From d3e6b4e53f120b0b901c3ecc86ab43c71dd09b3c Mon Sep 17 00:00:00 2001
From: Patrik Simms <patrik.simms@esome.com>
Date: Sun, 16 Aug 2026 18:39:33 +0200
Subject: [PATCH] feat: accept passwords for encrypted OOXML files

Summary:
- decrypt password-protected OOXML before format detection and conversion
- expose optional passwords through Node, Python, wasm, and the CLI
- cover successful, missing, and incorrect password behavior with fixtures

Rationale:
- callers with a known password can now convert encrypted Office files
  without changing the existing behavior for callers without one
- explicit Rust variants preserve compatibility with existing signatures

Tests:
- cargo fmt --all --check
- cargo clippy --workspace --all-targets --all-features -- -D warnings
- cargo test --locked
- npm run build && npm test (node)
- maturin build --release --locked and Python unit tests

Closes #102

AI-Assisted: true
AI-Agent: codex
AI-Model: openai/gpt-5.6-sol
---
 Cargo.lock                                    | 150 +++++++++++++++++-
 Cargo.toml                                    |   1 +
 README.md                                     |   6 +
 node/README.md                                |   4 +
 node/cli.js                                   |  16 +-
 node/index.d.ts                               |   6 +-
 node/src/lib.rs                               |  36 ++++-
 node/test.mjs                                 |  19 +++
 python/README.md                              |   3 +
 python/anydoc/_anydoc.pyi                     |  14 +-
 python/src/lib.rs                             |  35 +++-
 python/tests/test_anydoc.py                   |   7 +
 src/lib.rs                                    |  82 +++++++++-
 tests/fixtures/encrypted/password-test.docx   | Bin 0 -> 25088 bytes
 tests/fixtures/encrypted/password-test.xlsx   | Bin 0 -> 15360 bytes
 tests/passwords.rs                            |  35 ++++
 ...pshots__encrypted__password-test.docx.snap |   5 +
 ...pshots__encrypted__password-test.xlsx.snap |   5 +
 wasm/README.md                                |   3 +
 wasm/src/lib.rs                               |  31 +++-
 wasm/test.mjs                                 |   6 +
 21 files changed, 426 insertions(+), 38 deletions(-)
 create mode 100644 tests/fixtures/encrypted/password-test.docx
 create mode 100644 tests/fixtures/encrypted/password-test.xlsx
 create mode 100644 tests/passwords.rs
 create mode 100644 tests/snapshots/snapshots__encrypted__password-test.docx.snap
 create mode 100644 tests/snapshots/snapshots__encrypted__password-test.xlsx.snap

diff --git a/Cargo.lock b/Cargo.lock
index a01c9140..7c92d79c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -98,8 +98,9 @@ dependencies = [
  "flate2",
  "insta",
  "log",
+ "office-crypto",
  "pdf-inspector",
- "quick-xml",
+ "quick-xml 0.41.0",
  "sha2 0.11.0",
  "zip",
 ]
@@ -150,6 +151,12 @@ version = "1.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
 
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
 [[package]]
 name = "bitflags"
 version = "1.3.2"
@@ -162,6 +169,18 @@ version = "2.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
 
+[[package]]
+name = "bitvec"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddcec3d12c579d40898fe0a9a358a803c23e9c52ca3c425707f81c9436211837"
+dependencies = [
+ "funty",
+ "radium",
+ "tap",
+ "wyz",
+]
+
 [[package]]
 name = "block-buffer"
 version = "0.10.4"
@@ -195,6 +214,12 @@ version = "3.20.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
 
+[[package]]
+name = "bytemuck"
+version = "1.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95832e849adfb21180ccb6826a99da14e5d266ae5c2e668e1602cf234f153797"
+
 [[package]]
 name = "byteorder"
 version = "1.5.0"
@@ -214,7 +239,7 @@ dependencies = [
  "encoding_rs",
  "fast-float2",
  "log",
- "quick-xml",
+ "quick-xml 0.41.0",
  "serde",
  "zip",
 ]
@@ -476,6 +501,17 @@ version = "0.5.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
 
+[[package]]
+name = "derivative"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fcc3dd5e9e9c0b295d6e1e4d811fb6f157d5ffd784b8d202fc62eac8035a770b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
 [[package]]
 name = "digest"
 version = "0.10.7"
@@ -601,6 +637,12 @@ version = "1.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
 
+[[package]]
+name = "funty"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
+
 [[package]]
 name = "futures"
 version = "0.3.33"
@@ -1057,6 +1099,27 @@ dependencies = [
  "autocfg",
 ]
 
+[[package]]
+name = "office-crypto"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c87c499d4091b8d0d311968583456b45fb127bc30f75ed0170727e6440b8a091"
+dependencies = [
+ "aes",
+ "base64",
+ "bytemuck",
+ "cbc",
+ "derivative",
+ "ecb",
+ "md-5",
+ "packed_struct",
+ "quick-xml 0.38.4",
+ "rc4",
+ "sha1",
+ "sha2 0.10.9",
+ "thiserror",
+]
+
 [[package]]
 name = "once_cell"
 version = "1.21.4"
@@ -1069,6 +1132,28 @@ version = "1.70.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
 
+[[package]]
+name = "packed_struct"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "36b29691432cc9eff8b282278473b63df73bea49bc3ec5e67f31a3ae9c3ec190"
+dependencies = [
+ "bitvec",
+ "packed_struct_codegen",
+ "serde",
+]
+
+[[package]]
+name = "packed_struct_codegen"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cd6706dfe50d53e0f6aa09e12c034c44faacd23e966ae5a209e8bdb8f179f98"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
 [[package]]
 name = "pdf-inspector"
 version = "1.14.2"
@@ -1180,6 +1265,15 @@ dependencies = [
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "quick-xml"
+version = "0.38.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66c2058c55a409d601666cffe35f04333cf1013010882cec174a7467cd4e21c"
+dependencies = [
+ "memchr",
+]
+
 [[package]]
 name = "quick-xml"
 version = "0.41.0"
@@ -1205,6 +1299,12 @@ version = "6.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
+[[package]]
+name = "radium"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
+
 [[package]]
 name = "rand"
 version = "0.10.2"
@@ -1248,6 +1348,15 @@ dependencies = [
  "crossbeam-utils",
 ]
 
+[[package]]
+name = "rc4"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f1256e23efe6097f27aa82d6ca6889361c001586ae0f6917cbad072f05eb275"
+dependencies = [
+ "cipher",
+]
+
 [[package]]
 name = "regex"
 version = "1.13.1"
@@ -1365,6 +1474,17 @@ dependencies = [
  "syn 3.0.3",
 ]
 
+[[package]]
+name = "sha1"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a978451301f4db1d02937a4ab3ccce137717b81826e79b7d49ffe3244a13c3b8"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest 0.10.7",
+]
+
 [[package]]
 name = "sha2"
 version = "0.10.9"
@@ -1422,6 +1542,17 @@ dependencies = [
  "unicode-properties",
 ]
 
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
 [[package]]
 name = "syn"
 version = "2.0.119"
@@ -1444,6 +1575,12 @@ dependencies = [
  "unicode-ident",
 ]
 
+[[package]]
+name = "tap"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
+
 [[package]]
 name = "target-lexicon"
 version = "0.13.5"
@@ -1730,6 +1867,15 @@ dependencies = [
  "windows-link",
 ]
 
+[[package]]
+name = "wyz"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
+dependencies = [
+ "tap",
+]
+
 [[package]]
 name = "zip"
 version = "8.6.0"
diff --git a/Cargo.toml b/Cargo.toml
index 04ed82f8..7440340b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -28,6 +28,7 @@ csv = "1.4.0"
 flate2 = "1"
 encoding_rs = "0.8.35"
 log = "0.4"
+office-crypto = "0.3.0"
 pdf-inspector = "1.14.2"
 quick-xml = "0.41.0"
 zip = { version = "8.6.0", default-features = false, features = ["deflate"] }
diff --git a/README.md b/README.md
index ed4cb9e4..f48a64d8 100644
--- a/README.md
+++ b/README.md
@@ -76,6 +76,9 @@ markdown = anydoc.to_markdown_bytes(data)
 # Or name it, which signature-less formats (CSV) need:
 markdown = anydoc.to_markdown_bytes(data, "csv")
 
+# Password-protected OOXML
+markdown = anydoc.to_markdown_bytes(data, password="secret")
+
 # Or stop at the document model, which also carries embedded assets:
 document = anydoc.to_document(data)
 ```
@@ -121,6 +124,9 @@ let markdown = anydoc::to_markdown_bytes(&bytes, None)?;
 // Or name it, which signature-less formats (CSV) need:
 let markdown = anydoc::to_markdown_bytes(&bytes, anydoc::Format::Csv)?;
 
+// Password-protected OOXML
+let markdown = anydoc::to_markdown_bytes_with_password(&bytes, None, "secret")?;
+
 // Or stop at the document model, which also carries embedded assets:
 let document = anydoc::to_document(&bytes, None)?;
 ```
diff --git a/node/README.md b/node/README.md
index 5263150f..38468487 100644
--- a/node/README.md
+++ b/node/README.md
@@ -32,8 +32,12 @@ The package ships an `anydoc` command, so `npx` converts a document with no inst
 npx @firecrawl/anydoc report.docx               # Markdown to stdout
 npx @firecrawl/anydoc slides.pptx -o slides.md  # or to a file
 npx @firecrawl/anydoc - --format csv < data.csv # read stdin
+npx @firecrawl/anydoc report.docx --password secret
 ```
 
+Set `ANYDOC_PASSWORD` instead of using `--password` when the password should
+not appear in shell history or the process list.
+
 Markdown goes to stdout, errors to stderr, and `anydoc --help` covers the rest.
 
 ## Usage
diff --git a/node/cli.js b/node/cli.js
index bfba762a..e662cc4d 100644
--- a/node/cli.js
+++ b/node/cli.js
@@ -13,7 +13,7 @@ Usage:
 
 Converts one document per invocation and writes the Markdown to stdout.
 Pass - as the input to read the document from stdin. Never prompts; all
-diagnostics go to stderr.
+diagnostics go to stderr. ANYDOC_PASSWORD is used when --password is omitted.
 
 Options:
   -o, --output <path>    Write the Markdown to <path> instead of stdout
@@ -21,6 +21,7 @@ Options:
                          ${FORMATS}
                          (extension aliases like xls, docm, ppsx resolve
                          to these)
+  -p, --password <value> Decrypt a password-protected OOXML document
   -h, --help             Print this help and exit
   -V, --version          Print the version and exit
 
@@ -50,7 +51,7 @@ function fail(code, message) {
 }
 
 function parseArgs(argv) {
-  const args = { input: null, output: null, format: null }
+  const args = { input: null, output: null, format: null, password: null }
   let positionalOnly = false
   for (let i = 0; i < argv.length; i++) {
     let arg = argv[i]
@@ -95,6 +96,10 @@ function parseArgs(argv) {
       case '--format':
         args.format = value()
         break
+      case '-p':
+      case '--password':
+        args.password = value()
+        break
       default:
         fail(USAGE_ERROR, `unknown option '${arg}' (see anydoc --help)`)
     }
@@ -133,12 +138,13 @@ async function main() {
 
   let markdown
   try {
+    const password = args.password ?? process.env.ANYDOC_PASSWORD
     if (args.input === '-') {
-      markdown = await toMarkdownBytes(await readStdin(), format)
+      markdown = await toMarkdownBytes(await readStdin(), format, password)
     } else if (format !== undefined) {
-      markdown = await toMarkdownBytes(await readFile(args.input), format)
+      markdown = await toMarkdownBytes(await readFile(args.input), format, password)
     } else {
-      markdown = await toMarkdown(args.input)
+      markdown = await toMarkdown(args.input, password)
     }
   } catch (error) {
     fail(CONVERSION_ERROR, error.message)
diff --git a/node/index.d.ts b/node/index.d.ts
index 27ceba0a..73ecbfd0 100644
--- a/node/index.d.ts
+++ b/node/index.d.ts
@@ -271,7 +271,7 @@ export declare const enum TableKind {
  *
  * Rejects with an `Error` carrying a `ConvertErrorCode` on `code`.
  */
-export declare function toDocument(bytes: Uint8Array, format?: Format | undefined | null): Promise<Document>
+export declare function toDocument(bytes: Uint8Array, format?: Format | undefined | null, password?: string | undefined | null): Promise<Document>
 
 /**
  * Convert a document file to Markdown. The format is detected from the file
@@ -281,7 +281,7 @@ export declare function toDocument(bytes: Uint8Array, format?: Format | undefine
  * Rejects with an `Error` carrying a `ConvertErrorCode` on `code`; a file
  * that cannot be read is `'io'`.
  */
-export declare function toMarkdown(path: string): Promise<string>
+export declare function toMarkdown(path: string, password?: string | undefined | null): Promise<string>
 
 /**
  * Convert an in-memory document to Markdown. Without a format, it is
@@ -290,4 +290,4 @@ export declare function toMarkdown(path: string): Promise<string>
  *
  * Rejects with an `Error` carrying a `ConvertErrorCode` on `code`.
  */
-export declare function toMarkdownBytes(bytes: Uint8Array, format?: Format | undefined | null): Promise<string>
+export declare function toMarkdownBytes(bytes: Uint8Array, format?: Format | undefined | null, password?: string | undefined | null): Promise<string>
diff --git a/node/src/lib.rs b/node/src/lib.rs
index 01df83a7..edb7bc1d 100644
--- a/node/src/lib.rs
+++ b/node/src/lib.rs
@@ -97,8 +97,8 @@ pub fn format_from_path(path: String) -> Option<Format> {
 /// Rejects with an `Error` carrying a `ConvertErrorCode` on `code`; a file
 /// that cannot be read is `'io'`.
 #[napi(ts_return_type = "Promise<string>")]
-pub fn to_markdown(path: String) -> AsyncTask<MarkdownFileTask> {
-    AsyncTask::new(MarkdownFileTask { path, failure: Failure::default() })
+pub fn to_markdown(path: String, password: Option<String>) -> AsyncTask<MarkdownFileTask> {
+    AsyncTask::new(MarkdownFileTask { path, password, failure: Failure::default() })
 }
 
 /// Convert an in-memory document to Markdown. Without a format, it is
@@ -110,10 +110,12 @@ pub fn to_markdown(path: String) -> AsyncTask<MarkdownFileTask> {
 pub fn to_markdown_bytes(
     bytes: Uint8Array,
     format: Option<Format>,
+    password: Option<String>,
 ) -> AsyncTask<MarkdownBytesTask> {
     AsyncTask::new(MarkdownBytesTask {
         bytes: bytes.to_vec(),
         format: format.map(Into::into),
+        password,
         failure: Failure::default(),
     })
 }
@@ -126,10 +128,15 @@ pub fn to_markdown_bytes(
 ///
 /// Rejects with an `Error` carrying a `ConvertErrorCode` on `code`.
 #[napi(ts_return_type = "Promise<Document>")]
-pub fn to_document(bytes: Uint8Array, format: Option<Format>) -> AsyncTask<DocumentTask> {
+pub fn to_document(
+    bytes: Uint8Array,
+    format: Option<Format>,
+    password: Option<String>,
+) -> AsyncTask<DocumentTask> {
     AsyncTask::new(DocumentTask {
         bytes: bytes.to_vec(),
         format: format.map(Into::into),
+        password,
         failure: Failure::default(),
     })
 }
@@ -162,6 +169,7 @@ impl Failure {
 
 pub struct MarkdownFileTask {
     path: String,
+    password: Option<String>,
     failure: Failure,
 }
 
@@ -170,7 +178,11 @@ impl Task for MarkdownFileTask {
     type JsValue = String;
 
     fn compute(&mut self) -> Result<Self::Output> {
-        anydoc::to_markdown(&self.path).map_err(|e| self.failure.capture(e))
+        match self.password.as_deref() {
+            Some(password) => anydoc::to_markdown_with_password(&self.path, password),
+            None => anydoc::to_markdown(&self.path),
+        }
+        .map_err(|e| self.failure.capture(e))
     }
 
     fn resolve(&mut self, _env: Env, output: Self::Output) -> Result<Self::JsValue> {
@@ -185,6 +197,7 @@ impl Task for MarkdownFileTask {
 pub struct MarkdownBytesTask {
     bytes: Vec<u8>,
     format: Option<anydoc::Format>,
+    password: Option<String>,
     failure: Failure,
 }
 
@@ -193,7 +206,13 @@ impl Task for MarkdownBytesTask {
     type JsValue = String;
 
     fn compute(&mut self) -> Result<Self::Output> {
-        anydoc::to_markdown_bytes(&self.bytes, self.format).map_err(|e| self.failure.capture(e))
+        match self.password.as_deref() {
+            Some(password) => {
+                anydoc::to_markdown_bytes_with_password(&self.bytes, self.format, password)
+            }
+            None => anydoc::to_markdown_bytes(&self.bytes, self.format),
+        }
+        .map_err(|e| self.failure.capture(e))
     }
 
     fn resolve(&mut self, _env: Env, output: Self::Output) -> Result<Self::JsValue> {
@@ -208,6 +227,7 @@ impl Task for MarkdownBytesTask {
 pub struct DocumentTask {
     bytes: Vec<u8>,
     format: Option<anydoc::Format>,
+    password: Option<String>,
     failure: Failure,
 }
 
@@ -216,7 +236,11 @@ impl Task for DocumentTask {
     type JsValue = Document;
 
     fn compute(&mut self) -> Result<Self::Output> {
-        anydoc::to_document(&self.bytes, self.format).map_err(|e| self.failure.capture(e))
+        match self.password.as_deref() {
+            Some(password) => anydoc::to_document_with_password(&self.bytes, self.format, password),
+            None => anydoc::to_document(&self.bytes, self.format),
+        }
+        .map_err(|e| self.failure.capture(e))
     }
 
     fn resolve(&mut self, _env: Env, output: Self::Output) -> Result<Self::JsValue> {
diff --git a/node/test.mjs b/node/test.mjs
index ec98a3c6..83e33426 100644
--- a/node/test.mjs
+++ b/node/test.mjs
@@ -23,6 +23,7 @@ const OUTLINE = fixture('docx/handmade-outline.docx')
 const RICH = fixture('docx/handmade-rich.docx')
 const CSV = fixture('csv/sheet.csv')
 const ENCRYPTED = fixture('malformed/encrypted--errors.odt')
+const ENCRYPTED_DOCX = fixture('encrypted/password-test.docx')
 
 test('toMarkdown detects the format from the file content', async () => {
   const markdown = await toMarkdown(OUTLINE)
@@ -34,6 +35,12 @@ test('toMarkdownBytes converts in memory', async () => {
   assert.match(markdown, /\| Quarter \| Widgets \|/)
 })
 
+test('password-protected OOXML converts with the password', async () => {
+  const bytes = await readFile(ENCRYPTED_DOCX)
+  assert.ok((await toMarkdownBytes(bytes, undefined, 'testPassword')).length > 0)
+  await assert.rejects(toMarkdownBytes(bytes, undefined, 'wrong'), { code: 'encrypted' })
+})
+
 test('toMarkdownBytes detects the format when none is named', async () => {
   const markdown = await toMarkdownBytes(await readFile(RICH))
   assert.match(markdown, /\| Quarter \| Widgets \|/)
@@ -118,6 +125,18 @@ test('cli reads stdin with an explicit format', async () => {
   assert.match(stdout, /\| --- \|/)
 })
 
+test('cli decrypts OOXML with an argument or environment password', async () => {
+  const fromArgument = await runCli([ENCRYPTED_DOCX, '--password', 'testPassword'])
+  assert.equal(fromArgument.code, undefined)
+  assert.ok(fromArgument.stdout.length > 0)
+
+  const fromEnvironment = await runCli([ENCRYPTED_DOCX], {
+    env: { ...process.env, ANYDOC_PASSWORD: 'testPassword' },
+  })
+  assert.equal(fromEnvironment.code, undefined)
+  assert.ok(fromEnvironment.stdout.length > 0)
+})
+
 test('cli exits 1 when the document cannot be converted', async () => {
   const { code, stderr } = await runCli(['no-such-file.docx'])
   assert.equal(code, 1)
diff --git a/python/README.md b/python/README.md
index fa979712..c67e19a4 100644
--- a/python/README.md
+++ b/python/README.md
@@ -40,6 +40,9 @@ markdown = anydoc.to_markdown_bytes(data)
 # Or name it, which signature-less formats (CSV) need:
 markdown = anydoc.to_markdown_bytes(data, "csv")
 
+# Password-protected OOXML
+markdown = anydoc.to_markdown_bytes(data, password="secret")
+
 # Or stop at the document model, which also carries embedded assets:
 document = anydoc.to_document(data)
 ```
diff --git a/python/anydoc/_anydoc.pyi b/python/anydoc/_anydoc.pyi
index 19dadbad..25c4bbcb 100644
--- a/python/anydoc/_anydoc.pyi
+++ b/python/anydoc/_anydoc.pyi
@@ -53,17 +53,25 @@ def format_from_extension(extension: str) -> Format | None:
 def format_from_path(path: str | os.PathLike[str]) -> Format | None:
     """The format a path's extension names."""
 
