u>
+</u></p>
+<p class=[[MsoNormal]] style='margin-left:.25in'>Processing Multiple buffers in
+parallel <span class=GramE>- <span style='mso-spacerun:yes'> </span></span><a
+href="http://download.intel.com/design/intarch/papers/324101.pdf">http://download.intel.com/design/intarch/papers/324101.pdf</a><u>
+</u></p>
+<p class=[[MsoNormal]]><span style='mso-spacerun:yes'>       </span>XTS efficient
+implementation: <a
+href="http://download.intel.com/design/intarch/PAPERS/324310.pdf">http</a><a
+href="http://download.intel.com/design/intarch/PAPERS/324310.pdf"><span
+class=GramE>:/</span>/</a><a
+href="http://download.intel.com/design/intarch/PAPERS/324310.pdf">download.intel.com/design/intarch/PAPERS/324310.pdf</a></p>
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
+<p class=[[MsoNormal]]><o:p>&nbsp;</o:p></p>
+</div>
+</body>
+</html>

Difference between revisions of "ObjectEncryption.htm"

Latest revision as of 20:23, 12 August 2016

Contents

Object Encryption: Extending Swift

Security Model

Use Cases

Design Considerations

Swift API Changes (vx.1)

Key-Manager API (v 1.0)

Swift Changes

Concerns/Questions

Implementation versions

Intels Interest

Future

Glossary

References

Intels Interest