-def to_markdown(path: str | os.PathLike[str]) -> str:
+def to_markdown(path: str | os.PathLike[str], password: str | None = None) -> str:
     """Convert a document file to Markdown. The format is detected from the
     file content; the extension is the fallback for signature-less formats
     (CSV) and unrecognizable containers."""
 
-def to_markdown_bytes(data: bytes | bytearray, format: Format | None = None) -> str:
+def to_markdown_bytes(
+    data: bytes | bytearray,
+    format: Format | None = None,
+    password: str | None = None,
+) -> str:
     """Convert an in-memory document to Markdown. Without a format, it is
     detected from the content, which signature-less formats (CSV) have to
     name explicitly."""
 
-def to_document(data: bytes | bytearray, format: Format | None = None) -> Document:
+def to_document(
+    data: bytes | bytearray,
+    format: Format | None = None,
+    password: str | None = None,
+) -> Document:
     """Parse an in-memory document into the document model, which also
     carries the embedded assets. Without a format, it is detected from the
     content.
diff --git a/python/src/lib.rs b/python/src/lib.rs
index abcbbd62..cc754d33 100644
--- a/python/src/lib.rs
+++ b/python/src/lib.rs
@@ -150,18 +150,32 @@ fn format_from_path(path: PathBuf) -> Option<&'static str> {
 /// content; the extension is the fallback for signature-less formats (CSV)
 /// and unrecognizable containers.
 #[pyfunction]
-fn to_markdown(py: Python<'_>, path: PathBuf) -> PyResult<String> {
-    py.detach(|| anydoc::to_markdown(&path)).map_err(|e| convert_error(py, e))
+#[pyo3(signature = (path, password=None))]
+fn to_markdown(py: Python<'_>, path: PathBuf, password: Option<&str>) -> PyResult<String> {
+    py.detach(|| match password {
+        Some(password) => anydoc::to_markdown_with_password(&path, password),
+        None => anydoc::to_markdown(&path),
+    })
+    .map_err(|e| convert_error(py, e))
 }
 
 /// Convert an in-memory document to Markdown. Without a format, it is
 /// detected from the content, which signature-less formats (CSV) have to name
 /// explicitly.
 #[pyfunction]
-#[pyo3(signature = (data, format=None))]
-fn to_markdown_bytes(py: Python<'_>, data: Vec<u8>, format: Option<&str>) -> PyResult<String> {
+#[pyo3(signature = (data, format=None, password=None))]
+fn to_markdown_bytes(
+    py: Python<'_>,
+    data: Vec<u8>,
+    format: Option<&str>,
+    password: Option<&str>,
+) -> PyResult<String> {
     let format = format.map(parse_format).transpose()?;
-    py.detach(|| anydoc::to_markdown_bytes(&data, format)).map_err(|e| convert_error(py, e))
+    py.detach(|| match password {
+        Some(password) => anydoc::to_markdown_bytes_with_password(&data, format, password),
+        None => anydoc::to_markdown_bytes(&data, format),
+    })
+    .map_err(|e| convert_error(py, e))
 }
 
 /// Parse an in-memory document into the document model, which also carries
@@ -170,15 +184,20 @@ fn to_markdown_bytes(py: Python<'_>, data: Vec<u8>, format: Option<&str>) -> PyR
 /// Unsupported for `pdf`: PDF conversion produces Markdown directly and has
 /// no document-model form; use `to_markdown_bytes`.
 #[pyfunction]
-#[pyo3(signature = (data, format=None))]
+#[pyo3(signature = (data, format=None, password=None))]
 fn to_document(
     py: Python<'_>,
     data: Vec<u8>,
     format: Option<&str>,
+    password: Option<&str>,
 ) -> PyResult<document::Document> {
     let format = format.map(parse_format).transpose()?;
-    let parsed =
-        py.detach(|| anydoc::to_document(&data, format)).map_err(|e| convert_error(py, e))?;
+    let parsed = py
+        .detach(|| match password {
+            Some(password) => anydoc::to_document_with_password(&data, format, password),
+            None => anydoc::to_document(&data, format),
+        })
+        .map_err(|e| convert_error(py, e))?;
     document::document(py, parsed)
 }
 
diff --git a/python/tests/test_anydoc.py b/python/tests/test_anydoc.py
index 1328d44a..8b9324c2 100644
--- a/python/tests/test_anydoc.py
+++ b/python/tests/test_anydoc.py
@@ -13,6 +13,7 @@
 RICH = FIXTURES / "docx" / "handmade-rich.docx"
 CSV = FIXTURES / "csv" / "sheet.csv"
 ENCRYPTED = FIXTURES / "malformed" / "encrypted--errors.odt"
+ENCRYPTED_DOCX = FIXTURES / "encrypted" / "password-test.docx"
 ZIPBOMB = FIXTURES / "abuse" / "zipbomb--errors.docx"
 
 
@@ -25,6 +26,12 @@ def test_to_markdown_bytes_converts_in_memory(self):
         markdown = anydoc.to_markdown_bytes(RICH.read_bytes(), "docx")
         self.assertIn("| Quarter | Widgets |", markdown)
 
+    def test_password_protected_ooxml_converts_with_the_password(self):
+        data = ENCRYPTED_DOCX.read_bytes()
+        self.assertTrue(anydoc.to_markdown_bytes(data, password="testPassword"))
+        with self.assertRaises(anydoc.EncryptedError):
+            anydoc.to_markdown_bytes(data, password="wrong")
+
     def test_to_markdown_bytes_detects_the_format_when_none_is_named(self):
         markdown = anydoc.to_markdown_bytes(RICH.read_bytes())
         self.assertIn("| Quarter | Widgets |", markdown)
diff --git a/src/lib.rs b/src/lib.rs
index efba6ff8..858bd077 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -18,6 +18,7 @@ pub use error::ConvertError;
 
 use render::markdown::document_to_markdown;
 
+use std::borrow::Cow;
 use std::path::Path;
 
 /// Input format. Selects the parser; container variants that share a parser
@@ -98,7 +99,19 @@ impl Format {
 /// file content ([`Format::from_bytes`]); the extension is the fallback for
 /// signature-less formats (CSV) and unrecognizable containers.
 pub fn to_markdown(path: impl AsRef<Path>) -> Result<String, ConvertError> {
-    let path = path.as_ref();
+    to_markdown_path(path.as_ref(), None)
+}
+
+/// Convert a password-protected document file to Markdown. The password is
+/// used only when the input is an encrypted OOXML package.
+pub fn to_markdown_with_password(
+    path: impl AsRef<Path>,
+    password: &str,
+) -> Result<String, ConvertError> {
+    to_markdown_path(path.as_ref(), Some(password))
+}
+
+fn to_markdown_path(path: &Path, password: Option<&str>) -> Result<String, ConvertError> {
     let bytes = std::fs::read(path)?;
     let Some(format) = Format::from_bytes(&bytes).or_else(|| Format::from_path(path)) else {
         return Err(ConvertError::Unsupported(format!(
@@ -106,7 +119,7 @@ pub fn to_markdown(path: impl AsRef<Path>) -> Result<String, ConvertError> {
             path.display()
         )));
     };
-    to_markdown_bytes(&bytes, format)
+    to_markdown_bytes_impl(&bytes, Some(format), password)
 }
 
 /// Convert an in-memory document to Markdown. Pass a [`Format`] to select the
@@ -116,13 +129,31 @@ pub fn to_markdown_bytes(
     bytes: &[u8],
     format: impl Into<Option<Format>>,
 ) -> Result<String, ConvertError> {
-    let format = resolve_format(bytes, format.into())?;
+    to_markdown_bytes_impl(bytes, format.into(), None)
+}
+
+/// Convert an in-memory document to Markdown, decrypting an encrypted OOXML
+/// package with `password` before detecting and parsing its inner format.
+pub fn to_markdown_bytes_with_password(
+    bytes: &[u8],
+    format: impl Into<Option<Format>>,
+    password: &str,
+) -> Result<String, ConvertError> {
+    to_markdown_bytes_impl(bytes, format.into(), Some(password))
+}
+
+fn to_markdown_bytes_impl(
+    bytes: &[u8],
+    format: Option<Format>,
+    password: Option<&str>,
+) -> Result<String, ConvertError> {
+    let (bytes, format) = prepare_input(bytes, format, password)?;
     // PDFs convert to Markdown directly (pdf-inspector) without passing
     // through the document model.
     if format == Format::Pdf {
-        return formats::pdf::to_markdown(bytes);
+        return formats::pdf::to_markdown(&bytes);
     }
-    Ok(document_to_markdown(&to_document(bytes, format)?))
+    Ok(document_to_markdown(&formats::parse(&bytes, format)?))
 }
 
 /// Parse an in-memory document into the document model. Pass a [`Format`] to
@@ -134,7 +165,46 @@ pub fn to_document(
     bytes: &[u8],
     format: impl Into<Option<Format>>,
 ) -> Result<model::Document, ConvertError> {
-    formats::parse(bytes, resolve_format(bytes, format.into())?)
+    to_document_impl(bytes, format.into(), None)
+}
+
+/// Parse an in-memory document into the document model, decrypting an
+/// encrypted OOXML package with `password` first.
+pub fn to_document_with_password(
+    bytes: &[u8],
+    format: impl Into<Option<Format>>,
+    password: &str,
+) -> Result<model::Document, ConvertError> {
+    to_document_impl(bytes, format.into(), Some(password))
+}
+
+fn to_document_impl(
+    bytes: &[u8],
+    format: Option<Format>,
+    password: Option<&str>,
+) -> Result<model::Document, ConvertError> {
+    let (bytes, format) = prepare_input(bytes, format, password)?;
+    formats::parse(&bytes, format)
+}
+
+fn prepare_input<'a>(
+    bytes: &'a [u8],
+    format: Option<Format>,
+    password: Option<&str>,
+) -> Result<(Cow<'a, [u8]>, Format), ConvertError> {
+    if matches!(package::archive::probe_ole(bytes), Some(ConvertError::Encrypted)) {
+        let Some(password) = password else {
+            return Err(ConvertError::Encrypted);
+        };
+        let decrypted = office_crypto::decrypt_from_bytes(bytes.to_vec(), password)
+            .map_err(|_| ConvertError::Encrypted)?;
+        let Some(format) = Format::from_bytes(&decrypted) else {
+            return Err(ConvertError::Encrypted);
+        };
+        return Ok((Cow::Owned(decrypted), format));
+    }
+
+    Ok((Cow::Borrowed(bytes), resolve_format(bytes, format)?))
 }
 
 fn resolve_format(bytes: &[u8], format: Option<Format>) -> Result<Format, ConvertError> {
diff --git a/tests/fixtures/encrypted/password-test.docx b/tests/fixtures/encrypted/password-test.docx
new file mode 100644
index 0000000000000000000000000000000000000000..757c285fc27d9b16ad6d4eb7d82c68afe8fd1038
GIT binary patch
literal 25088
zcmeFYWpo@tvL-5Ki<!w{W{Vjti`in9EM{hA$zo<^iy19uW@cuFZOx2#XZOzAnR|DC
zym#J2pRY12AtEv&GP1h*^u##QMs_v!CeZ&vyg;BpZ|~4R5P#PW3aA7Bxkm&70{Pqh
z+xz?bpJqrv1quK_)4%Ee0~UA%=m-Yz*M|>3d=37$Ivt?===%T+pbiTF8~~pHfCm5p
z06+);Apw94015!80H6VY4gdxKm;hh_fDHf+0Js3)0e}wx0RV&m5CK3800{u30DK03
z3;=QfC;*@YfC>O=0B8W91>i$h`oEQc>c8p#zyk6>R)CK^z!xGwmVnY0$OT~8f1S_)
z5%Wj<N1Xics7f7YV~A=I_#=;ae<TV3eMr^+i&SfXbVDEmAXy+?K#LjRY7DslXG9Fh
zLVx6cl>cn}M?W+G!4iKR2>~PwkYo>l0+97zBpU+R{k7{~x?%z{;ve}R`{*ChhB(w;
z)(w>SxAN}>DFfDM3y^3E@Pg&vwg0PCL?960Kl1<8^?&gG_BR0^`TS!)efZ>~{F4X%
z<nfRD|J(cjgXh2L{~Z?K2KZeH5Pcte&<YTTRzOC8-9QH<^p|-2*cYaNxcrDwx_`J+
zKH}#O0M-9AeLO3C%s2U4`N4n?fPa=3m;hrG{*tdg_KorXGXAf-=|Aplz@-0${>cAV
z_$dOcpbL;@2e6S9pl$)+r3%1@{vZ3v4M-I5`2r*W#0)4I09RTdRv<QjZlZu13!ujM
zmo`CwC4~V!AH4#Ac1D1;838Q}K<q$Fe;MZiBn{yAulnVGw$)$P{*QG1<EM}E5B*0Q
zNdeYq{ipk%me_#&^N~9~o*O<Q`kzh!4ET6%{3GE%%9j9G_`|;c8sP!~|0Vx@<g34b
zR{i_g7gm4GyMM~R@B2TEA(sC_{{1*7`2VKFfArITdj0?X{P~FGe?<R%-T&bH`Dg3@
zkNW-35?KCb{}11PoU8wc{&(^r0O!3eAjen$qV7NY?C~KB`M+TQk60b}o1*_{@BC*x
zfDe%W=X=n<8vh@5g8oqA{}O%3{X_p1mj6%BE&mEHFd(qM#4<OZvxPaKqoJ*xsg)%U
zF(VxVF`=QQzLkNgr7;h&lA<Ur2Qi_Yy{@H!uDO+^ArG;Op&c<F?<W{;z$jZ6YkR;n
zLI4X(J04;adwXk6dU`v36GIDKJ30$feOoI#D<gY4eJcxkD<dOQeM5RC1_n0z|1p*L
zuX8!A{}Z##3|&P2D%;AI-dfkr&dJKw;147H|0*MWLtA@OfQq{IhQz$w02#u%_PT_2
zy5{x@rmlc>GqMpA>X}>VoBfYlz#u_Wd%(h(SOJ|Tx^^ai?PFshCe$~zHZimnFgLcc
zHMKXf;2{<eQTWp;WTI<o`4{{CsYzKG7zzmr{guhzO;QjSU}a<iH~^rAvaY!UKo2z&
z1~vsLxj%99@ABUk__qcA|7QX3zkLt>)nvA+T%l_FNk;G3^DN#K9SKR*B%|JnZy;!j
zmIbSor01O552AJ5M6pa@fUN60o25gr%z*dD9^wSrU=%evG`Faivz?azi<pGceZZ%!
zZn{|;yg)LBZLHUrU0dW{(Ovy+v7$A29T>{vN+>%Ua~GtbW{TkJ86&(4C@N#Oj*V6X
zC?rw*;n9BBYS-8DD>%nuA{e<-Hh23ngF;QHUqR1u7SS}!(eJCC+3WdBH$ID_1n+P(
z)4X#_T+eL!rFf+#bTehcof<kQ*R;oo$)NTs7V)Cr=h2RKUC*T3qy=c;t1OUm^!JXM
zU$!&M{4`DSz@ud_M?<~E@wEwRAPumQj^CqH6tdvnzjzCD*3QRrdvZLY_>pH!)1-AV
z>sU=*#SVaIs@N`KVY#yEp9;BF`9AvwO0!`w_6|>q!+~8?kvv#bGoM?$5C+}Ioy0k)
zO;d?{u@)9%$mD^~tTm`S`kkoe*FtfkH85ZHig!ieaA0Z(Rt)Mo{3L)*+TlX>rU|NO
zc5}DAOU+3SNl#uxK}RAnzJ0zN>SaM5z~!r@ori}<Jri^bMOjc|1ph{X(82JM^g=)S
zXc;M6#(C!#PU=(0faodE+fMtF8P2xctkICN9c#<1Suc{M^idrGNyTWu6IK(ySuK!V
zIEt4VjB>D4D~z$((?c!*NPCmtxF#U!4&&9AVok3U-V`$xa`C?FC^S-76-&O$_%ZpG
zw`)T^$E*A_FH%G9VO%J2=6I2JV2utn$-C!S;A=oT)xv;?*?X%zP_MpW0D;wJ-wlwq
zi~!?>j}!-g`TCCbK!h7e-7BT`kZ*>yE2c+D9R4(tP?8PL<FUMg+FKX&B*z?8E>2b0
zw_AxQ9@-tto@@(rp<ZJCFi1soYa9eG!I?8E1Ot0#oW_BRA9}izKbrNjV57b>Bp4|o
zEMfA6WQ!Q{2eB@)6n}R-kC>B^yPlWZWYsWStCI&Yt#gwxUtHR_pCol2xzAROQZjY4
zawj88Dm$lJrg{bI(cajQ8jbn_CXyioew0#QcgJKtnT^!TQCTnNE@UD%bv2I3zxz~0
zpAJ2LQ-18}u2B>j4%X{xL7Cq<cawV$!bJD^HGy?fRU~pizwS4!A@r_i!c(MaXIB4K
zbzVdFDGbN8VNTl<9F9EfUaH8NmRVWxYEkA(W<D_?sy|FE;TH0s(mn=>K)zsb##UGm
z9wy?ZjkIHQ2swM@7w0i&8m9qe4^CAuPF+}IC~<^`@NPAB{V<68(%JCwFB<-gqf8N>
zW6&82c0n?F6c~mN3^Z4sHKlN0#?yot=BPFhI<jqHBG#!IQ{!Z7VQVUp<@=`>Con>@
z$_y4xArewkg6^6>1=9YC-0<bO{BaSI$w}zH#=V{1On@%qt2$zH6PF8lwk+mqh=^mm
zp~mbo%J@j2Vb9g2-AAJ&{(ct^Q<Y;ZO|8A+`uy3@R`U%ctzW#n=>;oO_Ev`gC+UQ-
zWe$J)dis~Nzl$*zs-P<jLMbc+EdDEDl9TAw)=goDI^K5O&&Cc|fkgxg4opdua~waC
z<y)iXg@CnaT5XSG-(<PgnY~gw#Wu=<LER-qMSqra!^9nl`|St?&&fUOL868#iG3uH
zn>bjKi8Abl3gr^xd(q1IwinM+Gz1g;^(id%g3lf$SeAr8yM1c3L;8jT+}L*6w(y=z
z?Dl%d(d;<#)-|=icZCMcSb$*V0p+y#?7#O^KV;}u!|GxIHIg`iXrHE<N>?~rkmMqt
zy4<n9Q&W*{jALz8H^=qk=uoWRudnl^5X7`<Q7zO5)Up(|uMJ;Xe3{gfv*Jpf{9Io%
z=o1yFiP&;rgdm3VQ)?MWcdzGNdX>F5Z;)<i3Z`9$z`QXF%<y?`kOY~1N0_^f7e~Do
z@IpK)#0-oNI1x`8s)doFKR^M<NcRg(UVu50L+#V|1eYzD8?2m-Ee{Dq0&Ir<ezcP6
znD^zwJ?AGwO!d^$qwiUhnHy5)?*;H;G_fcMj!Lt$%Grwy_zsYPL5xk>wGZvmz5Qz$
zLYKbBHi5Gf;#<lj{M1kN9j*!n1gB^b^nQ7`E|)nlva~n`lm+|kL+|bgpHr>tfpDk3
zkibBQjdhsv5<0I6e5&FK-*DXVJ5HWCHOv~CUeoX*_H0z=*P0#tyilK%@kMEp3XOYi
zgW4m(gNRJYyNnn+QbUa7U}Fj`s`j?aV%y$MH+Yz4R^s(A2Txdfm~Le;>DM7sB+x+x
zdAr0-V}cDFMfO3KY7q~5y=yp3qjj8-7i1L{rQGKkWhXT!Y}aZ|ub4e_u?!$}0&PE*
z$*Z*39gaApHEdQ}jur6<n0afNQDEq%=M<k3#-`P^O2cwnJ`ThO*HWQU^A*2?gjzCZ
z`r5`l`h}&0I=Pms^Wzif;!e^jbwm}LotSOPncdSE-!ESg`A@^+2!Oc;$p&9M7X|nf
z`-BH!AUbtv;NoCuaccR5q4JC_DY?w@li>A4gg=wIea7UWknAp{B&)ooOJvGkHz-Z*
z#S^mitjg|(*|zp~S%sc}Mf<f!W63kTkOC>%++sN#;!11Nb0}XkEo(m**q-CT#<$82
zr4u0x^6BB2+wqj?Zrgc!B9Xt^Ur~^BQ}14xl(3^az$2d-KN0O-{IKKq3Oh)Lq~?@E
z`xB^<Mlv2|I+#Pn<&OcC#`wE=N$+SR2TvD>Vc9O<muD>>$^m-3L$-Pp^u%wO4WT+A
zuA^bus*mSbTi$D2{&_jy&baX{?Qe!ihb3Sb>^QjDv+IvQlt3S_u9_f3>JNI$A~G%x
z_k6{bjG9#ibuiITTU^{tJIjbvWB3ML-Dlv`9u?)!VagL%PJpeB56z)p6cq@&D+_Du
zd^f?`xY`JfB9W7qr^n9ku2b-1=&jGhx1H2tutDKQXiUK+8CJlrS)WlJ!dE7FkDf`9
z8*cp?CHMNRT`Dp5t^L40)flJFum>7&lS{P{n<lXdk9nUKRQM!<R3oa8td=}8Go95#
zP1bRryK6AKw#{-=akPdl<NpR@!P?;|9PEw_MhxU#c2<b$#Z@?g6~sI^N058jL^Tkn
zS6(oZzWK7$rK2Q|jxbQ}IHf~TR^YRb)7fkzx@1Dx9X`S)_SgqxQDIMt-8G-cJS(np
zP0>lEk+BL~*LDRZZ8Lxry73i#`Q3@pZD9qLoK+4lqfZW9rNF~e$i_0DwQwV`%UNq|
zxmV;M`d4znr8+~i@4Q__HoBt?5uJ1AWJudA5vGL|_5|>Tl<k5isk*<k0e5pOT9!b;
zce5iWpr*|x5PD!`&sB^<h`Qq}O%hQxM^q9WTpXX^-&PND-=R+-o5V>E&VFm==o4}*
z>+2{HLPq!&Ckxy{PO(v4(Zspqa#mkuB&DVYW27c6ncxjYz~m$$UKLtqFw%Y{9KZ35
zWm!jY&y%_cscck+3uzvV%&G5hQG}H>H}xVZrb}AZGFI<fA~1e69YbFTvVpoXJ0$a?
zybTcI4F2?G%|nOxJX2xbmA}D<Q^%S1;#->()}}{)J{^&!tsgs<W@cuCfkn1njqF2L
z+ZD>`-j0kBiM1en&;vh3oM3_0HboJ#=D_{qt`<FeMcEeOZe&sPiYrHUik2j@$uE-M
zX`Vwxskpmw&dN-+m%3=z2izyqOZ#uEYh4Vsd_={gquzr3@W%^E9a9)?-Hy%_)I^ix
zF4fSD^zsJw24KvSS$tlnkgzgaW7Fq)XVEbzzyu=>r2KSJ(msSM#0Ck@5cfOvgY_XU
zy;?7>?qfUx5b&7GD0(Vmalmv3Ou(Qvg11A3VBrFUQeAv|ko0#a+%(sN0#s+34@25t
zOtsg9v<bvU%uc(4Fs?YqKgT)})Q5Obp{t~;Bm|Vb$(30xtMzd~j71{{_m4}Nb8cPX
z#50c`yF6mP-Ba_$x4LtMNFT}J4bR>&4zT!#^thMN9=fz#$)_7#!7~Tyc|nHplK@?v
zNx0CM@W)|f2I@`5O_hgmj-1<>8i1pG%@@qcI4pW{-&>ex+JBDoF1#Pghrv&lb5!<}
z3zMpihFn)N5DRytH=~>3;QdZ}lDfOMWemJdM(wxKfr;j=Qt_+*K=-6KT6}ijHsf6G
zk}s%*g;jZ2C`qtqQw})7O~}}XPG@vh+cDsa!|l+{T&k{&t@}Cgos@t4jd@f4<3nW(
zp9@2DfR%~g;Pm??Co9UcJJv9i<W#75ahbEPXlNsngoi{=-W`VSNyQm|k=uFKMO*8w
zY30LyW$Au|E}ELW6aH$;CVQl()ryPiv_c)?W=oD9UeU6&<7ZlInS#cx(PtHOC3-GZ
zUH+e6rV)hj?^MfMc=tiRYN;`tYA_T^wE8A%7#=S|<JS{NsUgpRm(1?npvhnM-<C=n
zMevR5UH$?b8r4lg+=f3^9+~gK7y0fXbA=l`zTscDQf7H#{EBcscTEQ~>gD1y(hqvH
z{oL5>3qh0rG@g%?Q6Y^Q{i)g5>fOc^NSmL_WhTaCFqfF%(TC{4M!&nAK)t}ZUmNyJ
z{*!22!gyxEGRVy)94G=%hmG`vG#Rfq)jWtMOwidr#mV4}`1urdu9Ef*PPjJ(a<rCI
zMGC6H+MV2%TX5}~UxgURIEr7$?YLR^>lS;Brh1?oTXV(tBoXOvB$TP&Sm%GrwJOVa
zA+2*69R56s#B|A3V3;CTH0+aS>wDdZO2M*Cqy)}+A+HF%M?B-D*J|Ajitq<H3ZvI>
zjve?3&py%fdzUW@vYpBd+zK=jBAF+|@$7ERYOGET1Q+I6$b?X|P4p=2Mm@>C*4C?7
z4-^;4oWx>bV;+>t`8WAKS7*oNb)c8gEhofmptdk1X_j8bEClf-RK<2pp?x7QGA8I@
z2jj69*oZM1<Tedj2}rC#+G+Ab_pejIA&zD)^G^p!N1sj)YpJ|~2+N*gZ|HAV$(<5O
zy^&7w?Z!$^spz?{OgZj;aJC4fTAvq7v5wpfSC6Y0)e8ET@usq;2J10l8B8U=4IEew
z<qDdkj$CPqOVk_QGwJNV&nR+<vEcjB@rw>7apbgME^<i351v0>WcNWt@B24S59J;B
z6mj9hA=dvMGuIzA&64%U1y62@VR86MxF3wM_-Nk|X2#-s>&Ub-j{*F8F)>37nz!v)
zKzXHKu82A<YRZ7F4?YPs(t2guXyrOnO8W-kjnSP9SLa<Pfx=_*8!0{$C@V7&_!TUa
z9z}SiHUrkDqE9f#U!P8hyWIAe&!52g1<CDGn%`G8Wq&CxDIU065M2l+ZaNX6;~+t_
zb7vF<FR-(7yuQB8bYgRD;|L9d0;0S_s5pCnD<{aI{=%=n`x{+Ke+4>c^DPEMM#I0}
zd(CrjsDRUgyzQR2pzclmQsNA9h)vs#_<g^HWNeMw%D{qFc%duIqk<)d<Ps^%^}xd)
zh)OhL_&RJSc(K^1khSmX!Kzg3!^iPtvG={_FtuYcY?RoM!>9NQ-A_TB$P`4Jb3|CK
z_^s@n=n$_AYs%#JH&$@$o307Usz-Q{cR7LPz@#zB(<)LXp)CcQwf$V|TF&n(l*Z|*
z-Mik_<n`GQ=T(KfMJ(90vZ~x9F43Y+>QW)WG~%EU`QcPQC9QrYe>0#231_N6173=-
zcK><~>w(t-!%}wyN+?|_-$MaBy)@`BkXr-R>`RF8CK1oRq1QA_ZBL`7TXV$aL`SU8
z6oHxo#~|+pXY%&Wf1he_xjqN^I?0QgADc?R;O%i1PgK*hIX%7q%NKsmWGJnuAj};|
z_CSp8v#)bp0(L>_qY$#v_uOvM<MJLtBC1=$nnr5C`62t8EgfnVEw8`|WDZ=LvRZ1h
zA+w8Q)8;sc8+5eW($-eLe6BBGIeHbU^Be++ukDOC+6)*x{P~OE*%Frhe!U1gDNDH8
z{C8u6I)XmR*=|0Ok#~zJ8Vi$e_90qOakC7IKYs}`MXLu*)k>=fYR;%OS1w!)Wn=5$
zb;TGw@l)tbZF>B;VXu&z*|P-E0fJ$mJ64~>c=-jM=8B=tT1}m%O>b)3X5C4cHR9wY
z&uH-8styTJgRR?tZg^AI@XQ3va7TKr_R>LNGpH*$UPuV1Z`Vgv5*k+YFim_DBu0qQ
zp!ob1kISOzw^En9S+)0IJWIjc<p$cIq7X3Si1bf5F|HbW3s7lG5TLyoZ(5t`YTzNE
zLt}eS2?<(grlAp;x#!#;A|128BXPV_K6UA7E;Hkb_QY=YrffGdRcXER9l?*uMzie<
z{PsX}3lyJt$z6dVOK0$91e^CRk<1M>di~yqEtE*bpllz2(K92sxVPcceX2HYXL%W$
z)_fGEMA}nODkf-jz+Y-|Y&8_&6YDYEC^$*@gr*X&AQm<=?340!IE32`N^wE(MbT>-
zY&^Zh!^E_|e<GS!IzN3@m%+=Bmj?+I&1y&K6S79FbfW>ylz>e6MGjEB3m+1W-<W!Z
zK|ex>Q&?_iA|>Ot_Ba%;=(0B~CK5UBmwRt`<bvfmgdsJzY3-es&G_FXa{fK)ATq5d
z{bx$25F+H)`ouMuza-2FEX~%O&*F23o<xLXj2?CTdk+xiL&D;LEjH%F4Kb{k>(YD1
z1`NL~j&C>r${ZhITsp+pi&e;7k4}%Eo;?j3G+Sy5L}-JK$(PJR>H?=kLYjLu3*j};
zV@z<g2usQ~9;<|-hu(&`-8t@bBnU}|kIiJ4QLM_kRCs0OdEQ7*#l4U3ZSrNck^zQ{
zmC^t4Op->YB-SEF8q@AM3e)K_#Q|r0%^o1i|EpyPQ<U%1;}6@NgC@)kiUfv!BhUMG
zU^kT#B$>&*hg>~~1dN#Cb^n?syyO50!nZ}6PKxw(w%vB4JrlS41G#Lg%WWaF#E2KN
z%rB|wX9t!Ou%y~aE@eU*p_wlir{V^+N*tj9n6OFO>?>3G6=|NBB#fD?CaIw*Kmh_!
zKdOL_zIVjz1&k56Z)flFg>QGPnH#%5N0IeuV8rN6zaw!skP%EXSEFu@k%mSbP#IQD
zjDPPaLMWm3{9g0z^Imq{(TZ3s{tPgtQzW^Yx^J%#Ar4GR6MvCY+~?IZKa)9iBpeDe
z0nk}Pek7Ha)lz@_Bm%|5qwT6}$EmxSNoGh=4kEUEt@Nop4@2O-13TzT`({MTp|l6;
zhlO=s9+9)<4aZlX<r(GibVqs`v5;aic&*F&mu{*9hV;fwFIs!*-;i~`jt9z|tv3gY
zJhe-{Pi@N>NPo|5=-OI21r2>>jw428buKYzvm4Kpd`QLjUuvB_O4N;qG5X{OlTOsM
zqsnfHMPln)#4kcqvbl`3X+_hXmsd__krrl%@_xpGGEYjS|H(uzveHsacK!Jg7};>H
zP)63Inn681f8JQYk%t?WweY9gf<~72;!M`2<gkp6DRGK($<!!RK5bV|=B-;z=zHp5
z!E>gxLhJc{Sa!Ohz0K!nH62}_2Eyx9aoA~U3zzs6ZOlo8pPw1*9L65oH<kIN&l-S?
zOdJJ+WiEopjm3>MMXe~{#L?#4!a_<}NaN3v14<j)lxz}6VejRK_-8fWs!nPSE7Zq0
zaML#Z1B8wC$u-J?;Wn`5Omuy-Xx!)&sK!4(BjR?D?;+YqT<8lCx}`bZDWs-leCh9z
zGq_l@_&nqAgBZM<L4u!*92_pw^u0vx7+>rsg@#@o{C@uULj(CD61)x0@tn=PQWbc8
zb=D9wY11`<$4UZ?qvDx!|8EOpTYUVO@1H&Nf;cTVW*soFfHts}>I+@0OB-9=VS)sO
z`c8kr39Uk{glAjo0O`N2sxh-lDDsQtX!N(MOX1QInc<(kDB?P_%AOe9gFB8=kAlb{
z28)6Urb_$%a>H4B2|~AZdqxeuJMuhBHinJB)5Xv+-UQe07|mzRgqPU=zOMz#q)YBC
zXT?NR^i2@FiSj-)O{#)|8Bct`XVo{0S+v913Ptf~SiRBH%#o3wcTQMfP}sETh%$xb
z?5Z2Y=V&F^Xli&!^5qM>l#iuX2o-B~x1}A)1>QtW<?+}iVcLV?dnJk}i~1n0lfq0)
z1vh6ffs4fj78-e}k{k}u*hNF7p)IDvK7Afrk)D=65A!anhm8Dd@K3?xLv2kbO<lA*
zM|$?}>Yi{|VxVmqVu&=nf^(Yje83ps9gj~m=zS@8+gkL~*`3Q*ygTzTEL+$UX=w|v
zm3Q#V=h?Fr+Xo0$eY`zWS~7UAHDczhh)%|P?p0{XNI!}>1}VPa-AbJBx_lR)6ZokV
zLdbW!V|IN!1_p0B?(bT1bxjo4ZXR9!LIcTNC-5CwL<m-inLX7sT>S1OLV-OAm~K|o
ziL2F_Y%pE}RAV6+=Zrvw+s_4Ydcvyo>!NQ@FUW;jn4^zON*HuM7fbhZbCwfL`Eg(^
zGY69InRFF4CX7=-Mp8N^3>wf}Ipa7;2(u!{G}|a>BQ(*fC4xn#O2;e&>1w_aPi=2w
zr1YUa)n|J+>l%SEXEUu=&3M@)R@p)&Q%HmS9(S;)ebj7V`r28Tak<wd7hflf=%OZs
z8;h^$vWuTer&zDlSxIt2BPMw5c%*@slN7$UGBzcE+3WDb8T`hWxhk$FH@=Uke^tpv
zpeT)3#IBG@S$Lai=tBYp<Aw0rE=XP$OELFNDsY}r|9NE$U%l+NILZ5161;8VerJ;H
z1KJ^+Z%djl_d}beg(-4n-EW+O;N94^O7np8n+TQ!Qeu2__7N$!AlstVUC`;efJQ}w
zh2hVABwXMAPf;yR3I;ygLgM6-uML#Tz-)No*^HY5eG}p6V`59)j)bzT{OJ0A4sn}7
z#p<h=0>8$>^;xp)A}dB@d4uPL>^)m!lZ|gQsB@)ZaP%Im@8ycI-7p8RCYmQ|rn(2!
z#jhr<hK6B_lct}MUrHPbl1<7287|J}3)p%x<+u-~Ie?!xVPBwg@cJ`#`^Arak$WLC
z)0fMOa#Ks1rAsQ{^_rKZOdPg=+;Zw;b*i?+t+r@))UAp*L7sAGQ@mi13a{qUJ+p|%
z_XaMFG2W;iAQA~eQyfIcMm(@8ZJ_V0yoVzD^L!zFHFT&cqk|^hN5>t1pV)&Pqda$V
z8{T63@feE52}c%RcbaA*dY6_dDD$v8&nM@ChQhLXuXZHH?_f<}?1cL41YYv5N2MB^
zgA+UDYLS4YZSC+i$9nS`T^ppsxkJLy)rP}O_;z%>^m^zSEvd>J1xI6HP2Jhf317Be
zEoRvtGuUB4ZDfY{3r@yF=(oH@I>N=gGPdnJk||hOVoSX-xpgON1QtbO^NnPEmzR-{
z^8v2Pi^AyGsGwsh=DSJ4i~RYP?Ygpc%dl#Z)<IBH+I!X-toseVkuFswR+g7Ei2ur@
z#tO3Sn^7^l`*AzP1P@UNJ<wLlmhwB8?hG15ubBN;IZ08)GQ|dNA~2%^m}NdBS+f{{
zw0eBbP>QZd2&b=)+0zbMvK*n-SFPui97FtEFP8pRLnW0BXp8O4et2~zs9aBu1Frlu
zYds^WwkZ0>3b#P?-^Mn;Pc(~%TVfIfRiGdmdCmuD@JwKu2QvH%V;RSSAd1iT=PBX}
zh^8S&a2prz2e@oOeI#-)b-L9mfk@DQqWWFll85jlyQ-N4I73~s_Y^Z=$wevfPWdXv
zju+2Z0r?VFYszyPu}ldqOw4DW9}7g!>#`B4B}tB0?oPPB4ssYT;#xD$C}JF_Ta!<L
znjWxs&A~tJ>$3-ylqskYm3Cr?5GuOaXw8YM+9@c-3Z5f<38yt(bV;|ivslX~Y_l_)
zHq&eur}51T3^;YveNLd~8y=o$!5vB~aE*}z=Lh~t{}xp`hPU&BdgQ6f1Ns`}wS=2k
z^q7P`sZb&lHBLgn!<8a42Csf2nf0cCv#ZB1m!*>9qT-&+?MGhG@*}r!kmi%8bEFx(
zpK04AEl6tM@{8`?akxW226Wdq<-N2fM<94j=t9Fl&2be2eV9TO=ds|-(-V8+rSnW5
zlY>U7pOY?_nh_}@CUp7dbVyx7KA9Ci$aW2uCwUE6C!D?#9mO$~HkXWQkYVG6+H)tt
zic7^e-c0=tm;|ZolZyfd5kUUtnz~x#9fSbAv&0ubHh)-vR`@lVaP(wN_#6H2a@zQ*
zFTN^Zb1DMkOKSII@pe1ovRWWj7p^51q+(oXQNz!nt?R2LP^;~&qOn=<qqCk%qTdAs
zz=l`)GVY>ga3MN{dh2uI#(~R~7st_*-=du>Eeu>?TjqJ3NkLtqAJBc?y&As@L<^h_
z2YJA)50>N~MY#M{FjV>-T)y5gNvRFzuBABWb+WUAsQG<kOHgfyPye!8s(qhU9UsoN
z0h;9;X8_pFg{xo!=8nXB+XLlk@*9jvG<GMZwC>5bo+fgZQgtz3$WH#Ia{4wE<_7|7
z>GEIfK9Q{45kY9m2hrm5O-)eukJHAS3$!(>;x>YU8b6dW#bBB^fNLY1AERSv3eHVm
z&s+C3QdEE@^#e&RjAhWry-p*VTO>>=Q*5{%uxCORSGUAlFtu6rq*iV|3+(!qbY)5C
zuP77wzk%OY9@xG%Kix{og$uME=jmRMIma_zuH{o--~uu7^bb}^CPkf;9PAx5hZc3T
z{6wuQi;Kb5iCznXEA&nwb#~WhCxQENxb<paUoGa$Rq=%X6j@2a$X1|<WK4A-NE?%M
zyTFL#HQCL=Suk9WmUvF0hQpqM|JHYvT*W|;z}d>_Q$%-D!liA2<Rxx(&(L|&lTCts
zK*tDk7IlKZWk6ccmF@hwj>rj3hiVaPQ1kLl(ro;mq%^w_Q@i$bT8B`_i%0vDPN*Y8
ze!VTwNP!JdNHFpNQds0Rqo@VZf>l7FKC(KMSF6V}B`*t@Y9UtF*FXst&|`mcEkz#v
zVr1|vyl#UQhLKzG{mWGnTy!(i?3bsVvXL%djyl)cj;2%LVg<PZ0ml5?Dq*-i8+tpU
z&3e~kZy$nyI^ysOnMt45;L<TkPL4ca{4XFR(sgV7oR5-XVZrKi=-sro2@njMblK+L
zJ+4}fVFnd4zzEe07_*Y|>T<XhUz1?_r3Ncw)KVWTV?09W_qR<LpOP$_=>$7a@eG!p
zu(L}KTYndRf+CNrIn;*>qdt^unSOD|?Xy3D%~<JnDwvCk@=x8%pmGIs{T&Tsa}sj*
zIIfhDnr$ICQ_b)yU0cXWA3Ja5V-q!cbQ=4%HpDGncP<klGP%F51?A74#^oW`KQG@W
zOB{+NhDlUDHYyLl^r$VZVO3o_uo~X9`OK5H7<_8mx3r>w;Q=R*J_{+dD^7K-qa~nX
zrY=b6Ydz9oGM0StO30=NDZOn8@h#j^b-++j-QoQ;#gKwz^8KEJtOLd)iPUyjr;IB4
zl)=sUWevnC>>g5GR6W{5=0~|RPbAN6OuN|lJ0=SSto0G%nY&Gi1iDEr(SG&ZDzX)d
zSCZkjl-T;vH|&?Ip1#JBx98F2+nTA6Sl#?F3<@cWXzzT5iO5w|CQf9+gxluR8bhF#
z&dkG9C9mSjT2_R4?`Bn3Pk4ta{DRmv7Wu+<``L=iXod{<n%jkKgFAmL9SxX;Ti9jJ
z?Q1es(umL-tj$ilhxu1)fpR}7ssl_)MpkE?ov-ccVdiMn0iFgP#HlP_*+m0ga`o}B
zJmOLV2gg%|lzk^W4a%&2&Ov7&EJ@Gn*+c`L=J3)@OXWtc`BEbvlJv40aAQW`sc&8D
zozA9duonVB?_0^by@bK7LD7ODu^Mn|sP#)GmVy^!kQY-{UBP6Wk?0G^7$;PpDbw6p
zaYO?H4Le%`$DliD&$zs~kIvsT6nQZ^qC0dqovrC4+Algw!+A7nUaBrr#8GFR?8A3p
zT1_c!FK`-Mf+gA|Z7p^Zi`lM;6zEj!yZtYz&s$0u1Gyo=dreUZp_Oo?uqrXhO1VCz
zpQD9AmlYV?FR9}Af0^^@kTTf+$$DoeS1AS;fO0~TL)d8^q{z_Wfw_ATjBgYbype_R
z7BtzB0CFAnN^}Q8v6T2C!hm3YUCG~Ts!=R1gSg<+YH<#nO~T7s`m6S|A#9;#jXK9a
z8yzN6|FoQu1603yAAed+vpO>KT*iyzdXdtjlfl^XzRDDh`yN?vCPBRi?_?6jF%Y(P
zeyk|rdraq%K4F_{YO{Ma-5C~YfVgI!S2#UXZnjB)m|9q}yeaX*o-xI<{oD&<!Lr)i
z-XV<OU<Ne1xf45-qUr435I)_FBX=(B8xDUC{NkwJ1h1_m5Yl;LlQ01?W@ja3J14r$
zPOFuwx_rE47&Fr`{#wx;HJ=X#;f>gdm*5S~{xFHeqfpTlKkg(3t!Cl#)X?u2aO_ne
zdOUE2K0XPBVb6#HkTpzOj0yIeyCvfF*{n7+%wPD~u=23Y8H5Hu4B>~bdYuGARD<oq
zJKmK>tR-HOn{ptSTQ#CS?<5j+)v2Shl<oGwdlBD)Pin>nj$!ForMl7=J>*)WA5vn$
znhJxEe=kCg7~@IDgV}|j=o{V};@tr;?+CfhMW?eNoA`#Wu6UGq|EfhcGtJ1v7d53o
zWB4gY&<>>&Sudn?w6Dj<c<8p8sshyl;l(X3wA?BUbxTPjDt3ecAs8lcen?O-mrC(u
zQSJ*m?WVp$CeyE7nhud85B%(iFGF$9B1yIG$IC2mEM-6ZYWYUBe&aeeqb9WOaRSA{
zIzLTx)j>OQBJZWzILjuI>Ie|vw&gEB^QTZao0mPKQ`@l-)8Sf;CdV*Qft@PWsw*~R
zrJ}9eg6sDI<GtE097)c>V)@B69w`RNWwfa^J70=1`wWy9%)n}4AIri<Z~%W+kl=P(
zblkl&g1lNvth7%%*W#L`=d(JS=+e<T+ha~uG|OH~Y~Hn7^{N*C3g3d~1tujFYa&!7
z8?4M(v!C9^J$hry=h!xbGZ_Y1gmDmXqPy%OyVc)dpHF{^J)rd~F~7mAm|NW*D6sGL
z-s71y%OAMqzCn4j_eu+kQKh4<k=Su1O)ETmm`h4z<K8a8#+V47GpXXBst|t9v_~e^
zLF<cjxoMGJV37;q01~I=wMP{QI?<h2=}cFBzq>^tLe$Fsi}Yrk$Xv=py|t7S*!1Tp
zvfMM0lTMzst`5mygZCfYogxllxUyZD(NetBpfY0Kx})>kSFt_)H80Pu6;doywcG{m
z=;a#GZH@*Vl4n;A2-&rmvbZci_g!xm{WeL0JV}aBQsYTfnG;Cg;)|V8&Wy5GP|Yzs
z7)Z>s4*M2VS~PEOgEU0~xV_wB<FD$4h1iH^%9RV^NWQ?xm5dP0#M*&fiF4is%fKy>
zDX629icpCrSk`e<Sb;-wtZY|5M!hn3EZS`g5s6fy)gL6CeKY++tJ4j3M-nAPgB6|@
zJ1x8PY)b^~AzSVRUS|ra4VLuDZ(X%;^7&_I_yU(CV<)YJ7-W0OYr)=^hgbLYDGZv0
z=$d#5&U9=R-d^=gGcgWWkDXMs16w|c!qDRz>cI3k-y!O-I?GCAEY;dtnC%9$trDRa
z(zbIl8Q2qVN4BIu*V`UcehF0BRp@Lbx$wtYB$1@7O`-0}QMg|4F?--KDcLtid=P$d
zntsL<Mv}N`jhdv_dr9L?e?P}LhS2Yk&I*BJr{so%aqZ$z2W1?bISfp7bL%lKI}a|n
z4Nu9JDSc~#8B~h%6%3U;X%7>a70}6&5;J@+NxvrchXikvH3+`1DE*RAVK8O1xkgk*
zS_}2;FCVpu&m_n_yHzEeH0*|+x{vdo5eOKz1$PX_kfYr3$-qQCin^{bU+dtW1`jde
zShX#%Cli99x;lQwU(BqkPfoK<d*@i!M@3(}#YW}+ag0nF;2|tTwyB=P&|3G~@EZkN
z4lq9B^je4-o-Qxm@<IMkM@8*R8YWrZV>2j@>~8Uo4Xa{2u&>}`6@z5jYhGY4X@v4P
z>7dA0R|T@h2NOn@q!;bPNSE)we<ezTby;pk%pO#cRa2geVqCx;&PY1^<X39&hVMP~
znI}h0Ap`HK_6b$Zaw$`wwb!MKsVFf`C}M~j#6P-w{GqbGog;V`wbkSCVjlk>5<p!g
zXD<zcB$Htx7Q=oy<87iET}RCQJghylayP-Z3X$HjrhTX!P^M)7S4!3HpD3|es#n`j
ztgJ=tlz8hB^C~l!A-u(-<T2sT%wyvmy`N;?CWeH%9^h!au8_ip_Mn=_edrsQ*O!QP
z8K~!1A*~ISWj=VsF;{;2Zb1II9m{l#dN48}aV4V{zBlX*4%0H*(l9YvU^Bf!0?S-*
zT&yqe)(EJ-Qwy_E??KTWdhQ}czcwMXe7^KE*jr2cg8cw+V$fhx4G$W0`I@Lo|Diyz
zcu^5D9Y%4n;_AD*HF+6ry{(?;;i)9fG1HBbBu@+3FYl)+-)SCx2ROPs(P<EgIAzGb
zL(4u`pX(<R{{TzTUxQ={3F?MubzK!V$zpB8&y0~@piR2<N7EdtHi{dca~C7P1}g9e
zM<gIT=4_;+HHVjp;H|>o>JFuY=~`tjhkeQyD8HSLn~t=$f5Ld5LxAxW@=(m#UJ4F!
zaVHsL>vG@VSL7z5*PR3FmUxKk&b^?kBbvGL5hxfnj+f{N3&eH~iwYIGQ3pR+rwpqP
z-Vmp_a+#McR_!GP&*EBrVw=BNJWkaXyI$;PHVaOxXO?|q_T;-TQ$Csbjrpla=o%w=
zAL|Zd$_+O|oD)Rap|YLzcU#iC<F2LhT!Qr;)#zqm{Qi>!Uhgi^H`wa{{u(UQ_0hiH
z&W~q<gbS2-IZQnmdvy12-ZZ)y2H;ljSHTZ_x!Lri{f0>+;yok?i!QK6h+a;cdyeg1
zYATOapPe~}dR0}LRMkji1%^TDk-Cm7qytNJdjm=cxqe25BK7mcRjOREhlCj_?h7iv
zrh~jHvg#HMl!BB|X<k+3J$Mb11!EkKzjMr}4~jB`yMk7zlp;KGP<>w!7c(T?bV`C&
zY=1lMjA-kLX<2)%hqt;^_%gBc#KAkPQ}b0Yv@$<r2SIx```8?xhCj;C&9)mc&>u=R
zFWp)%Q@d6Dnv_|7$p?;fZNEbn=?s!V?0Dy@A77BQp+dje>QvC}-nHTZ-;?ip-<x<8
zY3tToN9yVMq3WPWd=po_1S-ypq39_L$3YzQJJ2U10lu;w%@UgycEqUSe7d2~)}O>F
z=gZ#3{K|9jbfL$fo#kjL9G472%O-ewGD29(Sfm1lZMc{9;EQRNw)~M>gq&A3#y<wW
zRa9MlUNBs3c!(cosgPt7aaN8G?}^5SIxp&&62L3C!W^NfWc&njiWd&Ec&k=nvP?|A
z;8WSe?Qr=-TACb+tJ7+$PETYKOKYl>@zdUYMk@Q2HDogT`=vt6?WcVP*Wf@};c5-O
za<S#iP|wAUwQS}ijjpDp&Cu{7ml2#Q>ps`7cT*?&V^!(8M^p?|xKc4XA-W>_tn`?@
z6{zkOHOy4Fx!82XyL-$UsK|*Xy2wISpohUcK~ojHYP1xVXdo0{OG4&0`lq|F`$tW4
zATM;yb@|mDT|oO6wo-;iCN>>>cQl|AEDN)uGB~1rfQssa1VmJNFOkd5Sty0+z_A*Z
zz76kaFpQZRIJL0=J#S}z);rUkPbc!h8_$-n<wfOTba03YUC1$Y>!iQgP<gfHs47!6
zT~>tI4V$+CnvATj05MOq0ojVFrM+8O`vjHS!3x7}UBE!}MmIeDuxMF6xA)8Ulize$
zkW`@XO|NX_SFEILAG8}wdbEh;2{Z1Z{YV{(5SkxLW?^vq2~&RQt@8L0atU*g=-0C3
zIg8c}W-&Fm%ji(2+nS$of5itFHCOm#20TqkG|q63<#ifFhdwsTJ{KM9_wQMVOx8#c
zDdCwYuo>^uwf6m3q^imL!E)j7z=NLX4}-z7hm6uIotR`(qHZSY=_#*J3;5*&s|cm?
zpvN8Dpi@Fe2Sj@j$=nReP+9i#giQZ%R3KH{%J@Rt6gkd5SJhquJ5a@Ej-{lYY|ufY
zoBev)aLLA=Ynwrk)wm01Is2kD>|z2`I<C8EQ+6RuQfdEWGri#czW3IuB-uj(_?%xF
zVL8d$rzI<-+0jeIfs;N+wY5<v+lDheF6>E>dlgDTCU9_kdNk;%hHq$rLKm?`NCgW~
zQz@B`BS>aH-e|&uq70v7a&~HhE65yIT}KDGTiNz%F2*2;>PFRtbI_a_st-)`G#Ztr
zN|rMcq`eejChDIt$}e4D#!yn-?lFq3wo=bTiTDakqWa173PYseiZ;Kt#XE9|Eqa=?
z4;u}(XbO%R`jlQ9|LnAQIC-=*X+!+#)rTSz^<6^DI29OdTw0<_K=^iH6xfFFSMol5
zzmU}1P@mh}fX`gKG8SqoCJYPfbQ-OjLl0PUe>!cHMLyIm%BY_}a8^hQKm6xXw?h|b
zI%$bKPw}=!jPIJ+*jDTCv~ACH!H}r7>YGBZU=TWYkTvRqR9O^mX!YsJ)s3&=9uNr#
zm-0gky<jCt7WSa)30<*}P+jifthRkV4c#=A)ryRMGb?fH;4Rw&7<I~(^C#1R;Z1it
zP2p+k&}C4)nx!2r84?gAZPhO6bZ_gMpLo3-XcKQ^=|KV#%KYA~%51<<o_-V&mI^|!
zGSR>dZ~zAd@N)=AhPpDX8zY9@yHTjRY<2sl>dRJnzAKAhE&?3ZjuN>M4#f*pFCofw
zBe*?b9KsKoA%)(qRvGwthuGzK#lb#oQ)pwk_Lvt|O8wf3!Cq~4-GEIaeK~o}7_D4Z
zdC}$d4!lkx{Q)AkJ-{Pa`sak3K7}ozJ=0RHgh`il+)-h&C@E7FB_wDA`LB+hivaeo
za6hZagu>@JJuH{}zniN&WIz|5!Vlf8+${;fhj3$j39x5CMmFgDwkH;6E|tnM=0FW9
zik|);ckDoRIQV<(%Q|qPc9H0qUsc&%qwk{w{!4=v4a2J^R=`Y3CQ)G@3{NW1#k&vH
zk_GN7qBTC(v>F+@U$`Anr`|-k+B>$dCBD)4s%VI)UX<v9M~$X#E_Xnq2*+wn?01Gq
zd}0*S<=I73B}LcjvX;#?pZ3Mwu^t|FV4+g!nErCDofDaKO%US7R)br!BV<Au871l8
zsswy0bJ)~LF>ai2EKLkO7MGUW$+51I^~BuqW15Lb6`g229^WyZ*u@Nc=qnhzNkJB;
zAP68iWL@B2enbJ;BsU_a9nD!2W=Rzo<qM~+!DAFbQ&OkOS@?!9vFW+#<MndhjOwn?
zr5VKX7NS2X^_;0v(wnX><a5q)a=L7U1)C$6c*<CM;{CQtV8HOIfP}>O6`I+KQcR%x
zcHu4%oyum3!cN~x>FFjmm5>ns13%+5D=Mr1LaFtV6)Y2dLO)~PGxCnq?T)JN0ruh&
z55)hIMDp!|U<4_}V09w{Dlv4yo1C@3HBN~3XjY(G-7YGd5ETI-OLphPt_S}?d48mn
zT;7Sv*HIVeDU-{cul9F1+7sI;N5s<_Ydtf28pMQ%5?`*hq7rg#v$&?}g~50d6WUWj
z3~LUYgl!vNtKnmjp3b4=cY0;4*2eI+L;J+$h=e$xTMonFCYM2kvgFOw(PFaVncOWQ
zoIev;aGM5n+T5!L>#Jf|$Q3P{(B$UJFN0A9y8Cazwz<-+B9s&ESxE7qzZkSDfBUS)
zZO<WC5r_wT-*|x&WWCIxc*g?tM%pEx803>aUz!DF)G^s(P9<n0v$imNss!TLnNu(j
zmYL_^)$tTwJ#_mecDCH0bXu~^W}y~bWbbI&M!{A_0o)kA1hmBMSK6*sVqZ=11Ohel
zgN^tQ8eE3<?Wtu%SJL_Ij4*gqUx~$y6o)Nzh}Qf5P_c>{_<id8rHJA6CuCD1jk8RH
zLq6O~rg3unvUhNr{>&BKO^|)BH4pg;Mdi?++^^6U^0Z=Mbz0ba;g}GoDvzcYi5K#K
zmoWBi4M8XA=RpC%5}fjE@}`JOJnC^9^QT~lGXaja@|<?$J7lwYNF-);^EPQ~f~7HO
z=p{$EU2B&fZ=($boi}W-?X@1(GQ~N0xrHY4?&@0!Ti6hVaj0=cjxc`T7-X5tB#7D7
zqQ}rG*#!=SU}40!1c)MWskRd+ypg_oJ{h?}@9{J@w*pyXvUS;@SZ+DrQ<{4|S$DSD
znQ`D!wsP+89Fn-yG2@WdiplO7DZ#th+IXN^-w($_@Vb$Vgd%D6FM1<r9n(v5f7+w1
zM9fD{t``!@j+vMiD9>xDR$Uk@znEm{Kb|1RtzyJR-hNw*b<=TH=d$%iDs|V;!%$AA
zD?lrf0kyFA(P(DZaPJKdxT{$NeRoAyG{>;IK_f-JQYPx8=!D=}uz#hIPTN@lGeU{y
zaaim+;p7Vg&(X-<+;^grk)lmf&X=X);Z8$5JFV&$iV^pX%n$?Tx}U2j0e@#&Y5$_f
zW#J^lQ^9M0whcQ0pA=l#^4@=u^wSa<;j8jx!>oL|)Tc~SC`vGklcUmGsTYA~r4EOL
zv?^!RjR3(~IJp&U2F`)f?od-!u{S?1N&Va-apz#N)o+wUi3EI5k>h=Uzf9e`&jf7^
zunyrP(S$2&NPx!a8<Vv6GWW?Gwno%#=6Z?YPwW0ff+7lzT;@BHi}i}@CsGma$h6~%
za9**XlAd0xNQ|;3`aP?6dI?d=ThQ;vUgz8Ns-?fHFS;G(7;I$7B0q-fsoo!N?Mp*4
z*Q}hac{YLQumRzxdWM(ooaYu3J+wwl+eNFef8Q-++&L)07qoUmC*!pb+M7~_(%wlm
zwtt%YgS8QL3{6MlD(}!ic;#4#3i-_yUY7vl2Chnmts#3`nX?T|z9El_cIM&7X@wkZ
zZ8sS{jQ~d?zKE4j6xCuE<!bJR!xVe}Ztfs{E<ei)EZ4*Jws7YTeLCgpVHJT+Z34}l
z&{#at`L1Q$?FIwaL<>dFUY`SF=LST*Devs=lhZb5T+s-~3KCV6=>qt6ie?b)$U`J&
z4tA86+-L2TzH?Z)MqH-T0+lBdw_xVPNf4n^^-r#dzY~H|bfHU2AcgAnR(YR9uz&R0
zvwL=SKA*O^1@bHM=1U>x+!sNCWJzr?2`0Ma0@nhG&eMN)n?Qj0Vk+Ru(Nv`)3o;DB
z9TdAiZEPtC_~pm9AutJWT(}?E(k&nJ+Y$Gd2#Ke^;d`=cf_9aTI(Z-9>Y2-CC$*|4
z4VOf&-bEg*Ajq0Aiod0UsI8>lCborK?8)DxFjU#?h(DR0Vc(VrZLYVZBnGbyx1`ol
zE%QT#h*oh1bQNvn*p^9mfvL6Z2_|p8NPh`<Arbajuh3}zIb=M7$8JB_U6!T1`?3o8
z%%AgZxK_h;4;XJ0x3if$Ks7fY<E<0)TQD}T^CF3SbC%@(M3paP#5BIxT2-em*0Lj<
zW;GY`Cu?PYzUS$7Orjrg`s~NNWCF~&TX7X6VSdD?&Fnyt!T5K)tgof{dgIV5D>BTc
z2&zI(f($4&;XKrdDnu=yso%g$d#&eE6zCmOuf4DAzW4Q>P36#po<8yt4&CFYtFKmM
z8}*4z*q@1q`q%W~6?P%F+J~8cmDx%o*C5-QkAk8>Mmnq3jMhW#pEr(pehYSfCvU^~
z0YQv>J93%#<x{FdYGUi{Y+T{#;?XyMVk{$$&~!ZXoX;<uaJ`daZMZ+Bg(Z6!de8fK
zTP13=D4MADi`$Mutu*Nk##JcYvG%(ygfGQ!`%D7M@k%9aqxz>!`YjnOF|5w8v3$Hc
zOUfJwd{8Sle)ZU?t1CJp<|cITWRT}nd-faitMp~wH4bSC$Nc=7bUHa<C>}=xl#d_^
znpQzRKTHO_te0%5Zglh5l>&LFBTH8-xvhPFTi?p?<y31&zYAdweSVEZ1OAtsDcinB
zvMt8+0y^N$h@+HAd6+!Tdq>iUUnIM%KActi;o2B$Q|`u!Fe7DKw$bbGjJh8FFrOjM
zlXHuJIL2Ob=X@*i(_P>vqC$!jGNv`Iof9uzWVK|&g&kt?0!!Zuz5$RrpC5xONT6lS
z;ro*(4vFhDs5`5Bn8Z$lae<(}Z}!~Q6wW}G()G*;t)X9-z4g~8!_hQ`!TKF}$}2$l
zS2H9IT^1afv@%ixb1I|fDhH4Y_KY`poB9(!LtIJvNcvh=pt?Q)1;8k&CDnKiTqFeQ
zRI18|-_Vj-`rgZ!4MZII&AnJ5SFA$GTh=;>_Gbi8|8`uzde-nMn5$l81$OcfWH0rc
z2`dVP)w(}%Jk^YLqw*=i<3^-Kojw$)0eNORw<N#w3M!6tiH}%@e3dblSxK>gx`#h>
zcPiD2eLuBDBOTITVEz`lo0whsY+qoA+D6D~0H%snyDu}iWBv-ILsoQ+x90?ll7P5K
zUF3L?bzXe@IVAQIGvw2ZwM<oe!<qbE<c}NaWxMMiKoMkvUm1moNae*hJY!LiNazsO
zjUesWfToT@@AK>w1vL@NM<bygte(do)nM8zZws3BHFhF9#sr#V;t)tfziq_sV;~F$
z4Ae-!aL-C|)2c4?!{Z0}H4C#eNWQM9g6{md#js)xfliHG?rd<HtJuJ!9Bk)Un|5vO
zGUI+@NMlO;eakIN{Hx=g=%$;xXI>Di(m>74<}lol`ASTbV^M>RB_o0qBs)P_MnnyL
zyV)RSyHejq7JCB{9xbm}hlFXnpLPPt9b*PtJH~Ln=6UHkuj$rZW(xRQ9{GBU7guH!
z9P>~X0(R4S7%18j*&4YUlR4~V+uDZjhTihng#S0DbQTwLQIP_j3iGfV!rElOU&Su^
z2gADp^aVQa12nlFA31KEYdXXZNlPOK?Pp$Ffvw@Idno6Wp?qKhPRmMIT1O!1855bm
zT+sOQTxSq%8D!D;Xwg)mQ?-_7+&Wb)UDAdRiDLG^9Cl?jz6i;Pl!7J%lMG4Ye*OH@
zhRHJcn!UH>8-gi%OsQ#R&JT>DEzo9U<Nwyookl~!_6-21P_~p%mJljSnX!+t&RE8b
zVXQNjD8`r>%NWMkvJ??Y*2tD6LYCXumuiy9z9fl|B_vz6WC=a)_r1^a-uL_IJ@2RI
z`gWajUFU!P%k}a4B_B^_-RT?<kmUv~1L2nzT`gKZuKD+hOw>B_^K`s+n06c<7L`$s
zGLpWPYKOUc!`j)7Z?{`_;}jXz)GLBF(qQ@{m+`Vv4dH~~F61Nw7(OeFb%eM@NulI$
zrgc8_uS~&yFtl6Mldr<QDW(8gmK%;~4MY}Aupx>n^wLCbbu63`hq#GnSbx3(IU%*h
zJ9w(=Fr1%p*&*KV9SgFk>TEbnC9K!4an~P`{^t5sIK-6({;@l|y@P&@n}~S(7N5I3
z{cR-2dg9{K`K;Vo-42AG`{b9T4B|LxZhAxaTr<B1ukg)QZj7KRrjkZn5w-_B@{!$?
zw=3QLeoU;Zg@*4~JvGv8ZqHej)#sXHGV)6H=Dk2`PgAEp5x)R%zkSU@m`mDn9}Qyj
zgOP%alv!QAlmvC+Osj@JPO3LLC?Q4lMqOkMuh+n><~=&;NEQHUtDc^fKX_OQmGWH^
zW-ntFVgeiQB52WG=*kV#-V0|y6;xUco9N`pdn=EJ+6FgQ!}zx|82V47AQGuMu{7*`
z%<Nt3OV1au`@cg9z<BF0@ahno!+{HiZ74SLa8ke^r^z|P{)&6i<O`mh;864NKdKff
zReS3Pd)7jTezR1e*uj>w;CN(W+3(M@jjVvRD|@bir#hErN=#*@P!`{INi7$H3uD2&
zCG@*`0&#7u1#viy-q^hw$+8a~PRWLJQDphqH&b_-XnuO(9y&|R$2n9J%aqKRQg)_9
z#wuThm@7G-OlukN(NNk@hggiw;&``|PUdNK6ht+>RQ7)TExzH!A=;719KPIC^33Ot
zyQ4;n9`95S-6A6LZ=Bx#75p?_zy_te(knZVOJ2jl26WL;eT%=Gyuei^YEcMxx363M
zfd$JSYK+TU9vFV}Uel@+Te#mvdpO$ETa0S<k8cf#YhuY2&@Z`sU+}`6+BBnY5;^sv
z;hE!Djrizqq2KQcZ=E~qDrUAdOSa3Ji`M8ypPLtnRJ=Wg5@zrFsI53A#qo$|d3wpZ
zhbI=+s`0W{d0S((t-|KknOKn@!SyR6g%z(~Ibp+oJKudyb+w-AYmp|dK62?`QkK<=
zQ*|fraC`M*Ap+t8EI)mIR#iSup3(7kd`&$jf5$HR#(358M@vDT+cT<Qt;*ia2!*+a
zD&p{3n3U1hqv!LX+BGv0pZlsVl-FNlnEM{+Gi}x}BHxy15TbU^`A$j*12)5)V_%$q
z9gR72-j#Q;CB*D0fl?v%%O_vrHk@4=>PONp>vSPZ*vCr7{-|C3nUc_X<Nfv-ih@$9
zep6gwj~z#Mjg0oiV`hOhORZR{RPi?3zTKtQ?>XUVPg9N7^_;Ks6>{f3E@MeUp+zF{
zx__P1T<NN8H+g0kps6YUX!e1prGXA%Z07O~xBpx>{T|^>!}m#4x4S`2Tt{2uv!rNZ
z@Xk({sC-r?!Ha1yr`q32u&4lPx$~K+xZY1E`-#rkq}upJZSm#L{qzsAP0}^%A5T`F
z?Pht$y~^eg<g#g_pfFm&+EkXCt=U3ntnksfqW7Se&{k(-DtwvB_$~Y#1f+fA!R)A(
z`A)S6^#kT+=SJhg^HgSWIuRgjt7~kzbeU_c^qpvK2K}WzWAzMp$om}Z8BfM}-KhDA
z<675bjrF$=YR#kyx`IWN7hq2%-thu=mp^IGVPv28U_p<vB+~5Xd`!UV+IOP$I0n6T
zDGItAJnk_0@csvIPUqOry0NZF{me&opYvYuj7+uP|L9rQYh5#+ibmj(=^{IG%_+Rg
z0wayKISr!>se<kc3il4riFl(GMhh5h<b`w~N$uR)XhUyir%`?FKxbY3lu&jl?yWsF
zcB(4qx{x5;0-rKHk+11}E#fPU>(;wKZMm#FDU~%l!wR#HzOTVU^dN=h6}}(ReQaqS
zjH*VrTwO8ASjrS}guUwCW3g#_qNFHm2oEs94VR?6-pJh<nI;Gt@)s$74t_9^^YZyc
zOBAOT`@2aUNvqPd3-XTFN8X%-an&bR$sO(qaW$Nk(fgS_yyx2qgAJ=5Bx%*1bZ0qP
z&iv_9;=Y&MsHjnbL3F`7i)6UyY|ECpRA$$M<}JX2)~0Rxt7e_PuF%m%5cQR-{LLuQ
z-vdwX9gZTNuu*83uaD(Lw*VI3c*k0!#Do)bZZ+6gGV61GX)!euk*Iz6w%$aIV?<2N
z+v326i?5qd4Ml!Rr8;XH6z0oj#})nXWGRX0<1qLDZd-Dj;-Mrogo#jpwyg@BO^H*o
zFUK?953_xE={mzRfD+iWjX@kgX7yTzF7LQFo%=CKE0d;8E$EMWaH2k?&GSAvxIgxx
z|DaFnqOf*5@Do+jc5wZBh#xDn_<Rlhf?-0jnRrzs)7KZTq{^4oj$NyInLyhBHypFt
z`sJfAuJpLFVsxnAUOm4JdDY<=!{NI(3F)5kqCzi%#x*X))UNh?@sn_Y44+fSu4phQ
zx;G?|lkXsx2c4Ccs)#=>YjjF5#zn|3W}(<Le9u5owAPS7n_j}eJGz|GL7vzePljpc
z(A{0X_x@C8zFFz$x#}&}k4a5Gp^bybV<_y7MJyN9$z#E<N@KOmCrYbam~UN}4IL}p
z$$6nn%CM<Au2EKWld7U=A;~@$QFn5^B&~7nR{I)#8XUTK@GwSDX^CMw+t<+6u$Vba
zP2dmMhjAJ>jOIq}TJ0uZ6FyZZQGM|}PtUY$Yor+Mlg$}^u2Or;e3M7Khr7i%FS##K
z0n6yy(GGR3Ba}AlFb`p{biAC|%ZEMQ_n+<!n=sWTzVx;4K90+X&ukd`Xf*T7O;nFj
z@v1n$z<scxE{gjMd~P10z0&m@9pdI587}ZTbfbKNhaSLJ<wAnu=lrJ6&Iy0;;EFLT
z55CJ|8;<0Ng()P?Rd4|!P$Bttrrx(?-dyKZLVZ7R$q=Mr(*tBOZ%LHO+@uS+26l%n
zN9WSV>V_hu>$OgNYA;c-uG!ML@_nQ5-kwbi*9<wXn?CqrW>n{`w=qV%a7v0W%(|<l
zrCdvS%Ol~cIbQl&bXbKSAr^2Cyg|DIbBq!jhNRu!oa(RK0ez1201jMP-mFg;wPClr
z+Ay944h_}6x$fO8!}I<!X^NXs)1J;h03Nu_eW0j$imm1yOSN&%4N<<w^rOGi=gLzN
z0X`w4EZ6B|cudh9X36|>Jt`*Y<rUT(1<NAyMS1GB@t7dxLaB(X)Zi~31L}}>BA9OA
z;mc6|%i^9!olIB%pf{sVU;GKuR!O{>r|CCWyP@L0Kg4wU>Lp5}X|~5nTR|KTPO0yJ
z_FHqkJ$d!KWyBsO9gyWWfZtB=2SjuBrKQ*{z;(1LNG#Z9EZ?;f%Lu9Mae!zasATz4
zQGV!rK9v{jrppzXhr&{}-qi6&rLA9++YgA=^UTg^B=7Hy?&9nqWNOv>*=eU#i_&7r
zi{{ohES~t3;0{3u%Nb8+IQvq_qBQH<$@c|0T5-T%9&EmbQ`ny=pC@N<B#9f%;M5iQ
zurC2-U*<tg)Mn{8*+nu2#imr!F_devmQ^`7f4A$VQynd_qk*}g$DQhbWA6m+f!mGr
z!?nDn5HHodQs&?C+T&l)+uV_4si7f6SL$XHHkk-;MBa<a+v?=lKk=rrrGhIon4Q6{
z9{7C<lBHC%aB3%OtJw38oIwN23MLPaeEM-i;+KTZI<JtWn#pbf89`Qy=uSeIdQ#(b
z-S^>z^zu#o-75jLv>5j_Eduuxr8q<*quN-p%)}1yCgCyE!HaMxeQAHgFH_>QW1%Kv
z&G%a*qt~q>Ce=z`f>Xjg_L@V^(1~o>yJ>N!+i84cZj)-+NORQ}qy}{0d5%R^7a57#
z_9SJ#Y@cjx$$LsX)?jUFlNA0}NL<Q!bu9!dQ#hw1uNh4;y*%upzr0bT$H&{Rey2@n
zgdIq@`_xB)?8k2b<=9yGhKje=9nGjEweLT%7cNHcuf+N-f17)gD8|>UIE#LDn7m=v
zO9NMGv6XW5QZTK*Id{zSb!EI2PFxP(M}EGjo{ikmQQ%J;=~}*S0^18P`KeZW$|vrZ
zneDqDFt+|hZ(}iX_nzi#m4?t1-ivq3JXkoh@*9!9;T9p%ABXh+IwCcEAko~C*K>br
z!7+03!VD0SWCF<9r}9<@c!7j;$m&n%wKERbm8q{~l?BJqx629yM7UiG)+5pF?c9sk
zc36*X*yUUP3}HBe#*xFr39>!OOUl;%>jaj!y!cMP`nD+IbKcJWLQ~YjjdlIFD!GQa
zR&kjkT#sw4Qk>4Eq3DdvYWB3LXJ44^$iTzVFf3IKWlr*zQ#ZgO{k60t0NR=^M`RtG
z<cq@}nR9`EGJbyoeK;2*PbaJ~E>KH?sDSZsvxDK_t{%!%BMQXUDG-7Vgo8XSjPwx{
z4>fcU#?KoHAP_(Sik611UU(lXZy>@nC=iDZKvJN7s6b<=H3@-$sVO@v*cg(qBqbLW
z{88+G#`;UD1GxhMYI+7nB#1xC3}|B!q@;rOMdN(T02C0w8m4GL^fZA&U{G@?)?Eb-
zF^1!V6aW?&Q{zA^#KjbaKw7|6T|7+mC=@d*14UCisx?)`@2^b%ZU9pLi|hM02`EnW
zA^v|6z<+Ck+L~nWzw38YJ8=q`NYeA7l6;ROK;WP2zfr#b!2tggY(R>tjlYLW5G24B
z2lTZw#1b(O6{z_?`g2tOBjph1V|1hy!bxQ6Q9dLesEsPYm?Y=qt88UwV~8YJVu=6j
z>fdku)m>FZ6C<dKBE-!Ct%|k*8lwz-U8%lERU|A>)zeSiL<Ns0kO@F{1jWL@pGZ<d
z1|Y0afo=-QRC6DU2Qdf(@WvY>R85^>XeeF@@2w7mS$Y05>QUYQ3T8pTs|C6FtC*os
zazG~{(S)Rc$Dq(&K?-P3q#A@0fcG{FG=PBMK}Tri(L(_IeLnuz_Gn!G22g7MU$D&o
Hz%%~>(YA3k

literal 0
HcmV?d00001

diff --git a/tests/fixtures/encrypted/password-test.xlsx b/tests/fixtures/encrypted/password-test.xlsx
new file mode 100644
index 0000000000000000000000000000000000000000..bdce29a8d9576fcf1c40d7be4e6d060df4be5325
GIT binary patch
literal 15360
zcmeHt1yr0_(rDwsU4y&3ySuw<<I=bW4-%Z<E+M!Chv1Ol5(oqc1h){}o!87vc4v3z
z{X4twKj;1LysbXf_kLHZZs~XXbbXpYUn!_1SOxqY2m_!150CHw*x!vqf%_0YpV0sS
z$lsnH9v>fn4#R;v&%g*C`Vag+pn-ev8KJ@Uda~h@tzmxaKL@u@b5Do>?jwQ`35>{K
zL;)iz7{M+8KnEiR7%{<!1x9Qz;(!qsjCf$g2O|L(pXd|*)`GkLf&U>IPzQj(A9nyL
zKnmalZe0OBU@QH3zyW*APf?!y<iCQI@F2~%^z#r;c_ip5QGnrztHm!|ox$8K0YHE%
zzzjTM5B|0WKmRiz2WO$5{GZx?w*F}z9*kGyzpjJ@NP;=JgHZ$E{0nDGfZMNAf9e|#
zoDqNWe~P0&0%woFU*t~c`?dZ38f~zQu3(O~U@JKNe&SE|(EyMTKl%Sz`JYHD{zm^P
zpFhRslTDu5pLyVC9)EiN?}-1WeDW0kM8ENQI_rPn|GowU!S+xBd*4$Gg1~+V0$72g
zff*q2i$6Zag)P`GpL~@04<qHte|{pk`!B=OUEyiJ&2Q}!0a7sjv%J6#UZe3#zIuuq
z>%Uw7Yc&01WP>;T9sK0~XXt5ywO|J3<_6Xg2;6rB)6xaw)A^s`$qyh6{_p|B036_!
z75vQv-~w=i&n6A-ae{knzl@24H7N<6d72dikF$Zb%?2J}1@Hjae_7`bPzKZcvv&Dg
zUHvNiAD#85ou1mC@Q*rD0?X+9bNZjQ1mOJhlslg84Nu<uPd9)UJlz|Aa`;F7a$pTV
z>G#h8Apqi+{P&cvet%c}{qCUbU-RzI_V;uDr#{5_Z{**n_k`$ghxkW3{mb(I<^A*I
z%YOtv<^H4h&p(s@AJ6x<95{c||C8;X-m8BE{}q2&@cZ5soMRlpUiYuwJ)U@B{2Tgz
z^3}oL4*Ey2^RHNd7|j3Y@1Q^H|4({?e>%i}6Fl+#3I7hs|J}Xi&(MMfK>y;)f+F6I
z4y2xzu5Pv<Cn0h+W>#`iOD78u(ALRXh+Ioknu(X3)Xm+@325d3a<UX6_px*%7ZFBA
z5CpGs^>KCwZzBbhaB>qOw{drO=4WAXv#_yrG;?Eiw6$;rxq+<QnJqw$EFdc@TMJ7T
zc2-tymcMQ#|8+0F^S`j$-qJ_vSKc637H2azH!qMY@FyXQf0vMjrK`Iw_=slimgK^M
zU>=fY?q;NJW)AKew!UDw*|^C`%^g4%_J4f@FA}$P2Mf;51)j7qbF=w%j+>L5)WX);
z#?n>H!5ZXh>u%#HL@p+!@pDwd#?02~7ybV1DS?2N65<lS68YUG4OuZRHg>Q9z{k)w
zbMOG4L(D=^#?wsar{Dai{f`Fzqk;ebG;l=zYnI0yI!=%u6ZkH$>OI68q?$X|a;nPD
z9fdvTE!OZ68We|?>l_~iC7FY$rwxJbPbJTv=VGbygG^J+*eLb3?52;Fq<>Q0B6T0e
zZV-kgvUIr(+mefqN8C>9J4d)xyC(nmBBs<F2^UKg+q=yPA~*(l?$;kX(%@^(_h)jB
znZ(aO#l)yTOeDS~sblVEM_+6`zEk)S%yW8;{l3P0$;&S{xWq%3Y?{;1d~sB0=}q1@
z@k9#Px_yPWa;|<IOO(164O=JpnXK|}=lqZGDUQ2Iphtgj)Q3hD(qb_ydQJUEX&KAh
zu|4rLc@W;|w8tiv9<Td=KVi94P|BZdi5N(;s9L^DuaP(M<pz^Lkcpizj^rg{#q4`1
zPQCnx)-u293ag5#AIj;Zov33u?ID%%ffZ)5xBac!7%Na+P&3Ef%b16-J8q`+h1HN3
z(@?ddDy=B{EF_z^qZO{Ak9=BdZ%L`73*MPo92Z5JE$hFCW(?y=RN!gSDIGO3ze9Fn
zj~|s=)9sf(n#|X+#1f4O*Qn?PsE2Nod8?r=T+n;GRe=xD!Hbao3}>Lf%$dKv#;QZT
z&5Z`(!sRVh$0an;w|y9dheo<N=&vR>VIt*`?KXyO5)Rq!*;q*$DymU+Uemy_=G7)>
z;9Y%qsZ*i#3248Z>0fFPirvPiL-cWD!_D`W7d?B~!vFhv#sy`vdQnY);KH)_j*Sas
z&D-!;YUNew*6$zkh0TWuO^p_}z3jx;(JQ2naX-iT^{2f}o{`nHBEZC!G~(zZZ3r)V
zel3bYd`pTb4VBOo<6*5IaIh_mx|_U4^^Agp!L&)Y>~khOBD}dQCB#C{C4D_=wHX0s
zk$>q%iP^HyMzd5wntx8hkJdF}Q5A*lDpzIM)&r0tCMu>~t?Hp{$o^D&h32}&bZ@UD
zK6)G?as7=nHn)-=QnpRdsSI3Su9r6O;28%%Yr`HR53cGl)If`sSd1nq_Lic>p1rC{
z{mS!YWSPnJLKK3sN}C>QcPm{F87b82whJh>nxZ1Uv8mlpvDRa=fV?~1MHm}>*}<}!
z=11m2*>!VDn&J_mBpW8o^z$8uJPGcVc#FyA+EQO392=uLgRJbLn@z1pKiXsAYj;*}
z?V>_asijH70KV{o&Nd=$t$LF?wUAT$_4H{)2<y|qgFK=l$N{K&qB`H1{Wr`;^qIk5
zYW(elv=#PqH$AWExj{QB)Y)iX<JDZfBp^v%y+k#ESwdVDr<gJ@*&ybjP9)|z4KI&p
zsi}67f6!u|OoLmF{DvR|*+$71k6L4n5jhr5FVt#-!cZRMxmfrq`O{%z_Eh<B=z`!W
zd-RD`h6IrOlW<k8MZy&;tzY`gb?r<{TJa=CzFi7VR*|_c=9;0hv%U6n4C=Pt@@&le
zO{k^dcin4eW27nF^taIElcd*GBOKbVf@*Q!64n+ex>qc0*i)PWCFny$N;L8A<ZLJq
zP06dtQRd`l$Ly;;n^)5_ZGolntm&7AjxvGYkB!6!1f>bKnz!_8MwJy>KFzUbVd}vs
z*B1tMF|dB~#NFok*3_XYuzX?^<5#oj7A#3NcU#y>O#K6u*-9(^dJ@>TLn)!b%(^5g
z`pT3}4yikEN@u0SvBbh`KJ=@)O(Ves<KT>tKH(VZs%)jJ(QcLSH;RHTnTgj%sx?#F
z=aNt=80!5>d>sWYwUrle2Zr5Lmkt)2-JYpNKx=5RSmPVTZRFxm`3M<5<N@3CDMPuv
z*jASVG<9>8ytm#T3cgX5-3f>fl$(b4-^J`D;)FM<>arkgfO2~iP?f9S4YVwc0<u$1
z(O4s_o#@i5hM8=H9XjMKUz^aN#)U^gR^Q>2;#++q${8<&WwE-g<h8dEv7xad1s=Nq
zPY`Kev8(G?&oTkof(DI>%Q&Z0(&MUC?sB>)YT|uxGbGOXm`>rihwKI^33Yj?f%>?j
zXhH7bTIfjW^uDx5+llJ000t*%Ec^lUFAL#)M2C|HqpnF8&{&#?jpfCVg7Sl&vpG^H
zO5t*qb`wgCz2BIn3w@R=WnAERHmqQP=L~z;TDedvL5m$|hNR^%0nL{`i|6x>=4^NE
zr~u}CkdzO_K^{#kQ6b^IzTdE$=72NKCetu4_WgLqj#}-qoCnL|-st-QEw*n_^|^(-
z1YK=OWDs`^{I%m(qfEAS);o2+wnH~S^NomzL>OTKw|nO;iWF+P{f=$<^s%XXh95NA
z$8wG@sB!7}InN&Grc%-vrRSh9r*ws@hIv!=W8?f&a6U|%7@e7Nj`bY5uqbpP9wb`X
zm(HR(ZzMQI?^hJP%7iA(Q>JYVRv48oy2x9EpdPaEe1i<_yewn#Zm@Ppk~ui_bThAy
z0b!sA=N-mjOe^)=jHw;QOnY5z*<6LbzWgN|I{s(7#LMjcBL2$&D=yTO)eO&S17bo?
zPZNP=ryQL?prWvC5{;1bh&)`1g8L@h*Dpt?D)H3i+2drzJ2Fe08q|!N#Wse4E%H+V
z3-cBqw_%Tv*dZAYzGzDvgc8h3nF?0D5QH+HbJaNHVT^V=cFI&h5r2NDI?I9%<fzct
zQYOOlWm`VT{mgD0MT{xZiOUi=@OH`3<>QxVc=YYwLvQr`py%%ETimU**3F_tz|Sgc
zP~*u$)%Grcw9+rByD{5WQ6Yv|^_kcXf`a@9-=#?CSGM{4MISR66&ji(RYwM$uT(9&
ztl_kGi))QU;aBx$8rXd0LJm@dhQeK<nngCFZ)IXcV&FL}IYBj4d-(zKRLa_b%x>UE
zKBGvvZP?K15i%61l<#Pr!7wztNXH5(u2#_t6>*;piBOFrAuo0F1by_y5NsS2VUD!)
z?c;kNdIJXlQ-TK=iXSJVw(Fl^Lh&_^-9WhEw&#)SabNWD^)YkPB48oZkY#g;H=HXJ
zDK|iQPU;5R_~J?PYCDW7Sn!h?O;r+CNMy-n(NtTN;U77XG$)YL5msar&kz+0aIN;N
zB;``6gMjfg#zE%!-0$8uPo_8t)yYHM%HFiE*@RQm7p_EHteWs*rOoNn<($fTM6y+0
zI&v5i6WP`_1HNa?vBaV>Z4Quf4uo9n7U$bS!g+m&(?>muYAmyLb+qEzoVHR;7%oHy
zcqRk9?=A0JBJjVHju9=Ix|yR{6H-wVKrKZZfk^kF{C5e4)K@&@k)a^`JAi^}^bh7-
zFiQtwgkQ~5jb$83`3`tIuk-D`K2j(6tmkZ#pj=NCF^PV;@XU?SC6sjZJ2+435tPn=
zj2DT_2z#C&c3vx8Nz<VqQBp73vQ|UZ`|^z%!jV+9-ztI5EEP%)e)J`BiRSERQc)Yl
z`y+-(2|{`%^O{_ZX9b340uQwq!?L-Jvc;@oWMuQY2*Lghyb=|+>l$=h{rQCfNEqQq
zJ-8SbCa)eNt8Z^MX4?qJS`?3#rtV29AwNSA!_+z0=HJud-Ns@a-*ZM_@*=k>D(e7W
z4F`P|wQhPdXyh%0Dc5LQ(w_gZ+-jDD-R2n;x(hM4ulK`e{z_rIJ(2M}m&Vap4!gw|
zg0qbz+JvsLYb&1aDe+u>;jH>A7{W46^C@wq(C-Xgn#(SlM)W#gJ5@7X$OW4(31Bl!
zY<c!|-xcu{hvbpsH@Dm>pSZLKG<b&Oz3&s7iI>oV!SD8)Xdx+QbXt)*pHZz=J~6~h
z&)PZA6<C2k5fy^29GyVlyZLb19gQWt$2Mo<=*tpEj%%5jl$Mi>aAMuZtY~k9wz;R_
z%|+qa3!K5ucXulv77t}uH_K%c)S~0?qSh2N*tO&&!Lkp8Y__0JdIk6XGh}hu3)Q@;
zXSi}k!k_rUgQ^iNKXeHeau;qPZ*_XiK9_S4SCgC>dxu^ej?p9X%Chd6c&~|rC~8o~
z$~w1Vvl^ighEb!?QbYIdqXuWdON83UGrZ{Gw|*=OgMf^b<n@PaR4iSLd8})AST6&M
z<eMFAW1HnN0n?^{9jzP{H;sA<$oyCyzbmt#VnI_@gGtZTmM?uTGmnRy^+;<dUGkx;
zSSVytickRW<+!=#`X#JCGJ1~FB#hBenEBCJitA{?I8$US34Msark5!ZM|hm;kx^0<
zTrKz!CClK7>vSMOl)(RW`Rv4HTfjqYfh57Vw&bpI+~$17<6cnPIlkfI1{bd`%~OSO
zelq~i7Np#}P-8lmL$MDlEar&nZ6LiiwyMq(6HT@}iZ%~w9^09mTQMv^+w6ord~A9=
zpZJ(F2m82fR)o(q(3tWz;w>hwmV`q!(y3(016&%gAWJz7T0vecjSyfFHbBW=>;M41
zFp;7u-aKFseG@#>S|P^`<p6@heFw|ax1^G9IRHVA8I+d-B4dyxkZIsJR8p&syLgE%
zsXj;pcLS`LL99Wu#;*t!jVbsHS_AO~k03;-GWIxsMCB!%io=anmXL@;O;wb|BG_3A
zL*si5s1y-eyh#G#w(T;C2E{z;)$3<Wq3&jQ@r&>TPOTo|=pR!q)IXwofZl0V8!J0}
zzh-}}vCK|iG#=aWe1~1vL%JX-8yBx@2A<%}gXJ^+SX=1Kdw43zpl_<T{Up=wZuzQ_
z68G51)%A$fHomuJY+{Ap--H@V1CpOr-mV9hEfdasdu6&hbyWEb>v`B_(g$KqNs*(a
z>bb^*SALx#)pK>HtZa8?Wzz#a4s#G9H8mdo_uFLn`01^+^2E&nFInrXVb0oUkhCxA
zs1#HxVh-osAT@KFA*3)Cyl0DIkjyzX-LG!wVVxhoh{t1{*zYb(7~UX>6d%-7d_`PO
z2+eQ<lKQ!`A>|3o1W@GhYpUOJWTD^$AJv6Zqwg%OkPDCO2{gEvt3MO7@fuMoHHSLu
zbcVGI&n40rRX7b~j1qdh{|w2mhW!mTKx_|ug-$?8b%nc>NY-nI1-!sXMq{rG6u^i+
zG(63hKOx5FLm=s#?^oP%HT!s;cQmXRx8K8nyqPOoEntrc_eo9+db!3ri~)UE%SA$<
z2r29JeFM`V13wO2($GY<>J>uctfI(iAsr}v7=CZ5g-`~1C;gqT%^a_sJNH`M0DNVP
ziXaH6`rIZMFYjwu$U#_PWTdTq!b_ADxVCtH!DKhR4J$EHk6BI*ueTfaMDgJ)r*e+{
z91_$jT0a;)2na*dB*qoVk4$Ox2-ag8v-FpZrqN*BBz0LB8Qc?@?htF%wP%E(PoffS
zv@c*C$eBxXbEjL{*QrSa^h%4EogpYJ2&ft}tpwmWaf!Rwi!BUSv0gf5*><*RS|Yzc
zrij>UM?vI*nitSB%^eN5<4#QYjIP9eAjyn%50B%*$LR-kp~+G?wk}&Z=yZ4U1+htZ
z`s7UQaea)^5B(Uhzun!POdn}|@8SDJ5@SLbRJ=Sk1~npKb|2S%Y33wa$-8vVHMDQB
zle|)NQg@=8us=t<uJI|b`AxrnZM97O)~m!*6xm)rI#RSBPIV2(t{wW>a}-%$QO8Tt
z>RWw~E76+oomu8lP^x51v~|N|&c+Cm=XtZKH09EKNFb)BwX=V$5t=->?zK|nx{_8w
z3_L4HY(IEIOBJlk63~OH%gZY8vDf;UWa=HN%9t2rr=M-mIX4lKi3Ini&O9r{BGJ}W
zQE0Mrh!vk59nq@&<^*e?0h^Tew<sRc@SK5iLc8ymj~k0kRUtx#N$tEU#f;I@d<}8&
zuiKqzN;5kpw6Pt7P^Z+phH_Qoof&b0*kpPc4v_o;RAx19qZtv7d<`PhWKo2&l&Xe7
z+f6kaNAvtkAr6B*zMl&*T|1-_&4P6vIm|cXa;{f*>m{dSx<}iDws23SMO=LJT8B7>
zRX0da^^NVz9NUTbW$r%8j4aA+Sv!e4sK4~EwtBUdR4?<=iok{R8ztAm`&%66LWsU8
ze0L`#iQA%E+XWP<Nh^*hwd8nzO80E-_*!M=@A9_fuu}^UpA!btUZcpsV{2ZE^vc?i
z8CI2Z^+?3)(*-pkwCk?S1+MC=1S_*9WnoZYY(u9z&pisUXG~6B)0HP_$@G7vDA_pa
zB8ukxXakAh-ciQGnRMJl)@NJW{}l$U4n<s4U1sI^JN^Ll_O9pAkCDtB3jiU9iSZbf
z@Iy+B4Ac!NlJ0W&a*j_S@Y}N+ow6OI=<5{z5!!jyfpV)yX1SC|B<y(ya?nW$E^w@#
zO*r;4#MqvVN!3WoviEeVNXedy2m<~CuoXC0&UzHybGxap@#!!sC#(Wf!q=HC_8TZ`
z-Y9%|gN6Y$834=B5t`p~&BbJgD3nWqGar9~jlQXO_J#6TK($t>x%4hZVg-k};?T+N
zjz@w@XjwNhbsQ>}VZV!7Mhm(d9`zND$v%yu=`3)3_4-@W%p^LcIFIusLi(=gF)TwY
zg58bU#h1Kzig3M{(6X1%m@;GADAQM=YdOXr25!AZ^pXZc;JB5hfoK-1OidB8QdO@$
zk`UYWSzty>rTV<e<O)SgKy3w1MZok3mBtALA@SvOM3RP=@P=~f`eo;na5+i}5$?6;
zH3Tv-s8h*%7V+Af2G13gq9swPlymlB$!H3nGCk%&(9-3U$omU~s<P+{Wh&?-^S~ND
zZsevjdU+T`uS^;h6yp<NX=5aJqnf5ogkm*fF01KdjXOuY%feLl=YwE*lz@T_(lQ_X
zuGcNCY0em)Ri2TY_VAI!`zq5mTl85#cR_IAivlT)@RvgS6S=nupII7kl^F(>$R(H@
z9y_KVe8Y{irgpHtcSF{GAwmAk61JT|(0MK%i}7N2oqXD=us7fkO3TI%dOZFP9lFvG
z2OuzRkwX~~0dfDnIIy_vZOOW_D*9UeN_F9jV!n)#cU)zdadhe5Lc(e&-ncUd8(pI}
z*V>p50b@Ta<wSO{7m%ZIDEO&Kt@|=`aQTM7V_AxZeJUW<w(6vFlN^~q`KqIwe=p#_
zkts0pIic|~B;IiTj?p6uUA;SWX5&mpPyaO2Vuic?B(h_KFNs}=U$P%dYLUQ!*)FJ&
zlB;QxK9;q(>s{BSa%tAAQ4nsd>Tupg?XhQob(+dK5&^Z^R{zMgdSBqe_XR7>^*&-e
znyo-6mYZmJPES}W6wE`BnNj0tY)tX*uyA(K>NDg0-$WZC#Jqt+QW7rS?|bfE<djaC
z>k2oiU^7J)d08&QFvLm?={w3CHsW-UmNfP(KYYdZ;G&UB9??J-e%?+yBz2f^?djGB
zY8vbmXK+(2i6dXHpw^`eBJc**loqdC*2)j(DGZh=k@TB&<>a%vEfk9G&e^5N>zDO=
zVZVtxmKS#B;<!%70Ps*IJjN0d0a?O&jFmnyAJ|k$Pd7XoF=;1U8J6J-+o?V04zvwA
z^)Z8?Yr%F`EuxV#`eFxQm&I4vGwfC#`HGb1jgHfYvKWqPqtHXu>N~c}b^W>Y?LlXT
z$co<Es1rk2RHbm<7(${cl)*>W@aISRUC}4Ptt25M+8|ARsFmAKR|n8HhIilbuZb9j
zgwPx;BuYmmLH$2$N?jpDKmlpl(O6dB?OW+5SLA8hycDy9J<nX3vZgPsRw*+#)#cEG
ze9jehf`s<^O7)}Rh1>aybtmXsvDqwk7W>q!&2#*Q2V*D+PVwqwOHvJKj)`e&)+5u8
z$P<VsZ9d$uW6e!F#$!Ju;2b{qd7}g=B|<QU)V$cdugHr{=`=Xf)6-2LBo0d|Bk4h|
zzO#CuM(CZofd@)1-pcN{m=j!&ztsJna7z10&Y9CZi$*@u)k0P|DiwIqO(UoYA-F#i
z-H*z6k<Nq@O5bs{EG?sEc3wH5@g~4X9@qQs%cJ~i&fJt~Wi%$J00;fq+2BjD(J$bC
z9cw<maI!uZ?}Po(B;p&#=&Qxb#KtuY+38VyajPa9Y9{+oKZ!U`$@n0i1r%YQGNiF5
zU+KVq5ay5f=+;(V)Y*~RJ=_hB7>mh@&GfIQ%%&6YkEQg_JC3zmSibW0b$`E)^+q><
zh<IbTJ!9XS54j!lXlyKT1`^JUkc0O*Ym{dWEW{iQzViXfgb$o+)57qE?Rf!H@5Ng)
zMUC&a&9_n-PV#=Zl`n2pAB%J*7M660x9eWAS~8cp3Db6U-tL$q%+?K+lawhi6gL`t
z<GqB)Zmd+Hfn7>~As?xVV`w9wC}&<5R77U?=l|M1I-I)GVcQu>Qg=(%^|0EM;FF{?
zFaqlGb}b7s8bk;`gE~aotOxDBg6oZ2G<s96Own3+8XxqP&QX^<xYdOiBHBh9vuqLs
zNs}Ly#yO(i(_>9IntyS>Jx30aEqver!Yd!EKto%os=UuPUO<Q1KjLC}?fPl{*baNK
z!#P#>o+l2=U#n@l;DGf<7FkX&hmK3ijJtu}TN~_G6zs0Vr~xt0ae&#bUX#|*?JnoT
zdcy7#_f-61$ODNFyuMx!1<3lVOVkc+P}^>ZWzTum@6LiHsi*-sA?}c&oZf1dQ-NQ;
zK6fwr_JQ%Nw-G&*-;hj`)RUIPLnn~I5;|y@eXPZ^cPvnYhns;!GV|mzeWv-d_s|s3
z2+^Ln97=Lk*0#c)sw9h!f5myJ>Y(b%Lk8>F2xvRC=3PuRMgVJKs@o+y*YgRkl*O&*
z^2a+bA#S92C6~-)bxtr&&S+SeTjeOET#>&$n=kjbnqKDoB+ql)fZt__xs3Om)rzJ}
zzjckLz|MHTGgrbBauyYBnUZ{KQQwG>?e!~|$>vp0w|i~aQH(L6a>09L8;rrP^9>V^
z8!FUn)NrAaTihA27Enz?t}j^=pz8{i3%PLF2}pfiJ%<ROk88*(nxvgy2!x!a9R?H1
z&NG_(sKdTzlzBf^q3Svya0r-mAxaDLpkl3OULnFus0_-KAQ8bZX+&@>;0otY4=as*
z9b_zfZS4QhXnB@k5OKqKxd41ECfiIFMf4`Gj~CzAS`#84;eGhq{`yIKVwIW0gmOJ%
zWmZPskC~Nxwc44z!ZyW5YWkX=XjQ#L^%!BZw!DLHl45`av_LazlQ_(!5PCp-uERM)
z_HLAt4y|hZ^x{sRIBI;k?wOX<U|@5600%;4k8G(+ke;_LPz=Z8G&DhO$g~h27^YMm
zH8N2UraQ*Hjz7AkZ(rKcmda<()uy8%plL0~2uYj&>MnpO_F@!<?Cl6BDZ_Rsv(}d4
zeoW@{N6XTWVk_~EaiHtP&X;m^&3m5~t&05Fi!V#aA}$S!J~(zOoU_M+^KMYjWELo)
z=4a4@0j48NB!OP4@39^UhNvN8gASC4R^VoxPVn1X^3{dg{kYIIQ?G6?aI9RZOFgSe
zBNod;OLHG!nQwAR1pRt)upn#E`!Td}{jf^WzN9Op3KySnt^^o_ULoDdyB-7w4C%--
z6Xsex^U)c$y#wI-aqXL!(&&9EC8(cMhs86?2u2>1Z_zn_QKl7g(|jef=yw;|oKHcm
zb9<c)ftvRAuz0uHga7!_?Le_Vbku92Rir5~jSbIE#|VY6#Uy3^&G&B`8J_msuXjy(
z7Ay(ZSpC!6$gol!68u(L#|i;U{#DynpZILFWSCTM(VPW}X$M8ta*@BG8pj3-U8Uw)
z$bLqVaKI5+bmJZ^?ysVm%>K-n?I3?vW`Fo`@WJX@d`+Km9^d<nEzdRp5>(bw7~y4?
zEJ9+hGV}Sxk0f8Vs&oeJSR!%N&M%1+>=<39gY*Hyvz2V<PDX9CI|`_zIY>B=NATg^
zBbQcVn~Sd7wyj+nTOam}tX}y>Zh2WDQ8!li8pp}iU6?{ZYV$Neg|=q-U$LS2@1ncm
zE48reM{KF2Q@+&8vKJ4GEO6vKGo`blOP2N<8ld@dC~XnKkaEJ~Dm>cVyItSGc2(1e
zz815EY=60gf3D1}%{Xww@r><Y*6!nimy=#d3*A8g(tT8yVPN`a%9Hr5-O=)9&ghmL
zHR9b8nQ}v9{TONiC~Zxy9j90E2mvTukaN$NYOtxf3MT<>ENLObez{`Z!u9E`m`+|U
z@cI;Rvj@~z`|{bwx|cy+d(P=XYDj(ivtc-TdHRTQ(S7K~J>S<#hUmtf$bGK;P>B0D
zH1PZtD)76;5DJD^YI%`HoxA%tt`EuH2)5ZO?I%-m<qp=NzHiZgug--md^yq?7uFT2
zvp?uBr2Wy7jmDx6dcA<ke(ju~-xT4|{~a1_Tg%Acf^PXt_Jgi{Mi25peS#@=BS?Db
z>o{d9L`-R-IAgp2iOQB|5PKEAVZ<5zFe*NsW~>8W)FU305|YBps{sBQjw~wNOd@VV
zxA$vlD%d@4sJ>dY`SSdc8HeoT4Hy{mZw(~5i!mw*Q5g<fw|B|wLTdFyvq_$zot+_e
z*g@7wbH(>>NS+j-ta(%*46&njydgBY;x7>qRNoAn`dHmrIfni0d2Rp6$s#Udxp&y%
zcsN5?tE?-9m}+%mC)|9gpIHWzsTAp%sOCv)p9khJD|c}=g}lZD&pwa0aNh*&53w?k
z(PVG2OaRFQmrt5;=#}2_{J=K%Cj#78%0)4_xOeoE%R_oMZI*j1pw%PD{!9``%Y4b#
z6AF#Q*>6l84W-sB-8zff*?AlZQSlVJlh0%B^CLUM+HPvJAP-nzA&x`NE{Ji~CzU5{
zF9b)lwO-py+&GnABX<LNsdbIm_>obtXyZ}&qtFY~tHvBIm$SXK9qi;`uRfK2?Q$xj
z#a~dS&XRfQ5|=}^>L{bH&usCDwzWI2>J9govDg<DyiTuym=G_0(aNb{PPW=fx8dH|
zs?T}O`skIR<=2LeOyX_H4NjNzeLs87)IBSJ#P%E#`p!InCN)G#(-k$$6EXclKfU%n
zK6NH07s9of8L|T9Vaf%NDnEwc3&Gd1@*$*It>Oe@*8ur*iqcepOv~oT8`-^FEWeUH
zoF@B&adp+RD&xwqGJ`eM>f!>okMrKqSl0_efkU?uG|Vq1)(fy+f=K;z@w$$bW?}G7
zYp`j1lpIsfTONA+(mT6fzWSgLf0{s>_i{j>OXk?*9u%(!zD9fc48J>?TEpXhuYY?w
zkQiVUqz(nFYYp}jb0P`$zlMSl6bvsze~Tv5l1zEOM1(5plQ3<^6R}BwVrS>}t+j9!
zN+!;zjAJpeRZFGS-MVeJ^Mz5SNSpT;6-6oBuzjj2^=|xR*D5~cI_`PC2<;sP>Za~c
z0g}$6BwfSoSP^LK8S>2bjReDlklq6Gqvex#g4&4g4S_JO8D-pK*E-Pn0*r-57*5xG
zx6)bb%n?62GkHvy&)V!{2i6ZvlM;ga@}W8ys}!{{oeZT7*wjKYr(uozj(rxdhz!Qd
z4}a*F;2bBvap5beB7DHeU1Y@fpQxZ2PQOZ_^JKioLo3Z1cV?xm{^-NyJ~dEaC7IkW
z77Wu26^o0jPZZsjez?d?HL_$QBzs)lhCQ(QCgzp?m~2TBor@pinic-+g2eevXBs12
zl;hS5+1`)f|2GsfImOe7{fFCG$|Lh%)rcX%XUlxg4`I+WGSMa&+yhEYt4+tQ3!qQ%
z)-7I&%jqCKI_1b}AJ6sqZ=;1_vP@EhzTOD63%1nfpz?#2kFfyeq1+eIgin5NYmaI3
z#bFpGlf@20W=P-(!7SwKWqRja61{4$$^h?+p=yvxj2;u2e`9G*s&y5R3aezrronRa
zN#86lalg=SwB7{d-;H<A(!y?cfP?B;;I!vX9*S5$Uv`lJ*8v*o+FQH@6>FYfk%=Sq
zohb9i_;e&T3o@Sd_}d=qHBG*cF)4;CD(%17v7b=D<E^sa%a)ON79)Qy)*jf7|6bbc
zMz>bEhZB2mv%MttnAbqq^fb66QVZj#-n|KU?A-Ez0N-l-t=f&pu0b<K*Vz2UtXKjg
zYdwQQ$HJavaA5c;Gr^GABDy{Wvy|ZTFI1-*h;pa5a+7{@6fmCjzCZBNgp`IWn(jgi
zRj-Dz1|(28p9NIOR&KE8uzl^gDGxCG8XsQo6Swnvz^JyCn1KIW#2~HVz2aNs(CUp{
z9i*U)`UwobTn=LAK-H3VbIz5z`syJbu`so|wWPIo5%M8XBTN=I8YPUmozW~JPCq8E
zwP8H?u)SZCZ6l$lhJ`5gaMc;amQwT<$p`iKbx|!fMy6aLMyX;RF05i5ipu9eZm=Tl
zk%ybm-D;iL`*{SKta2BNioB>?p?5y(R9agrDzAz@=|fL$k#|uPhB;SUyrz7!j?*g_
z)BncIN%)1O&zL*nK|RoXeec$Lx_B}*H4)|AIcIs3xX4zY(s+6`Z)fxh0n^Iy3Ds^F
z=}pjHhJc%P=?{{S0jjE|kxWLFE#pW#+&m371$Iqu9vyahM_FzQH6bB#7GXgkxMWez
z$=%W#TyyC2RL1#KplJz|bu_b3u=EikS5k5JcF>hj;&t*cw_~^0k+OH;bCH*Juw`SH
zwv+Q@;bUiTR@LQ_0fMBxZQQi=T;vt?)VVplt!4GC^%WHCT-7w~#DNNq407gnx@=Y&
z-j3S5++JYbf6ME)N<~>$T?cU<9YuQ<50E#=-I-HeN8eMD#Y5W1(cRtJ%FWB0%ZlBX
z*FwphO-e<XUD3f=ip5*gQJYUfPTN!6!(KsC!UZJhr3cjXk(71?+3~sBh^hT1DY*3V
zFEyZUzm#kK<&o6G)%M>l0{u%hsj#3k|6lY6)*Y#vv#pZ^$ivAUTnWnh1iuz#{<RqN
ze?o1jBa6GDyN;ZgvMi^UC8q*VjZMqkT<mY`qiyL5u5z_>l?7L;$~ifEfaS5Xa8w3?
z?@p>LW@gGZtorVD3U<DKYt`TH`pvplUJB+8=8CG;I$XZq=9W@yns&}?GCJJOj+*LD
zJStr7jzAt&2RBXyZ!;TCNp?<U7ZnR}br(4m3myh94_OZmbv7GmGaX9@OBWE2p1Y)l
zt2(>PlXd^<OJKeK#>_)S!_nK$*-P4oLD9|K#f44I!%a)VO;=Ax!%9IK>{HGzyuMO$
gAU?3PPl3Sld;j>mN3gs6t^is1&lF4l4_x!V0P-Dh1poj5

literal 0
HcmV?d00001

diff --git a/tests/passwords.rs b/tests/passwords.rs
new file mode 100644
index 00000000..ea3fa42d
--- /dev/null
+++ b/tests/passwords.rs
@@ -0,0 +1,35 @@
+use anydoc::{ConvertError, Format};
+
+const PASSWORD: &str = "testPassword";
+
+fn fixture(name: &str) -> Vec<u8> {
+    std::fs::read(format!("tests/fixtures/encrypted/{name}")).unwrap()
+}
+
+#[test]
+fn encrypted_ooxml_converts_with_the_password() {
+    let docx = fixture("password-test.docx");
+    let markdown = anydoc::to_markdown_bytes_with_password(&docx, None, PASSWORD).unwrap();
+    assert!(!markdown.is_empty());
+
+    let xlsx = fixture("password-test.xlsx");
+    let document = anydoc::to_document_with_password(&xlsx, None, PASSWORD).unwrap();
+    assert!(!document.blocks.is_empty());
+}
+
+#[test]
+fn decrypted_content_decides_the_format() {
+    let docx = fixture("password-test.docx");
+    let document = anydoc::to_document_with_password(&docx, Format::Excel, PASSWORD).unwrap();
+    assert!(!document.blocks.is_empty());
+}
+
+#[test]
+fn encrypted_ooxml_without_the_right_password_stays_encrypted() {
+    let docx = fixture("password-test.docx");
+    assert!(matches!(anydoc::to_markdown_bytes(&docx, Format::Docx), Err(ConvertError::Encrypted)));
+    assert!(matches!(
+        anydoc::to_markdown_bytes_with_password(&docx, Format::Docx, "wrong"),
+        Err(ConvertError::Encrypted)
+    ));
+}
diff --git a/tests/snapshots/snapshots__encrypted__password-test.docx.snap b/tests/snapshots/snapshots__encrypted__password-test.docx.snap
new file mode 100644
index 00000000..bd8df238
--- /dev/null
+++ b/tests/snapshots/snapshots__encrypted__password-test.docx.snap
@@ -0,0 +1,5 @@
+---
+source: tests/snapshots.rs
+expression: output
+---
+ERROR: document is encrypted
diff --git a/tests/snapshots/snapshots__encrypted__password-test.xlsx.snap b/tests/snapshots/snapshots__encrypted__password-test.xlsx.snap
new file mode 100644
index 00000000..bd8df238
--- /dev/null
+++ b/tests/snapshots/snapshots__encrypted__password-test.xlsx.snap
@@ -0,0 +1,5 @@
+---
+source: tests/snapshots.rs
+expression: output
+---
+ERROR: document is encrypted
diff --git a/wasm/README.md b/wasm/README.md
index a2e0dfd2..ed554845 100644
--- a/wasm/README.md
+++ b/wasm/README.md
@@ -34,6 +34,9 @@ The package is built with `wasm-pack --target web`: it loads with a plain `<scri
 
 Calls are synchronous: wasm runs single-threaded on the calling thread, so convert on a worker if the main thread must stay responsive.
 
+Password-protected OOXML can be converted by passing the password as the third
+argument to `toMarkdownBytes(bytes, format, password)`.
+
 ## Errors
 
 A conversion throws only when no meaningful Markdown could come out of the bytes. The thrown value is an `Error` whose `code` names what went wrong:
diff --git a/wasm/src/lib.rs b/wasm/src/lib.rs
index 5a710a5b..882847e4 100644
--- a/wasm/src/lib.rs
+++ b/wasm/src/lib.rs
@@ -99,8 +99,20 @@ pub fn format_from_path(path: &str) -> Option<Format> {
 ///
 /// Throws an `Error` carrying a `ConvertErrorCode` on `code`.
 #[wasm_bindgen(js_name = toMarkdownBytes)]
-pub fn to_markdown_bytes(bytes: &[u8], format: Option<Format>) -> Result<String, JsValue> {
-    anydoc::to_markdown_bytes(bytes, format.map(anydoc::Format::from)).map_err(convert_error)
+pub fn to_markdown_bytes(
+    bytes: &[u8],
+    format: Option<Format>,
+    password: Option<String>,
+) -> Result<String, JsValue> {
+    match password.as_deref() {
+        Some(password) => anydoc::to_markdown_bytes_with_password(
+            bytes,
+            format.map(anydoc::Format::from),
+            password,
+        ),
+        None => anydoc::to_markdown_bytes(bytes, format.map(anydoc::Format::from)),
+    }
+    .map_err(convert_error)
 }
 
 /// Parse an in-memory document into the document model, which also carries
@@ -111,9 +123,18 @@ pub fn to_markdown_bytes(bytes: &[u8], format: Option<Format>) -> Result<String,
 ///
 /// Throws an `Error` carrying a `ConvertErrorCode` on `code`.
 #[wasm_bindgen(js_name = toDocument, unchecked_return_type = "Document")]
-pub fn to_document(bytes: &[u8], format: Option<Format>) -> Result<JsValue, JsValue> {
-    let document =
-        anydoc::to_document(bytes, format.map(anydoc::Format::from)).map_err(convert_error)?;
+pub fn to_document(
+    bytes: &[u8],
+    format: Option<Format>,
+    password: Option<String>,
+) -> Result<JsValue, JsValue> {
+    let document = match password.as_deref() {
+        Some(password) => {
+            anydoc::to_document_with_password(bytes, format.map(anydoc::Format::from), password)
+        }
+        None => anydoc::to_document(bytes, format.map(anydoc::Format::from)),
+    }
+    .map_err(convert_error)?;
     serde_wasm_bindgen::to_value(&Document::from(document))
         .map_err(|error| js_sys::Error::new(&error.to_string()).into())
 }
diff --git a/wasm/test.mjs b/wasm/test.mjs
index afcebfcc..41fd209c 100644
--- a/wasm/test.mjs
+++ b/wasm/test.mjs
@@ -23,12 +23,18 @@ const RICH = await readFile(fixture('docx/handmade-rich.docx'))
 const CSV = await readFile(fixture('csv/sheet.csv'))
 const PDF = await readFile(fixture('pdf/text.pdf'))
 const ENCRYPTED = await readFile(fixture('malformed/encrypted--errors.odt'))
+const ENCRYPTED_DOCX = await readFile(fixture('encrypted/password-test.docx'))
 
 test('toMarkdownBytes converts in memory', () => {
   const markdown = toMarkdownBytes(RICH, 'docx')
   assert.match(markdown, /\| Quarter \| Widgets \|/)
 })
 
+test('password-protected OOXML converts with the password', () => {
+  assert.ok(toMarkdownBytes(ENCRYPTED_DOCX, undefined, 'testPassword').length > 0)
+  assert.throws(() => toMarkdownBytes(ENCRYPTED_DOCX, undefined, 'wrong'), { code: 'encrypted' })
+})
+
 test('toMarkdownBytes detects the format when none is named', () => {
   assert.match(toMarkdownBytes(RICH), /\| Quarter \| Widgets \|/)
   // CSV carries no signature, so it has to be named.